Track vulnerabilities like this one. Sign up free to get alerted when software you use is affected.
9.8

Qualcomm Snapdragon firmware permits network packet injection

CVE-2020-11264 · published 5 years ago
Summary

Certain Qualcomm Snapdragon firmware versions do not correctly check some wireless messages during the connection setup, allowing an attacker to insert any data packets into the network. This could let unauthorized users interfere with or monitor network traffic. Apply the latest firmware updates from Qualcomm or the device manufacturer to fix the issue.

What to do
  • Update google platform/vendor/qcom-opensource/wlan/qcacld-3.0 to version SoCVersion:2021-10-05.
Affected software
Ecosystem VendorProductAffected versions
Android google platform/vendor/qcom-opensource/wlan/qcacld-3.0 >= SoCVersion:0, < SoCVersion:2021-10-05
Fix: upgrade to SoCVersion:2021-10-05
– qualcomm apq8053_firmware All versions
cpe:2.3:o:qualcomm:apq8053_firmware:-:*:*:*:*:*:*:*
– qualcomm apq8064au_firmware All versions
cpe:2.3:o:qualcomm:apq8064au_firmware:-:*:*:*:*:*:*:*
– qualcomm apq8096au_firmware All versions
cpe:2.3:o:qualcomm:apq8096au_firmware:-:*:*:*:*:*:*:*
– qualcomm aqt1000_firmware All versions
cpe:2.3:o:qualcomm:aqt1000_firmware:-:*:*:*:*:*:*:*
– qualcomm ar8031_firmware All versions
cpe:2.3:o:qualcomm:ar8031_firmware:-:*:*:*:*:*:*:*
– qualcomm ar8035_firmware All versions
cpe:2.3:o:qualcomm:ar8035_firmware:-:*:*:*:*:*:*:*
– qualcomm csra6620_firmware All versions
cpe:2.3:o:qualcomm:csra6620_firmware:-:*:*:*:*:*:*:*
– qualcomm csra6640_firmware All versions
cpe:2.3:o:qualcomm:csra6640_firmware:-:*:*:*:*:*:*:*
– qualcomm csrb31024_firmware All versions
cpe:2.3:o:qualcomm:csrb31024_firmware:-:*:*:*:*:*:*:*
– qualcomm mdm9650_firmware All versions
cpe:2.3:o:qualcomm:mdm9650_firmware:-:*:*:*:*:*:*:*
– qualcomm msm8953_firmware All versions
cpe:2.3:o:qualcomm:msm8953_firmware:-:*:*:*:*:*:*:*
– qualcomm msm8996au_firmware All versions
cpe:2.3:o:qualcomm:msm8996au_firmware:-:*:*:*:*:*:*:*
– qualcomm qca1062_firmware All versions
cpe:2.3:o:qualcomm:qca1062_firmware:-:*:*:*:*:*:*:*
– qualcomm qca1064_firmware All versions
cpe:2.3:o:qualcomm:qca1064_firmware:-:*:*:*:*:*:*:*
– qualcomm qca2062_firmware All versions
cpe:2.3:o:qualcomm:qca2062_firmware:-:*:*:*:*:*:*:*
– qualcomm qca2064_firmware All versions
cpe:2.3:o:qualcomm:qca2064_firmware:-:*:*:*:*:*:*:*
– qualcomm qca2065_firmware All versions
cpe:2.3:o:qualcomm:qca2065_firmware:-:*:*:*:*:*:*:*
– qualcomm qca2066_firmware All versions
cpe:2.3:o:qualcomm:qca2066_firmware:-:*:*:*:*:*:*:*
– qualcomm qca6164_firmware All versions
