Lucene search

QualcommCVE-2020-11152

HistoryJan 21, 2021 - 10:15 a.m.

CVE-2020-11152

2021-01-2110:15:13

CWE-362

qualcomm

web.nvd.nist.gov

cve

2020

11152

race condition

hal layer

hidl

snapdragon auto

snapdragon compute

snapdragon consumer iot

snapdragon industrial iot

snapdragon mobile

snapdragon voice & music

snapdragon wearables

nvd

CVSS2

6.9

Attack Vector

LOCAL

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:L/AC:M/Au:N/C:C/I:C/A:C

CVSS3

6.4

Attack Vector

LOCAL

Attack Complexity

HIGH

Privileges Required

HIGH

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H

AI Score

7.1

Confidence

High

EPSS

Percentile

12.6%

JSON

Race condition in HAL layer while processing callback objects received from HIDL due to lack of synchronization between accessing objects in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables

Affected configurations

Nvd

Node

qualcommapq8009wMatch-

qualcommapq8017Match-

qualcommapq8037Match-

qualcommapq8052Match-

qualcommapq8053Match-

qualcommapq8056Match-

qualcommapq8076Match-

qualcommapq8096auMatch-

qualcommaqt1000Match-

qualcommar8031Match-

qualcommcsra6620Match-

qualcommcsra6640Match-

qualcommmsm8909wMatch-

qualcommmsm8916Match-

qualcommmsm8917Match-

qualcommmsm8920Match-

qualcommmsm8937Match-

qualcommmsm8940Match-

qualcommmsm8952Match-

qualcommmsm8953Match-

qualcommmsm8956Match-

qualcommmsm8976Match-

qualcommmsm8976sgMatch-

qualcommmsm8996auMatch-

qualcommpm439Match-

qualcommpm660Match-

qualcommpm660aMatch-

qualcommpm660lMatch-

qualcommpm670Match-

qualcommpm670aMatch-

qualcommpm670lMatch-

qualcommpm8004Match-

qualcommpm8005Match-

qualcommpm855Match-

qualcommpm855aMatch-

qualcommpm855bMatch-

qualcommpm855lMatch-

qualcommpm855pMatch-

qualcommpm8916Match-

qualcommpm8937Match-

qualcommpm8940Match-

qualcommpm8952Match-

qualcommpm8953Match-

qualcommpm8956Match-

qualcommpm8998Match-

qualcommpmd9655Match-

qualcommpmi632Match-

qualcommpmi8937Match-

qualcommpmi8952Match-

qualcommpmi8998Match-

qualcommpmm8996auMatch-

qualcommpmx24Match-

qualcommpmx50Match-

qualcommqat3514Match-

qualcommqat3522Match-

qualcommqat3550Match-

qualcommqbt1000Match-

qualcommqbt1500Match-

qualcommqbt2000Match-

qualcommqca6174aMatch-

qualcommqca6310Match-

qualcommqca6320Match-

qualcommqca6420Match-

qualcommqca6430Match-

qualcommqca6564aMatch-

qualcommqca6564auMatch-

qualcommqca6574aMatch-

qualcommqca6574auMatch-

qualcommqca6584auMatch-

qualcommqca8337Match-

qualcommqca9377Match-

qualcommqcc1110Match-

qualcommqcs405Match-

qualcommqcs603Match-

qualcommqcs605Match-

qualcommqet4100Match-

qualcommqet4101Match-

qualcommqet5100Match-

qualcommqet5100mMatch-

qualcommqfe2080fcMatch-

qualcommqfe2081fcMatch-

qualcommqfe2082fcMatch-

qualcommqfe2101Match-

qualcommqfe2550Match-

qualcommqfe3100Match-

qualcommqfe3440fcMatch-

qualcommqfe4301Match-

qualcommqfe4302Match-

qualcommqfe4303Match-

qualcommqfe4305Match-

qualcommqfe4308Match-

qualcommqfe4309Match-

qualcommqfe4320Match-

qualcommqfe4373fcMatch-

qualcommqfe4455fcMatch-

qualcommqfe4465fcMatch-

qualcommqln1035bdMatch-

qualcommqpa4340Match-

qualcommqpa4360Match-

qualcommqpa5460Match-

qualcommqsw8573Match-

qualcommqtc800hMatch-

qualcommqtc800sMatch-

qualcommqtc800tMatch-

qualcommqtc801sMatch-

qualcommrgr7640auMatch-

qualcommrsw8577Match-

qualcommsd439Match-

qualcommsd450Match-

qualcommsd636Match-

qualcommsd660Match-

qualcommsd710Match-

qualcommsd712Match-

qualcommsd835Match-

qualcommsd855Match-

qualcommsd8cxMatch-

qualcommsdm630Match-

qualcommsdm830Match-

qualcommsdr051Match-

qualcommsdr052Match-

qualcommsdr660Match-

qualcommsdr8150Match-

qualcommsdw2500Match-

qualcommsdw3100Match-

qualcommsdx24Match-

qualcommsdx50mMatch-

