Lucene search

QualcommCVE-2020-11151

HistoryJan 21, 2021 - 10:15 a.m.

CVE-2020-11151

2021-01-2110:15:13

CWE-362

CWE-416

qualcomm

web.nvd.nist.gov

cve-2020-11151

race condition

use after free

snapdragon auto

snapdragon compute

snapdragon connectivity

snapdragon industrial iot

snapdragon mobile

snapdragon wearables

nvd

CVSS2

6.9

Attack Vector

LOCAL

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:L/AC:M/Au:N/C:C/I:C/A:C

CVSS3

6.4

Attack Vector

LOCAL

Attack Complexity

HIGH

Privileges Required

HIGH

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H

AI Score

7.1

Confidence

High

EPSS

Percentile

12.6%

JSON

Race condition occurs while calling user space ioctl from two different threads can results to use after free issue in video in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Wearables

Affected configurations

Nvd

Node

qualcommpm3003aMatch-

qualcommpm6125Match-

qualcommpm6150Match-

qualcommpm6150aMatch-

qualcommpm6150lMatch-

qualcommpm6350Match-

qualcommpm640aMatch-

qualcommpm640lMatch-

qualcommpm640pMatch-

qualcommpm7150aMatch-

qualcommpm7150lMatch-

qualcommpm7250Match-

qualcommpm7250bMatch-

qualcommpm8008Match-

qualcommpm8009Match-

qualcommpm8150aMatch-

qualcommpm8150bMatch-

qualcommpm8150cMatch-

qualcommpm8150lMatch-

qualcommpm8250Match-

qualcommpmi632Match-

qualcommpmk8002Match-

qualcommpmk8003Match-

qualcommpmm8195auMatch-

qualcommpmm855auMatch-

qualcommpmr525Match-

qualcommpmr735aMatch-

qualcommpmr735bMatch-

qualcommpmx55Match-

qualcommqat3516Match-

qualcommqat3518Match-

qualcommqat3519Match-

qualcommqat3522Match-

qualcommqat3550Match-

qualcommqat3555Match-

qualcommqat5515Match-

qualcommqat5516Match-

qualcommqat5522Match-

qualcommqat5533Match-

qualcommqbt1500Match-

qualcommqbt2000Match-

qualcommqca6390Match-

qualcommqca6391Match-

qualcommqca6421Match-

qualcommqca6426Match-

qualcommqca6431Match-

qualcommqca6436Match-

qualcommqca6574aMatch-

qualcommqca6574auMatch-

qualcommqca6584auMatch-

qualcommqca6595Match-

qualcommqca6595auMatch-

qualcommqca6696Match-

qualcommqcm4290Match-

qualcommqcs4290Match-

qualcommqdm2301Match-

qualcommqdm2305Match-

qualcommqdm2307Match-

qualcommqdm2308Match-

qualcommqdm2310Match-

qualcommqdm3301Match-

qualcommqdm5620Match-

qualcommqdm5621Match-

qualcommqdm5650Match-

qualcommqdm5652Match-

qualcommqdm5670Match-

qualcommqdm5671Match-

qualcommqdm5677Match-

qualcommqdm5679Match-

qualcommqet4101Match-

qualcommqet5100Match-

qualcommqet6100Match-

qualcommqet6110Match-

qualcommqfs2530Match-

qualcommqfs2580Match-

qualcommqln4642Match-

qualcommqln4650Match-

qualcommqln5020Match-

qualcommqln5030Match-

qualcommqln5040Match-

qualcommqpa2625Match-

qualcommqpa4360Match-

qualcommqpa5580Match-

qualcommqpa5581Match-

qualcommqpa6560Match-

qualcommqpa8673Match-

qualcommqpa8686Match-

qualcommqpa8801Match-

qualcommqpa8802Match-

qualcommqpa8803Match-

qualcommqpa8821Match-

qualcommqpa8842Match-

qualcommqpm4650Match-

qualcommqpm5621Match-

qualcommqpm5658Match-

qualcommqpm5670Match-

qualcommqpm5677Match-

qualcommqpm5679Match-

qualcommqpm6582Match-

qualcommqpm6585Match-

qualcommqpm8820Match-

qualcommqpm8830Match-

qualcommqpm8870Match-

qualcommqpm8895Match-

qualcommqsm7250Match-

qualcommqsw8574Match-

qualcommqtc410sMatch-

qualcommqtc800hMatch-

qualcommqtc801sMatch-

qualcommqtm525Match-

qualcommsa6155pMatch-

qualcommsa8150pMatch-

qualcommsa8155Match-

qualcommsa8195pMatch-

qualcommsd460Match-

qualcommsd662Match-

qualcommsd665Match-

qualcommsd675Match-

qualcommsd6905gMatch-

qualcommsd750gMatch-

qualcommsd765Match-

qualcommsd765gMatch-

qualcommsd768gMatch-

qualcommsd8655gMatch-

qualcommsda429wMatch-

qualcommsdr425Match-

qualcommsdr660Match-

qualcommsdr660gMatch-

qualcommsdr735Match-

