CVE-2020-11172

CVE-2020-11172 is a critical stack overflow vulnerability affecting Qualcomm Snapdragon Wired Infrastructure and Networking products, specifically IPQ4019, IPQ6018, IPQ8064, IPQ8074, QCA9531, and QCA9980. The flaw arises from the fscanf function improperly handling string input, leading to a buffer overflow on a statically allocated stack memory. With a CVSS score of 9.8 (Critical), this vulnerability is remotely exploitable without user interaction, allowing for high impact to confidentiality, integrity, and availability. While there is no known active exploitation or public exploit code (Metasploit, Nuclei, ExploitDB), the vulnerability has garnered significant community discussion, indicating awareness and potential for future exploitation.