CVEvulnerability
CVE-2020-11152
6.4 MEDIUM
Official page ↗
- Status
- Modified
- Published
- 2021-01-21
- Last modified
- 2026-06-17
- Assigner
- [email protected]
- CVSS 3.1 ([email protected])
- 6.4 MEDIUM — CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H
- CVSS 2.0 ([email protected])
- 6.9 MEDIUM — AV:L/AC:M/Au:N/C:C/I:C/A:C
- Weaknesses
- CWE-362
Description
Race condition in HAL layer while processing callback objects received from HIDL due to lack of synchronization between accessing objects in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables
Affected configurations
• qualcomm apq8009w
• qualcomm apq8017
• qualcomm apq8037
• qualcomm apq8052
• qualcomm apq8053
• qualcomm apq8056
• qualcomm apq8076
• qualcomm apq8096au
• qualcomm aqt1000
• qualcomm ar8031
• qualcomm csra6620
• qualcomm csra6640
• qualcomm msm8909w
• qualcomm msm8916
• qualcomm msm8917
• qualcomm msm8920
• qualcomm msm8937
• qualcomm msm8940
• qualcomm msm8952
• qualcomm msm8953
• qualcomm msm8956
• qualcomm msm8976
• qualcomm msm8976sg
• qualcomm msm8996au
• qualcomm pm439
• qualcomm pm660
• qualcomm pm660a
• qualcomm pm660l
• qualcomm pm670
• qualcomm pm670a
• qualcomm pm670l
• qualcomm pm8004
• qualcomm pm8005
• qualcomm pm855
• qualcomm pm855a
• qualcomm pm855b
• qualcomm pm855l
• qualcomm pm855p
• qualcomm pm8916
• qualcomm pm8937
• qualcomm pm8940
• qualcomm pm8952
• qualcomm pm8953
• qualcomm pm8956
• qualcomm pm8998
• qualcomm pmd9655
• qualcomm pmi632
• qualcomm pmi8937
• qualcomm pmi8952
• qualcomm pmi8998
• qualcomm pmm8996au
• qualcomm pmx24
• qualcomm pmx50
• qualcomm qat3514
• qualcomm qat3522
• qualcomm qat3550
• qualcomm qbt1000
• qualcomm qbt1500
• qualcomm qbt2000
• qualcomm qca6174a
… and 100 more
Related
Weakness · CWE (1)
- CWE-362 Concurrent Execution using Shared Resource with Improper Synchronization weakness
References
- https://www.qualcomm.com/company/product-security/bulletins/december-2020-bulletin Broken Link
- https://www.qualcomm.com/company/product-security/bulletins/december-2020-security-bulletin Patch, Vendor Advisory
- https://www.qualcomm.com/company/product-security/bulletins/december-2020-bulletin Broken Link