qualcommsdr8250Match-

qualcommsdr865Match-

qualcommsdx55Match-

qualcommsdx55mMatch-

qualcommsdxr25gMatch-

qualcommsm7250pMatch-

qualcommsmb1354Match-

qualcommsmb1355Match-

qualcommsmb1390Match-

qualcommsmb1395Match-

qualcommsmb1396Match-

qualcommsmr525Match-

qualcommsmr526Match-

qualcommwcd9341Match-

qualcommwcd9370Match-

qualcommwcd9375Match-

qualcommwcd9380Match-

qualcommwcd9385Match-

qualcommwcn3610Match-

qualcommwcn3620Match-

qualcommwcn3660bMatch-

qualcommwcn3950Match-

qualcommwcn3980Match-

qualcommwcn3988Match-

qualcommwcn3991Match-

qualcommwcn3998Match-

qualcommwcn6750Match-

qualcommwcn6850Match-

qualcommwcn6851Match-

qualcommwgr7640Match-

qualcommwsa8810Match-

qualcommwsa8815Match-

qualcommwsa8830Match-

qualcommwsa8835Match-

qualcommwtr2965Match-

qualcommwtr3925Match-

VendorProductVersionCPE
qualcommpm3003a-cpe:2.3:h:qualcomm:pm3003a:-:*:*:*:*:*:*:*
qualcommpm6125-cpe:2.3:h:qualcomm:pm6125:-:*:*:*:*:*:*:*
qualcommpm6150-cpe:2.3:h:qualcomm:pm6150:-:*:*:*:*:*:*:*
qualcommpm6150a-cpe:2.3:h:qualcomm:pm6150a:-:*:*:*:*:*:*:*
qualcommpm6150l-cpe:2.3:h:qualcomm:pm6150l:-:*:*:*:*:*:*:*
qualcommpm6350-cpe:2.3:h:qualcomm:pm6350:-:*:*:*:*:*:*:*
qualcommpm640a-cpe:2.3:h:qualcomm:pm640a:-:*:*:*:*:*:*:*
qualcommpm640l-cpe:2.3:h:qualcomm:pm640l:-:*:*:*:*:*:*:*
qualcommpm640p-cpe:2.3:h:qualcomm:pm640p:-:*:*:*:*:*:*:*
qualcommpm7150a-cpe:2.3:h:qualcomm:pm7150a:-:*:*:*:*:*:*:*

Vendor	Product	Version	CPE
qualcomm	pm3003a	-	cpe:2.3:h:qualcomm:pm3003a:-:::::::*
qualcomm	pm6125	-	cpe:2.3:h:qualcomm:pm6125:-:::::::*
qualcomm	pm6150	-	cpe:2.3:h:qualcomm:pm6150:-:::::::*
qualcomm	pm6150a	-	cpe:2.3:h:qualcomm:pm6150a:-:::::::*
qualcomm	pm6150l	-	cpe:2.3:h:qualcomm:pm6150l:-:::::::*
qualcomm	pm6350	-	cpe:2.3:h:qualcomm:pm6350:-:::::::*
qualcomm	pm640a	-	cpe:2.3:h:qualcomm:pm640a:-:::::::*
qualcomm	pm640l	-	cpe:2.3:h:qualcomm:pm640l:-:::::::*
qualcomm	pm640p	-	cpe:2.3:h:qualcomm:pm640p:-:::::::*
qualcomm	pm7150a	-	cpe:2.3:h:qualcomm:pm7150a:-:::::::*

Rows per page:

1-10 of 1651

CNA Affected

[
  {
    "product": "Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Wearables",
    "vendor": "Qualcomm, Inc.",
    "versions": [
      {
        "status": "affected",
        "version": "PM3003A, PM6125, PM6150, PM6150A, PM6150L, PM6350, PM640A, PM640L, PM640P, PM7150A, PM7150L, PM7250, PM7250B, PM8008, PM8009, PM8150A, PM8150B, PM8150C, PM8150L, PM8250, PMI632, PMK8002, PMK8003, PMM8195AU, PMM855AU, PMR525, PMR735A, PMR735B, PMX55, QAT3516, QAT3518, QAT3519, QAT3522, QAT3550, QAT3555, QAT5515, QAT5516, QAT5522, QAT5533, QBT1500, QBT2000, QCA6390, QCA6391, QCA6421, QCA6426, QCA6431, QCA6436, QCA6574A, QCA6574AU, QCA6584AU, QCA6595, QCA6595AU, QCA6696, QCM4290, QCS4290, QDM2301, QDM2305, QDM2307, QDM2308, QDM2310, QDM3301, QDM5620, QDM5621, QDM5650, QDM5652, QDM5670, QDM5671, QDM5677, QDM5679, QET4101, QET5100, QET6100, QET6110, QFS2530, QFS2580, QLN4642, QLN4650, QLN5020, QLN5030, QLN5040, QPA2625, QPA4360, QPA5580, QPA5581, QPA6560, QPA8673, QPA8686, QPA8801, QPA8802, QPA8803, QPA8821, QPA8842, QPM4650, QPM5621, QPM5658, QPM5670, QPM5677, QPM5679, QPM6582, QPM6585, QPM8820, QPM8830, QPM8870, QPM8895, QSM7250, QSW8574, QTC410S, QTC800H, QTC801S, QTM525, SA6155P, SA8150P, SA815 ...[truncated*]"
      }
    ]
  }
]

References

www.qualcomm.com/company/product-security/bulletins/december-2020-bulletin

www.qualcomm.com/company/product-security/bulletins/december-2020-security-bulletin

Social References

CVSS2

6.9

Attack Vector

LOCAL

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:L/AC:M/Au:N/C:C/I:C/A:C

CVSS3

6.4

Attack Vector

LOCAL

Attack Complexity

HIGH

Privileges Required

HIGH

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H

AI Score

7.1

Confidence

High

EPSS

Percentile

12.6%

JSON

Related for CVE-2020-11151