cpe:2.3:o:qualcomm:qca6164_firmware:-:*:*:*:*:*:*:*
– qualcomm qca6174_firmware All versions
cpe:2.3:o:qualcomm:qca6174_firmware:-:*:*:*:*:*:*:*
– qualcomm qca6174a_firmware All versions
cpe:2.3:o:qualcomm:qca6174a_firmware:-:*:*:*:*:*:*:*
– qualcomm qca6175a_firmware All versions
cpe:2.3:o:qualcomm:qca6175a_firmware:-:*:*:*:*:*:*:*
– qualcomm qca6390_firmware All versions
cpe:2.3:o:qualcomm:qca6390_firmware:-:*:*:*:*:*:*:*
– qualcomm qca6391_firmware All versions
cpe:2.3:o:qualcomm:qca6391_firmware:-:*:*:*:*:*:*:*
– qualcomm qca6420_firmware All versions
cpe:2.3:o:qualcomm:qca6420_firmware:-:*:*:*:*:*:*:*
– qualcomm qca6426_firmware All versions
cpe:2.3:o:qualcomm:qca6426_firmware:-:*:*:*:*:*:*:*
– qualcomm qca6430_firmware All versions
cpe:2.3:o:qualcomm:qca6430_firmware:-:*:*:*:*:*:*:*
– qualcomm qca6436_firmware All versions
cpe:2.3:o:qualcomm:qca6436_firmware:-:*:*:*:*:*:*:*
– qualcomm qca6564a_firmware All versions
cpe:2.3:o:qualcomm:qca6564a_firmware:-:*:*:*:*:*:*:*
– qualcomm qca6564au_firmware All versions
cpe:2.3:o:qualcomm:qca6564au_firmware:-:*:*:*:*:*:*:*
– qualcomm qca6574_firmware All versions
cpe:2.3:o:qualcomm:qca6574_firmware:-:*:*:*:*:*:*:*
– qualcomm qca6574a_firmware All versions
cpe:2.3:o:qualcomm:qca6574a_firmware:-:*:*:*:*:*:*:*
– qualcomm qca6574au_firmware All versions
cpe:2.3:o:qualcomm:qca6574au_firmware:-:*:*:*:*:*:*:*
– qualcomm qca6584au_firmware All versions
cpe:2.3:o:qualcomm:qca6584au_firmware:-:*:*:*:*:*:*:*
– qualcomm qca6595au_firmware All versions
cpe:2.3:o:qualcomm:qca6595au_firmware:-:*:*:*:*:*:*:*
– qualcomm qca6696_firmware All versions
cpe:2.3:o:qualcomm:qca6696_firmware:-:*:*:*:*:*:*:*
– qualcomm qca8337_firmware All versions
cpe:2.3:o:qualcomm:qca8337_firmware:-:*:*:*:*:*:*:*
– qualcomm qca9377_firmware All versions
cpe:2.3:o:qualcomm:qca9377_firmware:-:*:*:*:*:*:*:*
– qualcomm qcm2290_firmware All versions
cpe:2.3:o:qualcomm:qcm2290_firmware:-:*:*:*:*:*:*:*
– qualcomm qcm4290_firmware All versions
cpe:2.3:o:qualcomm:qcm4290_firmware:-:*:*:*:*:*:*:*
– qualcomm qcm6125_firmware All versions
cpe:2.3:o:qualcomm:qcm6125_firmware:-:*:*:*:*:*:*:*
– qualcomm qcs2290_firmware All versions
cpe:2.3:o:qualcomm:qcs2290_firmware:-:*:*:*:*:*:*:*
– qualcomm qcs405_firmware All versions
cpe:2.3:o:qualcomm:qcs405_firmware:-:*:*:*:*:*:*:*
– qualcomm qcs410_firmware All versions
cpe:2.3:o:qualcomm:qcs410_firmware:-:*:*:*:*:*:*:*
– qualcomm qcs4290_firmware All versions
cpe:2.3:o:qualcomm:qcs4290_firmware:-:*:*:*:*:*:*:*
– qualcomm qcs603_firmware All versions
cpe:2.3:o:qualcomm:qcs603_firmware:-:*:*:*:*:*:*:*
– qualcomm qcs605_firmware All versions
