Lucene search

QualcommCVE-2020-11277

HistoryFeb 22, 2021 - 7:15 a.m.

CVE-2020-11277

2021-02-2207:15:14

CWE-362

CWE-416

qualcomm

web.nvd.nist.gov

cve-2020-11277

race condition

async fastrpc

snapdragon compute

snapdragon industrial iot

snapdragon mobile

nvd

CVSS2

6.9

Attack Vector

LOCAL

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:L/AC:M/Au:N/C:C/I:C/A:C

CVSS3

7.4

Attack Vector

LOCAL

Attack Complexity

HIGH

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H

EPSS

0.001

Percentile

30.6%

JSON

Possible race condition during async fastrpc session after sending RPC message due to the fastrpc ctx gets free during async session in Snapdragon Compute, Snapdragon Industrial IOT, Snapdragon Mobile

Affected configurations

Nvd

Node

qualcommpm3003a_firmwareMatch-

AND

qualcommpm3003aMatch-

Node

qualcommpm4250_firmwareMatch-

AND

qualcommpm4250Match-

Node

qualcommpm6125_firmwareMatch-

AND

qualcommpm6125Match-

Node

qualcommpm6150a_firmwareMatch-

AND

qualcommpm6150aMatch-

Node

qualcommpm6150l_firmwareMatch-

AND

qualcommpm6150lMatch-

Node

qualcommpm6350_firmwareMatch-

AND

qualcommpm6350Match-

Node

qualcommpm7150a_firmwareMatch-

AND

qualcommpm7150aMatch-

Node

qualcommpm7150l_firmwareMatch-

AND

qualcommpm7150lMatch-

Node

qualcommpm7250_firmwareMatch-

AND

qualcommpm7250Match-

Node

qualcommpm7250b_firmwareMatch-

AND

qualcommpm7250bMatch-

Node

qualcommpm7350c_firmwareMatch-

AND

qualcommpm7350cMatch-

Node

qualcommpm8008_firmwareMatch-

AND

qualcommpm8008Match-

Node

qualcommpm8009_firmwareMatch-

AND

qualcommpm8009Match-

Node

qualcommpm8150a_firmwareMatch-

AND

qualcommpm8150aMatch-

Node

qualcommpm8150b_firmwareMatch-

AND

qualcommpm8150bMatch-

Node

qualcommpm8150c_firmwareMatch-

AND

qualcommpm8150cMatch-

Node

qualcommpm8150l_firmwareMatch-

AND

qualcommpm8150lMatch-

Node

qualcommpm8250_firmwareMatch-

AND

qualcommpm8250Match-

Node

qualcommpm8350_firmwareMatch-

AND

qualcommpm8350Match-

Node

qualcommpm8350b_firmwareMatch-

AND

qualcommpm8350bMatch-

Node

qualcommpm8350bh_firmwareMatch-

AND

qualcommpm8350bhMatch-

Node

qualcommpm8350bhs_firmwareMatch-

AND

qualcommpm8350bhsMatch-

Node

qualcommpm8350c_firmwareMatch-

AND

qualcommpm8350cMatch-

Node

qualcommpmi632_firmwareMatch-

AND

qualcommpmi632Match-

Node

qualcommpmk7350_firmwareMatch-

AND

qualcommpmk7350Match-

Node

qualcommpmk8002_firmwareMatch-

AND

qualcommpmk8002Match-

Node

qualcommpmk8003_firmwareMatch-

AND

qualcommpmk8003Match-

Node

qualcommpmk8350_firmwareMatch-

AND

qualcommpmk8350Match-

Node

qualcommpmr525_firmwareMatch-

AND

qualcommpmr525Match-

Node

qualcommpmr735a_firmwareMatch-

AND

qualcommpmr735aMatch-

Node

qualcommpmr735b_firmwareMatch-

AND

qualcommpmr735bMatch-

Node

qualcommpmx55_firmwareMatch-

AND

qualcommpmx55Match-

Node

qualcommqat3514_firmwareMatch-

AND

qualcommqat3514Match-

Node

qualcommqat3516_firmwareMatch-

AND

qualcommqat3516Match-

Node

