CVEvulnerability
CVE-2020-11298
7.0 HIGH
Official page ↗
- Status
- Modified
- Published
- 2021-06-09
- Last modified
- 2026-06-17
- Assigner
- [email protected]
- CVSS 3.1 ([email protected])
- 7.8 HIGH — CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
- CVSS 3.1 ([email protected])
- 7.0 HIGH — CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H
- CVSS 2.0 ([email protected])
- 6.9 MEDIUM — AV:L/AC:M/Au:N/C:C/I:C/A:C
- Weaknesses
- CWE-367
Description
While waiting for a response to a callback or listener request, non-secure clients can change permissions to shared memory buffers used by HLOS Invoke Call to secure kernel in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wired Infrastructure and Networking
Affected configurations
• qualcomm aqt1000 firmware
• qualcomm ar8031 firmware
• qualcomm ar8035 firmware
• qualcomm csra6620 firmware
• qualcomm csra6640 firmware
• qualcomm mdm9205 firmware
• qualcomm mdm9206 firmware
• qualcomm mdm9628 firmware
• qualcomm qca4004 firmware
• qualcomm qca6390 firmware
• qualcomm qca6391 firmware
• qualcomm qca6420 firmware
• qualcomm qca6421 firmware
• qualcomm qca6426 firmware
• qualcomm qca6430 firmware
• qualcomm qca6431 firmware
• qualcomm qca6436 firmware
• qualcomm qca6564a firmware
• qualcomm qca6564au firmware
• qualcomm qca6574a firmware
• qualcomm qca6574au firmware
• qualcomm qca6584au firmware
• qualcomm qca6595 firmware
• qualcomm qca6595au firmware
• qualcomm qca6696 firmware
• qualcomm qca8337 firmware
• qualcomm qca9367 firmware
• qualcomm qca9377 firmware
• qualcomm qca9984 firmware
• qualcomm qcm2290 firmware
• qualcomm qcm4290 firmware
• qualcomm qcm6125 firmware
• qualcomm qcs2290 firmware
• qualcomm qcs405 firmware
• qualcomm qcs410 firmware
• qualcomm qcs4290 firmware
• qualcomm qcs603 firmware
• qualcomm qcs605 firmware
• qualcomm qcs610 firmware
• qualcomm qcs6125 firmware
• qualcomm qsm8250 firmware
• qualcomm sa415m firmware
• qualcomm sa515m firmware
• qualcomm sa6155p firmware
• qualcomm sa8155 firmware
• qualcomm sa8155p firmware
• qualcomm sa8195p firmware
• qualcomm sc8180x\+sdx55 firmware
• qualcomm sd 675 firmware
• qualcomm sd 8c firmware
• qualcomm sd 8cx firmware
• qualcomm sd460 firmware
• qualcomm sd480 firmware
• qualcomm sd662 firmware
• qualcomm sd665 firmware
• qualcomm sd670 firmware
• qualcomm sd675 firmware
• qualcomm sd678 firmware
• qualcomm sd690 5g firmware
• qualcomm sd710 firmware
… and 51 more
Related
Weakness · CWE (1)
- CWE-367 Time-of-check Time-of-use (TOCTOU) Race Condition weakness