Skip to content
OpenAdvisories
High · 7.5 CVE-2020-11243 EUVD-2020-3597GHSA-7rp2-q3m6-w939

RRC sends a connection establishment success to NAS even though connection setup validation returns failure and leads to denial of service …

Published Apr 7, 2021 · Updated Aug 4, 2024 · Assigned by qualcomm

Vendor: Qualcomm Product: Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon IoT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wear

Description

RRC sends a connection establishment success to NAS even though connection setup validation returns failure and leads to denial of service in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Mobile

Affected products

VendorProductAffectedFixed
Qualcomm Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Mobile AQT1000, AR8035, FSM10055, FSM10056, PM3003A, PM7150A, PM7150L, PM7250, PM7250B, PM8004, PM8008, PM8009, PM8150, PM8150A, PM8150B, PM8150C, PM8150L, PM8250, PM855, PM855B, PM855L, PM855P, PMC1000H, PMK8002, PMR525, PMX50, PMX55, QAT3516, QAT3518, QAT3519, QAT3555, QAT5515, QAT5522, QAT5533, QBT2000… —

References