cpe:2.3:o:qualcomm:qcs605_firmware:-:*:*:*:*:*:*:*
– qualcomm qcs610_firmware All versions
cpe:2.3:o:qualcomm:qcs610_firmware:-:*:*:*:*:*:*:*
– qualcomm qcs6125_firmware All versions
cpe:2.3:o:qualcomm:qcs6125_firmware:-:*:*:*:*:*:*:*
Showing 50 of 127. Show the rest
Ecosystem VendorProductAffected versions
– qualcomm qrb5165_firmware All versions
cpe:2.3:o:qualcomm:qrb5165_firmware:-:*:*:*:*:*:*:*
– qualcomm sa415m_firmware All versions
cpe:2.3:o:qualcomm:sa415m_firmware:-:*:*:*:*:*:*:*
– qualcomm sa6145p_firmware All versions
cpe:2.3:o:qualcomm:sa6145p_firmware:-:*:*:*:*:*:*:*
– qualcomm sa6150p_firmware All versions
cpe:2.3:o:qualcomm:sa6150p_firmware:-:*:*:*:*:*:*:*
– qualcomm sa6155p_firmware All versions
cpe:2.3:o:qualcomm:sa6155p_firmware:-:*:*:*:*:*:*:*
– qualcomm sa8145p_firmware All versions
cpe:2.3:o:qualcomm:sa8145p_firmware:-:*:*:*:*:*:*:*
– qualcomm sa8150p_firmware All versions
cpe:2.3:o:qualcomm:sa8150p_firmware:-:*:*:*:*:*:*:*
– qualcomm sa8155_firmware All versions
cpe:2.3:o:qualcomm:sa8155_firmware:-:*:*:*:*:*:*:*
– qualcomm sa8155p_firmware All versions
cpe:2.3:o:qualcomm:sa8155p_firmware:-:*:*:*:*:*:*:*
– qualcomm sa8195p_firmware All versions
cpe:2.3:o:qualcomm:sa8195p_firmware:-:*:*:*:*:*:*:*
– qualcomm sc8280xp_firmware All versions
cpe:2.3:o:qualcomm:sc8280xp_firmware:-:*:*:*:*:*:*:*
– qualcomm sd_636_firmware All versions
cpe:2.3:o:qualcomm:sd_636_firmware:-:*:*:*:*:*:*:*
– qualcomm sd_675_firmware All versions
cpe:2.3:o:qualcomm:sd_675_firmware:-:*:*:*:*:*:*:*
– qualcomm sd_8cx_firmware All versions
cpe:2.3:o:qualcomm:sd_8cx_firmware:-:*:*:*:*:*:*:*
– qualcomm sd460_firmware All versions
cpe:2.3:o:qualcomm:sd460_firmware:-:*:*:*:*:*:*:*
– qualcomm sd480_firmware All versions
cpe:2.3:o:qualcomm:sd480_firmware:-:*:*:*:*:*:*:*
– qualcomm sd660_firmware All versions
cpe:2.3:o:qualcomm:sd660_firmware:-:*:*:*:*:*:*:*
– qualcomm sd662_firmware All versions
cpe:2.3:o:qualcomm:sd662_firmware:-:*:*:*:*:*:*:*
– qualcomm sd665_firmware All versions
cpe:2.3:o:qualcomm:sd665_firmware:-:*:*:*:*:*:*:*
– qualcomm sd675_firmware All versions
cpe:2.3:o:qualcomm:sd675_firmware:-:*:*:*:*:*:*:*
– qualcomm sd678_firmware All versions
cpe:2.3:o:qualcomm:sd678_firmware:-:*:*:*:*:*:*:*
– qualcomm sd690_5g_firmware All versions
cpe:2.3:o:qualcomm:sd690_5g_firmware:-:*:*:*:*:*:*:*
– qualcomm sd720g_firmware All versions
cpe:2.3:o:qualcomm:sd720g_firmware:-:*:*:*:*:*:*:*
– qualcomm sd730_firmware All versions
cpe:2.3:o:qualcomm:sd730_firmware:-:*:*:*:*:*:*:*
– qualcomm sd750g_firmware All versions
cpe:2.3:o:qualcomm:sd750g_firmware:-:*:*:*:*:*:*:*
– qualcomm sd765_firmware All versions
