Lucene search

[email protected]CVE-2020-11277

HistoryFeb 22, 2021 - 7:15 a.m.

CVE-2020-11277

2021-02-2207:15:00

CWE-362

CWE-416

[email protected]

web.nvd.nist.gov

cve-2020-11277

race condition

async fastrpc

snapdragon compute

snapdragon industrial iot

snapdragon mobile

nvd

7.4 High

CVSS3

Attack Vector

LOCAL

Attack Complexity

HIGH

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H

6.9 Medium

CVSS2

Access Vector

LOCAL

Access Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:L/AC:M/Au:N/C:C/I:C/A:C

0.001 Low

EPSS

Percentile

29.5%

JSON

Possible race condition during async fastrpc session after sending RPC message due to the fastrpc ctx gets free during async session in Snapdragon Compute, Snapdragon Industrial IOT, Snapdragon Mobile

CPENameOperatorVersion
qualcomm:pm3003a_firmwarequalcomm pm3003a firmwareeq-
qualcomm:pm4250_firmwarequalcomm pm4250 firmwareeq-
qualcomm:pm6125_firmwarequalcomm pm6125 firmwareeq-
qualcomm:pm6150a_firmwarequalcomm pm6150a firmwareeq-
qualcomm:pm6150l_firmwarequalcomm pm6150l firmwareeq-
qualcomm:pm6350_firmwarequalcomm pm6350 firmwareeq-
qualcomm:pm7150a_firmwarequalcomm pm7150a firmwareeq-
qualcomm:pm7150l_firmwarequalcomm pm7150l firmwareeq-
qualcomm:pm7250_firmwarequalcomm pm7250 firmwareeq-
qualcomm:pm7250b_firmwarequalcomm pm7250b firmwareeq-

CPE	Name	Operator	Version
qualcomm:pm3003a_firmware	qualcomm pm3003a firmware	eq	-
qualcomm:pm4250_firmware	qualcomm pm4250 firmware	eq	-
qualcomm:pm6125_firmware	qualcomm pm6125 firmware	eq	-
qualcomm:pm6150a_firmware	qualcomm pm6150a firmware	eq	-
qualcomm:pm6150l_firmware	qualcomm pm6150l firmware	eq	-
qualcomm:pm6350_firmware	qualcomm pm6350 firmware	eq	-
qualcomm:pm7150a_firmware	qualcomm pm7150a firmware	eq	-
qualcomm:pm7150l_firmware	qualcomm pm7150l firmware	eq	-
qualcomm:pm7250_firmware	qualcomm pm7250 firmware	eq	-
qualcomm:pm7250b_firmware	qualcomm pm7250b firmware	eq	-

Rows per page:

1-10 of 1611

References

www.qualcomm.com/company/product-security/bulletins/february-2021-bulletin

Social References

7.4 High

CVSS3

Attack Vector

LOCAL

Attack Complexity

HIGH

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H

6.9 Medium

CVSS2

Access Vector

LOCAL

Access Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:L/AC:M/Au:N/C:C/I:C/A:C

0.001 Low

EPSS

Percentile

29.5%

JSON

Related for CVE-2020-11277

prion1 androidsecurity1