qualcommqat3518_firmwareMatch-

AND

qualcommqat3518Match-

Node

qualcommqat3519_firmwareMatch-

AND

qualcommqat3519Match-

Node

qualcommqat3555_firmwareMatch-

AND

qualcommqat3555Match-

Node

qualcommqat5515_firmwareMatch-

AND

qualcommqat5515Match-

Node

qualcommqat5516_firmwareMatch-

AND

qualcommqat5516Match-

Node

qualcommqat5522_firmwareMatch-

AND

qualcommqat5522Match-

Node

qualcommqat5533_firmwareMatch-

AND

qualcommqat5533Match-

Node

qualcommqat5568_firmwareMatch-

AND

qualcommqat5568Match-

Node

qualcommqbt2000_firmwareMatch-

AND

qualcommqbt2000Match-

Node

qualcommqca6390_firmwareMatch-

AND

qualcommqca6390Match-

Node

qualcommqca6391_firmwareMatch-

AND

qualcommqca6391Match-

Node

qualcommqca6426_firmwareMatch-

AND

qualcommqca6426Match-

Node

qualcommqcm4290_firmwareMatch-

AND

qualcommqcm4290Match-

Node

qualcommqcs4290_firmwareMatch-

AND

qualcommqcs4290Match-

Node

qualcommqdm2307_firmwareMatch-

AND

qualcommqdm2307Match-

Node

qualcommqdm2308_firmwareMatch-

AND

qualcommqdm2308Match-

Node

qualcommqdm2310_firmwareMatch-

AND

qualcommqdm2310Match-

Node

qualcommqdm3301_firmwareMatch-

AND

qualcommqdm3301Match-

Node

qualcommqdm3302_firmwareMatch-

AND

qualcommqdm3302Match-

Node

qualcommqdm4643_firmwareMatch-

AND

qualcommqdm4643Match-

Node

qualcommqdm4650_firmwareMatch-

AND

qualcommqdm4650Match-

Node

qualcommqdm5579_firmwareMatch-

AND

qualcommqdm5579Match-

Node

qualcommqdm5620_firmwareMatch-

AND

qualcommqdm5620Match-

Node

qualcommqdm5621_firmwareMatch-

AND

qualcommqdm5621Match-

Node

qualcommqdm5650_firmwareMatch-

AND

qualcommqdm5650Match-

Node

qualcommqdm5652_firmwareMatch-

AND

qualcommqdm5652Match-

Node

qualcommqdm5670_firmwareMatch-

AND

qualcommqdm5670Match-

Node

qualcommqdm5671_firmwareMatch-

AND

qualcommqdm5671Match-

Node

qualcommqdm5677_firmwareMatch-

AND

qualcommqdm5677Match-

Node

qualcommqdm5679_firmwareMatch-

AND

qualcommqdm5679Match-

Node

qualcommqet4101_firmwareMatch-

AND

qualcommqet4101Match-

Node

qualcommqet5100_firmwareMatch-

AND

qualcommqet5100Match-

Node

qualcommqet5100m_firmwareMatch-

AND

qualcommqet5100mMatch-

Node

qualcommqet6100_firmwareMatch-

AND

qualcommqet6100Match-

Node

qualcommqet6110_firmwareMatch-

AND

qualcommqet6110Match-

Node

qualcommqfs2530_firmwareMatch-

AND

qualcommqfs2530Match-

Node

qualcommqfs2580_firmwareMatch-

AND

qualcommqfs2580Match-

Node

qualcommqfs2608_firmwareMatch-

AND

qualcommqfs2608Match-

Node

qualcommqfs2630_firmwareMatch-

AND

qualcommqfs2630Match-

Node

qualcommqln4642_firmwareMatch-

AND

qualcommqln4642Match-

Node

qualcommqln4650_firmwareMatch-

AND

qualcommqln4650Match-

Node

qualcommqln5020_firmwareMatch-

AND

qualcommqln5020Match-

Node

qualcommqln5030_firmwareMatch-

AND

qualcommqln5030Match-

Node

qualcommqln5040_firmwareMatch-

AND

qualcommqln5040Match-

Node

qualcommqpa2625_firmwareMatch-

AND

qualcommqpa2625Match-

Node

qualcommqpa5461_firmwareMatch-

AND