cpe:2.3:o:qualcomm:sd765_firmware:-:*:*:*:*:*:*:*
– qualcomm sd765g_firmware All versions
cpe:2.3:o:qualcomm:sd765g_firmware:-:*:*:*:*:*:*:*
– qualcomm sd768g_firmware All versions
cpe:2.3:o:qualcomm:sd768g_firmware:-:*:*:*:*:*:*:*
– qualcomm sd778g_firmware All versions
cpe:2.3:o:qualcomm:sd778g_firmware:-:*:*:*:*:*:*:*
– qualcomm sd780g_firmware All versions
cpe:2.3:o:qualcomm:sd780g_firmware:-:*:*:*:*:*:*:*
– qualcomm sd835_firmware All versions
cpe:2.3:o:qualcomm:sd835_firmware:-:*:*:*:*:*:*:*
– qualcomm sd845_firmware All versions
cpe:2.3:o:qualcomm:sd845_firmware:-:*:*:*:*:*:*:*
– qualcomm sd855_firmware All versions
cpe:2.3:o:qualcomm:sd855_firmware:-:*:*:*:*:*:*:*
– qualcomm sd865_5g_firmware All versions
cpe:2.3:o:qualcomm:sd865_5g_firmware:-:*:*:*:*:*:*:*
– qualcomm sd870_firmware All versions
cpe:2.3:o:qualcomm:sd870_firmware:-:*:*:*:*:*:*:*
– qualcomm sd888_firmware All versions
cpe:2.3:o:qualcomm:sd888_firmware:-:*:*:*:*:*:*:*
– qualcomm sd888_5g_firmware All versions
cpe:2.3:o:qualcomm:sd888_5g_firmware:-:*:*:*:*:*:*:*
– qualcomm sdm630_firmware All versions
cpe:2.3:o:qualcomm:sdm630_firmware:-:*:*:*:*:*:*:*
– qualcomm sdx20_firmware All versions
cpe:2.3:o:qualcomm:sdx20_firmware:-:*:*:*:*:*:*:*
– qualcomm sdx20m_firmware All versions
cpe:2.3:o:qualcomm:sdx20m_firmware:-:*:*:*:*:*:*:*
– qualcomm sdx24_firmware All versions
cpe:2.3:o:qualcomm:sdx24_firmware:-:*:*:*:*:*:*:*
– qualcomm sdx50m_firmware All versions
cpe:2.3:o:qualcomm:sdx50m_firmware:-:*:*:*:*:*:*:*
– qualcomm sdx55_firmware All versions
cpe:2.3:o:qualcomm:sdx55_firmware:-:*:*:*:*:*:*:*
– qualcomm sdx55m_firmware All versions
cpe:2.3:o:qualcomm:sdx55m_firmware:-:*:*:*:*:*:*:*
– qualcomm sdxr2_5g_firmware All versions
cpe:2.3:o:qualcomm:sdxr2_5g_firmware:-:*:*:*:*:*:*:*
– qualcomm sm6250_firmware All versions
cpe:2.3:o:qualcomm:sm6250_firmware:-:*:*:*:*:*:*:*
– qualcomm sm7250_firmware All versions
cpe:2.3:o:qualcomm:sm7250_firmware:-:*:*:*:*:*:*:*
– qualcomm sm7325_firmware All versions
cpe:2.3:o:qualcomm:sm7325_firmware:-:*:*:*:*:*:*:*
– qualcomm wcd9326_firmware All versions
cpe:2.3:o:qualcomm:wcd9326_firmware:-:*:*:*:*:*:*:*
– qualcomm wcd9335_firmware All versions
cpe:2.3:o:qualcomm:wcd9335_firmware:-:*:*:*:*:*:*:*
– qualcomm wcd9340_firmware All versions
cpe:2.3:o:qualcomm:wcd9340_firmware:-:*:*:*:*:*:*:*
– qualcomm wcd9341_firmware All versions
cpe:2.3:o:qualcomm:wcd9341_firmware:-:*:*:*:*:*:*:*
– qualcomm wcd9370_firmware All versions
cpe:2.3:o:qualcomm:wcd9370_firmware:-:*:*:*:*:*:*:*
– qualcomm wcd9375_firmware All versions
cpe:2.3:o:qualcomm:wcd9375_firmware:-:*:*:*:*:*:*:*
– qualcomm wcd9380_firmware All versions
