CVEvulnerability

CVE-2020-11282

7.8 HIGH Published 2021-02-22 Modified 2026-06-17 Official page ↗
Status
Modified
Published
2021-02-22
Last modified
2026-06-17
Assigner
[email protected]
CVSS 3.1 ([email protected])
7.8 HIGH — CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
CVSS 2.0 ([email protected])
4.6 MEDIUM — AV:L/AC:L/Au:N/C:P/I:P/A:P

Description

Improper access control when using mmap with the kgsl driver with a special offset value that can be provided to map the memstore of the GPU to user space in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables

Affected configurations

• qualcomm apq8009 • qualcomm apq8009w • qualcomm apq8017 • qualcomm apq8037 • qualcomm apq8053 • qualcomm apq8064au • qualcomm apq8076 • qualcomm apq8096au • qualcomm aqt1000 • qualcomm ar6003 • qualcomm ar8031 • qualcomm ar8035 • qualcomm ar8151 • qualcomm csra6620 • qualcomm csra6640 • qualcomm csrb31024 • qualcomm fsm10055 • qualcomm fsm10056 • qualcomm mdm8215 • qualcomm mdm9206 • qualcomm mdm9215 • qualcomm mdm9250 • qualcomm mdm9310 • qualcomm mdm9615 • qualcomm mdm9650 • qualcomm mdm9655 • qualcomm msm8909w • qualcomm msm8917 • qualcomm msm8920 • qualcomm msm8937 • qualcomm msm8940 • qualcomm msm8953 • qualcomm msm8996au • qualcomm pm215 • qualcomm pm3003a • qualcomm pm4125 • qualcomm pm439 • qualcomm pm456 • qualcomm pm6125 • qualcomm pm6150 • qualcomm pm6150a • qualcomm pm6150l • qualcomm pm6250 • qualcomm pm6350 • qualcomm pm640a • qualcomm pm640l • qualcomm pm640p • qualcomm pm660 • qualcomm pm660a • qualcomm pm660l • qualcomm pm670 • qualcomm pm670a • qualcomm pm670l • qualcomm pm7150a • qualcomm pm7150l • qualcomm pm7250 • qualcomm pm7250b • qualcomm pm7350c • qualcomm pm8004 • qualcomm pm8005 … and 365 more

References