qualcommqpa5461Match-

Node

qualcommqpa5580_firmwareMatch-

AND

qualcommqpa5580Match-

Node

qualcommqpa5581_firmwareMatch-

AND

qualcommqpa5581Match-

Node

qualcommqpa6560_firmwareMatch-

AND

qualcommqpa6560Match-

Node

qualcommqpa8673_firmwareMatch-

AND

qualcommqpa8673Match-

Node

qualcommqpa8686_firmwareMatch-

AND

qualcommqpa8686Match-

Node

qualcommqpa8801_firmwareMatch-

AND

qualcommqpa8801Match-

Node

qualcommqpa8802_firmwareMatch-

AND

qualcommqpa8802Match-

Node

qualcommqpa8803_firmwareMatch-

AND

qualcommqpa8803Match-

Node

qualcommqpa8821_firmwareMatch-

AND

qualcommqpa8821Match-

Node

qualcommqpa8842_firmwareMatch-

AND

qualcommqpa8842Match-

Node

qualcommqpm4621_firmwareMatch-

AND

qualcommqpm4621Match-

Node

qualcommqpm4630_firmwareMatch-

AND

qualcommqpm4630Match-

Node

qualcommqpm4640_firmwareMatch-

AND

qualcommqpm4640Match-

Node

qualcommqpm4641_firmwareMatch-

AND

qualcommqpm4641Match-

Node

qualcommqpm4650_firmwareMatch-

AND

qualcommqpm4650Match-

Node

qualcommqpm5620_firmwareMatch-

AND

qualcommqpm5620Match-

Node

qualcommqpm5621_firmwareMatch-

AND

qualcommqpm5621Match-

Node

qualcommqpm5641_firmwareMatch-

AND

qualcommqpm5641Match-

Node

qualcommqpm5657_firmwareMatch-

AND

qualcommqpm5657Match-

Node

qualcommqpm5658_firmwareMatch-

AND

qualcommqpm5658Match-

Node

qualcommqpm5670_firmwareMatch-

AND

qualcommqpm5670Match-

Node

qualcommqpm5677_firmwareMatch-

AND

qualcommqpm5677Match-

Node

qualcommqpm5679_firmwareMatch-

AND

qualcommqpm5679Match-

Node

qualcommqpm5870_firmwareMatch-

AND

qualcommqpm5870Match-

Node

qualcommqpm5875_firmwareMatch-

AND

qualcommqpm5875Match-

Node

qualcommqpm6585_firmwareMatch-

AND

qualcommqpm6585Match-

Node

qualcommqpm6621_firmwareMatch-

AND

qualcommqpm6621Match-

Node

qualcommqpm6670_firmwareMatch-

AND

qualcommqpm6670Match-

Node

qualcommqpm8820_firmwareMatch-

AND

qualcommqpm8820Match-

Node

qualcommqpm8870_firmwareMatch-

AND

qualcommqpm8870Match-

Node

qualcommqpm8895_firmwareMatch-

AND

qualcommqpm8895Match-

Node

qualcommqsm7250_firmwareMatch-

AND

qualcommqsm7250Match-

Node

qualcommqtm525_firmwareMatch-

AND

qualcommqtm525Match-

Node

qualcommsd460_firmwareMatch-

AND

qualcommsd460Match-

Node

qualcommsd662_firmwareMatch-

AND

qualcommsd662Match-

Node

qualcommsd6905g_firmwareMatch-

AND

qualcommsd6905gMatch-

Node

qualcommsd750g_firmwareMatch-

AND

qualcommsd750gMatch-

Node

qualcommsd765_firmwareMatch-

AND

qualcommsd765Match-

Node

qualcommsd765g_firmwareMatch-

AND

qualcommsd765gMatch-

Node

qualcommsd768g_firmwareMatch-

AND

qualcommsd768gMatch-

Node

qualcommsd8655g_firmwareMatch-

AND

qualcommsd8655gMatch-

Node

qualcommsd8885g_firmwareMatch-

AND

qualcommsd8885gMatch-

Node

qualcommsdr425_firmwareMatch-

AND

qualcommsdr425Match-

Node

qualcommsdr735_firmwareMatch-

AND

qualcommsdr735Match-

Node

qualcommsdr735g_firmwareMatch-

AND

qualcommsdr735gMatch-

Node

qualcommsdr865_firmwareMatch-

AND

