CVE-2020-11291

Name of the Vulnerable Software and Affected Versions Snapdragon Auto (affected versions not specified) Snapdragon Compute (affected versions not specified) Snapdragon Connectivity (affected versions not specified) Snapdragon Consumer IOT (affected versions not specified) Snapdragon Industrial IOT (affected versions not specified) Snapdragon IoT (affected versions not specified) Snapdragon Mobile (affected versions not specified)

Description The issue is related to a possible buffer overflow that occurs while updating ikev2 parameters for delete payloads received during informational exchange. This happens due to a lack of input validation for certain parameters received from the ePDG server.

Recommendations For Snapdragon Auto, update to a version that includes input validation checks for parameters received from the ePDG server. For Snapdragon Compute, update to a version that includes input validation checks for parameters received from the ePDG server. For Snapdragon Connectivity, update to a version that includes input validation checks for parameters received from the ePDG server. For Snapdragon Consumer IOT, update to a version that includes input validation checks for parameters received from the ePDG server. For Snapdragon Industrial IOT, update to a version that includes input validation checks for parameters received from the ePDG server. For Snapdragon IoT, update to a version that includes input validation checks for parameters received from the ePDG server. For Snapdragon Mobile, update to a version that includes input validation checks for parameters received from the ePDG server.