CVEvulnerability
CVE-2020-11282
7.8 HIGH
Official page ↗
- Status
- Modified
- Published
- 2021-02-22
- Last modified
- 2026-06-17
- Assigner
- [email protected]
- CVSS 3.1 ([email protected])
- 7.8 HIGH — CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
- CVSS 2.0 ([email protected])
- 4.6 MEDIUM — AV:L/AC:L/Au:N/C:P/I:P/A:P
Description
Improper access control when using mmap with the kgsl driver with a special offset value that can be provided to map the memstore of the GPU to user space in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables
Affected configurations
• qualcomm apq8009
• qualcomm apq8009w
• qualcomm apq8017
• qualcomm apq8037
• qualcomm apq8053
• qualcomm apq8064au
• qualcomm apq8076
• qualcomm apq8096au
• qualcomm aqt1000
• qualcomm ar6003
• qualcomm ar8031
• qualcomm ar8035
• qualcomm ar8151
• qualcomm csra6620
• qualcomm csra6640
• qualcomm csrb31024
• qualcomm fsm10055
• qualcomm fsm10056
• qualcomm mdm8215
• qualcomm mdm9206
• qualcomm mdm9215
• qualcomm mdm9250
• qualcomm mdm9310
• qualcomm mdm9615
• qualcomm mdm9650
• qualcomm mdm9655
• qualcomm msm8909w
• qualcomm msm8917
• qualcomm msm8920
• qualcomm msm8937
• qualcomm msm8940
• qualcomm msm8953
• qualcomm msm8996au
• qualcomm pm215
• qualcomm pm3003a
• qualcomm pm4125
• qualcomm pm439
• qualcomm pm456
• qualcomm pm6125
• qualcomm pm6150
• qualcomm pm6150a
• qualcomm pm6150l
• qualcomm pm6250
• qualcomm pm6350
• qualcomm pm640a
• qualcomm pm640l
• qualcomm pm640p
• qualcomm pm660
• qualcomm pm660a
• qualcomm pm660l
• qualcomm pm670
• qualcomm pm670a
• qualcomm pm670l
• qualcomm pm7150a
• qualcomm pm7150l
• qualcomm pm7250
• qualcomm pm7250b
• qualcomm pm7350c
• qualcomm pm8004
• qualcomm pm8005
… and 365 more
References
- https://www.qualcomm.com/company/product-security/bulletins/february-2021-bulletin Patch, Vendor Advisory
- https://www.qualcomm.com/company/product-security/bulletins/february-2021-bulletin Patch, Vendor Advisory