CVEvulnerability
CVE-2020-11230
6.4 MEDIUM
Official page ↗
- Status
- Modified
- Published
- 2021-03-17
- Last modified
- 2026-06-17
- Assigner
- [email protected]
- CVSS 3.1 ([email protected])
- 6.4 MEDIUM — CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H
- CVSS 2.0 ([email protected])
- 4.4 MEDIUM — AV:L/AC:M/Au:N/C:P/I:P/A:P
- Weaknesses
- CWE-367
Description
Potential arbitrary memory corruption when the qseecom driver updates ion physical addresses in the buffer as it exposes a physical address to user land in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Industrial IOT, Snapdragon Mobile
Affected configurations
• qualcomm aqt1000 firmware
• qualcomm fsm10055 firmware
• qualcomm pm3003a firmware
• qualcomm pm7150a firmware
• qualcomm pm7150l firmware
• qualcomm pm7250 firmware
• qualcomm pm7250b firmware
• qualcomm pm7350c firmware
• qualcomm pm8004 firmware
• qualcomm pm8008 firmware
• qualcomm pm8009 firmware
• qualcomm pm8150a firmware
• qualcomm pm8150b firmware
• qualcomm pm8150c firmware
• qualcomm pm8150l firmware
• qualcomm pm8250 firmware
• qualcomm pm8350 firmware
• qualcomm pm8350b firmware
• qualcomm pm8350bh firmware
• qualcomm pm8350bhs firmware
• qualcomm pm8350c firmware
• qualcomm pm855 firmware
• qualcomm pm855a firmware
• qualcomm pm855b firmware
• qualcomm pm855l firmware
• qualcomm pm855p firmware
• qualcomm pmk7350 firmware
• qualcomm pmk8002 firmware
• qualcomm pmk8350 firmware
• qualcomm pmm6155au firmware
• qualcomm pmm8155au firmware
• qualcomm pmm8195au firmware
• qualcomm pmr525 firmware
• qualcomm pmr735a firmware
• qualcomm pmr735b firmware
• qualcomm pmx50 firmware
• qualcomm pmx55 firmware
• qualcomm qat3514 firmware
• qualcomm qat3516 firmware
• qualcomm qat3518 firmware
• qualcomm qat3519 firmware
• qualcomm qat3555 firmware
• qualcomm qat5515 firmware
• qualcomm qat5516 firmware
• qualcomm qat5522 firmware
• qualcomm qat5533 firmware
• qualcomm qat5568 firmware
• qualcomm qbt2000 firmware
• qualcomm qca6390 firmware
• qualcomm qca6391 firmware
• qualcomm qca6420 firmware
• qualcomm qca6421 firmware
• qualcomm qca6426 firmware
• qualcomm qca6430 firmware
• qualcomm qca6431 firmware
• qualcomm qca6436 firmware
• qualcomm qca6574au firmware
• qualcomm qca6696 firmware
• qualcomm qdm2301 firmware
• qualcomm qdm2305 firmware
… and 120 more
Related
Weakness · CWE (1)
- CWE-367 Time-of-check Time-of-use (TOCTOU) Race Condition weakness
References
- https://www.qualcomm.com/company/product-security/bulletins/march-2021-bulletin Patch, Vendor Advisory
- https://www.qualcomm.com/company/product-security/bulletins/march-2021-bulletin Patch, Vendor Advisory