CVE-2020-11156

u'Buffer over-read issue in Bluetooth estack due to lack of check for invalid length of L2cap packet received from peer device.' in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT,...

CVE-2020-11156

CVE-2020-11156 is a buffer over-read in Bluetooth estack caused by lack of validation of L2CAP packet length in Snapdragon SoCs (e.g., QCA6390, SM8250, SA415M/SA515M, SC8180X, SDX55, etc.). The issue affects the Bluetooth stack and is documented with a CVSS v3.1 score of 8.1 (High) and CVSS v2 of...