qualcommsmb1351Match-

qualcommsmb1355Match-

qualcommsmb1358Match-

qualcommsmb1360Match-

qualcommsmb1380Match-

qualcommsmb1381Match-

qualcommsmb1390Match-

qualcommsmb231Match-

qualcommwcd9306Match-

qualcommwcd9326Match-

qualcommwcd9330Match-

qualcommwcd9335Match-

qualcommwcd9340Match-

qualcommwcd9341Match-

qualcommwcd9360Match-

qualcommwcn3610Match-

qualcommwcn3615Match-

qualcommwcn3620Match-

qualcommwcn3660bMatch-

qualcommwcn3680bMatch-

qualcommwcn3950Match-

qualcommwcn3980Match-

qualcommwcn3990Match-

qualcommwcn3998Match-

qualcommwcn3999Match-

qualcommwgr7640Match-

qualcommwhs9410Match-

qualcommwsa8810Match-

qualcommwsa8815Match-

qualcommwtr2955Match-

qualcommwtr2965Match-

qualcommwtr3925Match-

qualcommwtr4905Match-

qualcommwtr5975Match-

VendorProductVersionCPE
qualcommapq8009w-cpe:2.3:h:qualcomm:apq8009w:-:*:*:*:*:*:*:*
qualcommapq8017-cpe:2.3:h:qualcomm:apq8017:-:*:*:*:*:*:*:*
qualcommapq8037-cpe:2.3:h:qualcomm:apq8037:-:*:*:*:*:*:*:*
qualcommapq8052-cpe:2.3:h:qualcomm:apq8052:-:*:*:*:*:*:*:*
qualcommapq8053-cpe:2.3:h:qualcomm:apq8053:-:*:*:*:*:*:*:*
qualcommapq8056-cpe:2.3:h:qualcomm:apq8056:-:*:*:*:*:*:*:*
qualcommapq8076-cpe:2.3:h:qualcomm:apq8076:-:*:*:*:*:*:*:*
qualcommapq8096au-cpe:2.3:h:qualcomm:apq8096au:-:*:*:*:*:*:*:*
qualcommaqt1000-cpe:2.3:h:qualcomm:aqt1000:-:*:*:*:*:*:*:*
qualcommar8031-cpe:2.3:h:qualcomm:ar8031:-:*:*:*:*:*:*:*

Vendor	Product	Version	CPE
qualcomm	apq8009w	-	cpe:2.3:h:qualcomm:apq8009w:-:::::::*
qualcomm	apq8017	-	cpe:2.3:h:qualcomm:apq8017:-:::::::*
qualcomm	apq8037	-	cpe:2.3:h:qualcomm:apq8037:-:::::::*
qualcomm	apq8052	-	cpe:2.3:h:qualcomm:apq8052:-:::::::*
qualcomm	apq8053	-	cpe:2.3:h:qualcomm:apq8053:-:::::::*
qualcomm	apq8056	-	cpe:2.3:h:qualcomm:apq8056:-:::::::*
qualcomm	apq8076	-	cpe:2.3:h:qualcomm:apq8076:-:::::::*
qualcomm	apq8096au	-	cpe:2.3:h:qualcomm:apq8096au:-:::::::*
qualcomm	aqt1000	-	cpe:2.3:h:qualcomm:aqt1000:-:::::::*
qualcomm	ar8031	-	cpe:2.3:h:qualcomm:ar8031:-:::::::*

Rows per page:

1-10 of 1601

CNA Affected

[
  {
    "product": "Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables",
    "vendor": "Qualcomm, Inc.",
    "versions": [
      {
        "status": "affected",
        "version": "APQ8009W, APQ8017, APQ8037, APQ8052, APQ8053, APQ8056, APQ8076, APQ8096AU, AQT1000, AR8031, CSRA6620, CSRA6640, MSM8909W, MSM8916, MSM8917, MSM8920, MSM8937, MSM8940, MSM8952, MSM8953, MSM8956, MSM8976, MSM8976SG, MSM8996AU, PM439, PM660, PM660A, PM660L, PM670, PM670A, PM670L, PM8004, PM8005, PM855, PM855A, PM855B, PM855L, PM855P, PM8916, PM8937, PM8940, PM8952, PM8953, PM8956, PM8998, PMD9655, PMI632, PMI8937, PMI8952, PMI8998, PMM8996AU, PMX24, PMX50, QAT3514, QAT3522, QAT3550, QBT1000, QBT1500, QBT2000, QCA6174A, QCA6310, QCA6320, QCA6420, QCA6430, QCA6564A, QCA6564AU, QCA6574A, QCA6574AU, QCA6584AU, QCA8337, QCA9377, QCC1110, QCS405, QCS603, QCS605, QET4100, QET4101, QET5100, QET5100M, QFE2080FC, QFE2081FC, QFE2082FC, QFE2101, QFE2550, QFE3100, QFE3440FC, QFE4301, QFE4302, QFE4303, QFE4305, QFE4308, QFE4309, QFE4320, QFE4373FC, QFE4455FC, QFE4465FC, QLN1035BD, QPA4340, QPA4360, QPA5460, QSW8573, QTC800H, QTC800S, QTC800T, QTC801S, RGR7640AU, RSW8577, SD 636, SD 8CX, SD439, SD450, SD660, SD ...[truncated*]"
      }
    ]
  }
]

References

www.qualcomm.com/company/product-security/bulletins/december-2020-bulletin

www.qualcomm.com/company/product-security/bulletins/december-2020-security-bulletin

Social References

CVSS2

6.9

Attack Vector

LOCAL

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:L/AC:M/Au:N/C:C/I:C/A:C

CVSS3

6.4

Attack Vector

LOCAL

Attack Complexity

HIGH

Privileges Required

HIGH

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H

AI Score

7.1

Confidence

High

EPSS

Percentile

12.6%

JSON

Related for CVE-2020-11152