cpe:2.3:o:qualcomm:wcd9380_firmware:-:*:*:*:*:*:*:*
– qualcomm wcd9385_firmware All versions
cpe:2.3:o:qualcomm:wcd9385_firmware:-:*:*:*:*:*:*:*
– qualcomm wcn3615_firmware All versions
cpe:2.3:o:qualcomm:wcn3615_firmware:-:*:*:*:*:*:*:*
– qualcomm wcn3660b_firmware All versions
cpe:2.3:o:qualcomm:wcn3660b_firmware:-:*:*:*:*:*:*:*
– qualcomm wcn3680b_firmware All versions
cpe:2.3:o:qualcomm:wcn3680b_firmware:-:*:*:*:*:*:*:*
– qualcomm wcn3910_firmware All versions
cpe:2.3:o:qualcomm:wcn3910_firmware:-:*:*:*:*:*:*:*
– qualcomm wcn3950_firmware All versions
cpe:2.3:o:qualcomm:wcn3950_firmware:-:*:*:*:*:*:*:*
– qualcomm wcn3980_firmware All versions
cpe:2.3:o:qualcomm:wcn3980_firmware:-:*:*:*:*:*:*:*
– qualcomm wcn3988_firmware All versions
cpe:2.3:o:qualcomm:wcn3988_firmware:-:*:*:*:*:*:*:*
– qualcomm wcn3990_firmware All versions
cpe:2.3:o:qualcomm:wcn3990_firmware:-:*:*:*:*:*:*:*
– qualcomm wcn3991_firmware All versions
cpe:2.3:o:qualcomm:wcn3991_firmware:-:*:*:*:*:*:*:*
– qualcomm wcn3998_firmware All versions
cpe:2.3:o:qualcomm:wcn3998_firmware:-:*:*:*:*:*:*:*
– qualcomm wcn3999_firmware All versions
cpe:2.3:o:qualcomm:wcn3999_firmware:-:*:*:*:*:*:*:*
– qualcomm wcn6740_firmware All versions
cpe:2.3:o:qualcomm:wcn6740_firmware:-:*:*:*:*:*:*:*
– qualcomm wcn6750_firmware All versions
cpe:2.3:o:qualcomm:wcn6750_firmware:-:*:*:*:*:*:*:*
– qualcomm wcn6850_firmware All versions
cpe:2.3:o:qualcomm:wcn6850_firmware:-:*:*:*:*:*:*:*
– qualcomm wcn6851_firmware All versions
cpe:2.3:o:qualcomm:wcn6851_firmware:-:*:*:*:*:*:*:*
– qualcomm wcn6855_firmware All versions
cpe:2.3:o:qualcomm:wcn6855_firmware:-:*:*:*:*:*:*:*
– qualcomm wcn6856_firmware All versions
cpe:2.3:o:qualcomm:wcn6856_firmware:-:*:*:*:*:*:*:*
– qualcomm wsa8810_firmware All versions
cpe:2.3:o:qualcomm:wsa8810_firmware:-:*:*:*:*:*:*:*
– qualcomm wsa8815_firmware All versions
cpe:2.3:o:qualcomm:wsa8815_firmware:-:*:*:*:*:*:*:*
– qualcomm wsa8830_firmware All versions
cpe:2.3:o:qualcomm:wsa8830_firmware:-:*:*:*:*:*:*:*
– qualcomm wsa8835_firmware All versions
cpe:2.3:o:qualcomm:wsa8835_firmware:-:*:*:*:*:*:*:*
Original advisory text
ASB-A-175608649
Improper authentication of Non-EAPOL/WAPI plaintext frames during four-way handshake can lead to arbitrary network packet injection in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music
References
Severity
9.8 Critical
Exploitation
13% chance of attack within 30 days
Type
CWE-287Improper Authentication
Timeline
Published1 Oct 2021
Updated22 Oct 2026
First seen10 Sep 2026
Sources
ASB-A-175608649 · OSV
CVE-2020-11264 · NVD
Track software like this
Free during beta