qualcommsdr865Match-

Node

qualcommsdx55m_firmwareMatch-

AND

qualcommsdx55mMatch-

Node

qualcommsm4350_firmwareMatch-

AND

qualcommsm4350Match-

Node

qualcommsm7250p_firmwareMatch-

AND

qualcommsm7250pMatch-

Node

qualcommsm7350_firmwareMatch-

AND

qualcommsm7350Match-

Node

qualcommsmb1354_firmwareMatch-

AND

qualcommsmb1354Match-

Node

qualcommsmb1355_firmwareMatch-

AND

qualcommsmb1355Match-

Node

qualcommsmb1390_firmwareMatch-

AND

qualcommsmb1390Match-

Node

qualcommsmb1394_firmwareMatch-

AND

qualcommsmb1394Match-

Node

qualcommsmb1395_firmwareMatch-

AND

qualcommsmb1395Match-

Node

qualcommsmb1396_firmwareMatch-

AND

qualcommsmb1396Match-

Node

qualcommsmb1398_firmwareMatch-

AND

qualcommsmb1398Match-

Node

qualcommsmr525_firmwareMatch-

AND

qualcommsmr525Match-

Node

qualcommsmr526_firmwareMatch-

AND

qualcommsmr526Match-

Node

qualcommsmr545_firmwareMatch-

AND

qualcommsmr545Match-

Node

qualcommsmr546_firmwareMatch-

AND

qualcommsmr546Match-

Node

qualcommwcd9341_firmwareMatch-

AND

qualcommwcd9341Match-

Node

qualcommwcd9370_firmwareMatch-

AND

qualcommwcd9370Match-

Node

qualcommwcd9375_firmwareMatch-

AND

qualcommwcd9375Match-

Node

qualcommwcd9380_firmwareMatch-

AND

qualcommwcd9380Match-

Node

qualcommwcd9385_firmwareMatch-

AND

qualcommwcd9385Match-

Node

qualcommwcn3950_firmwareMatch-

AND

qualcommwcn3950Match-

Node

qualcommwcn3988_firmwareMatch-

AND

qualcommwcn3988Match-

Node

qualcommwcn3991_firmwareMatch-

AND

qualcommwcn3991Match-

Node

qualcommwcn3998_firmwareMatch-

AND

qualcommwcn3998Match-

Node

qualcommwcn6740_firmwareMatch-

AND

qualcommwcn6740Match-

Node

qualcommwcn6850_firmwareMatch-

AND

qualcommwcn6850Match-

Node

qualcommwcn6851_firmwareMatch-

AND

qualcommwcn6851Match-

Node

qualcommwcn6856_firmwareMatch-

AND

qualcommwcn6856Match-

Node

qualcommwgr7640_firmwareMatch-

AND

qualcommwgr7640Match-

Node

qualcommwsa8810_firmwareMatch-

AND

qualcommwsa8810Match-

Node

qualcommwsa8815_firmwareMatch-

AND

qualcommwsa8815Match-

Node

qualcommwsa8830_firmwareMatch-

AND

qualcommwsa8830Match-

Node

qualcommwsa8835_firmwareMatch-

AND

qualcommwsa8835Match-

Node

qualcommwtr2965_firmwareMatch-

AND

qualcommwtr2965Match-

Node

qualcommwtr3925_firmwareMatch-

AND

qualcommwtr3925Match-

VendorProductVersionCPE
qualcommpm3003a_firmware-cpe:2.3:o:qualcomm:pm3003a_firmware:-:*:*:*:*:*:*:*
qualcommpm3003a-cpe:2.3:h:qualcomm:pm3003a:-:*:*:*:*:*:*:*
qualcommpm4250_firmware-cpe:2.3:o:qualcomm:pm4250_firmware:-:*:*:*:*:*:*:*
qualcommpm4250-cpe:2.3:h:qualcomm:pm4250:-:*:*:*:*:*:*:*
qualcommpm6125_firmware-cpe:2.3:o:qualcomm:pm6125_firmware:-:*:*:*:*:*:*:*
qualcommpm6125-cpe:2.3:h:qualcomm:pm6125:-:*:*:*:*:*:*:*
qualcommpm6150a_firmware-cpe:2.3:o:qualcomm:pm6150a_firmware:-:*:*:*:*:*:*:*
qualcommpm6150a-cpe:2.3:h:qualcomm:pm6150a:-:*:*:*:*:*:*:*
qualcommpm6150l_firmware-cpe:2.3:o:qualcomm:pm6150l_firmware:-:*:*:*:*:*:*:*
qualcommpm6150l-cpe:2.3:h:qualcomm:pm6150l:-:*:*:*:*:*:*:*

