Denial of service while processing RTCP packets containing multiple SDES reports due to memory for last SDES packet is freed and rest of the memory is leaked in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon IoT, Snapdragon Mobile, Snapdragon Wearables
Source: https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-11255
Reference (s):
- https://www.qualcomm.com/company/product-security/bulletins/april-2021-bulletin
- URL: https://www.qualcomm.com/company/product-security/bulletins/april-2021-bulletin