Vendor	Product	Version	CPE
qualcomm	pm3003a_firmware	-	cpe:2.3:o:qualcomm:pm3003a_firmware:-:::::::*
qualcomm	pm3003a	-	cpe:2.3:h:qualcomm:pm3003a:-:::::::*
qualcomm	pm4250_firmware	-	cpe:2.3:o:qualcomm:pm4250_firmware:-:::::::*
qualcomm	pm4250	-	cpe:2.3:h:qualcomm:pm4250:-:::::::*
qualcomm	pm6125_firmware	-	cpe:2.3:o:qualcomm:pm6125_firmware:-:::::::*
qualcomm	pm6125	-	cpe:2.3:h:qualcomm:pm6125:-:::::::*
qualcomm	pm6150a_firmware	-	cpe:2.3:o:qualcomm:pm6150a_firmware:-:::::::*
qualcomm	pm6150a	-	cpe:2.3:h:qualcomm:pm6150a:-:::::::*
qualcomm	pm6150l_firmware	-	cpe:2.3:o:qualcomm:pm6150l_firmware:-:::::::*
qualcomm	pm6150l	-	cpe:2.3:h:qualcomm:pm6150l:-:::::::*

Rows per page:

1-10 of 3221

CNA Affected

[
  {
    "product": "Snapdragon Compute, Snapdragon Industrial IOT, Snapdragon Mobile",
    "vendor": "Qualcomm, Inc.",
    "versions": [
      {
        "status": "affected",
        "version": "PM3003A, PM4250, PM6125, PM6150A, PM6150L, PM6350, PM7150A, PM7150L, PM7250, PM7250B, PM7350C, PM8008, PM8009, PM8150A, PM8150B, PM8150C, PM8150L, PM8250, PM8350, PM8350B, PM8350BH, PM8350BHS, PM8350C, PMI632, PMK7350, PMK8002, PMK8003, PMK8350, PMR525, PMR735A, PMR735B, PMX55, QAT3514, QAT3516, QAT3518, QAT3519, QAT3555, QAT5515, QAT5516, QAT5522, QAT5533, QAT5568, QBT2000, QCA6390, QCA6391, QCA6426, QCM4290, QCS4290, QDM2307, QDM2308, QDM2310, QDM3301, QDM3302, QDM4643, QDM4650, QDM5579, QDM5620, QDM5621, QDM5650, QDM5652, QDM5670, QDM5671, QDM5677, QDM5679, QET4101, QET5100, QET5100M, QET6100, QET6110, QFS2530, QFS2580, QFS2608, QFS2630, QLN4642, QLN4650, QLN5020, QLN5030, QLN5040, QPA2625, QPA5461, QPA5580, QPA5581, QPA6560, QPA8673, QPA8686, QPA8801, QPA8802, QPA8803, QPA8821, QPA8842, QPM4621, QPM4630, QPM4640, QPM4641, QPM4650, QPM5620, QPM5621, QPM5641, QPM5657, QPM5658, QPM5670, QPM5677, QPM5679, QPM5870, QPM5875, QPM6585, QPM6621, QPM6670, QPM8820, QPM8870, QPM8895, QSM7250, QTM525,  ...[truncated*]"
      }
    ]
  }
]

References

www.qualcomm.com/company/product-security/bulletins/february-2021-bulletin

Social References

CVSS2

6.9

Attack Vector

LOCAL

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:L/AC:M/Au:N/C:C/I:C/A:C

CVSS3

7.4

Attack Vector

LOCAL

Attack Complexity

HIGH

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H

EPSS

0.001

Percentile

30.6%

JSON

Related for CVE-2020-11277