Lucene search

[email protected]CVE-2020-11282

HistoryFeb 22, 2021 - 7:15 a.m.

CVE-2020-11282

2021-02-2207:15:00

NVD-CWE-noinfo

[email protected]

web.nvd.nist.gov

cve-2020-11282

improper access control

mmap

kgsl driver

snapdragon

gpu

memstore

nvd

7.8 High

CVSS3

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

7.7 High

AI Score

Confidence

High

4.6 Medium

CVSS2

Access Vector

LOCAL

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:L/AC:L/Au:N/C:P/I:P/A:P

0.0004 Low

EPSS

Percentile

11.7%

JSON

Improper access control when using mmap with the kgsl driver with a special offset value that can be provided to map the memstore of the GPU to user space in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables

CPENameOperatorVersion
qualcomm:mdm9206qualcomm mdm9206eq-
qualcomm:mdm9650qualcomm mdm9650eq-
qualcomm:msm8909wqualcomm msm8909weq-
qualcomm:mdm9655qualcomm mdm9655eq-
qualcomm:mdm9615qualcomm mdm9615eq-
qualcomm:sdx20qualcomm sdx20eq-
qualcomm:sdm630qualcomm sdm630eq-
qualcomm:qca6174aqualcomm qca6174aeq-
qualcomm:qca6574auqualcomm qca6574aueq-
qualcomm:qca6584qualcomm qca6584eq-

CPE	Name	Operator	Version
qualcomm:mdm9206	qualcomm mdm9206	eq	-
qualcomm:mdm9650	qualcomm mdm9650	eq	-
qualcomm:msm8909w	qualcomm msm8909w	eq	-
qualcomm:mdm9655	qualcomm mdm9655	eq	-
qualcomm:mdm9615	qualcomm mdm9615	eq	-
qualcomm:sdx20	qualcomm sdx20	eq	-
qualcomm:sdm630	qualcomm sdm630	eq	-
qualcomm:qca6174a	qualcomm qca6174a	eq	-
qualcomm:qca6574au	qualcomm qca6574au	eq	-
qualcomm:qca6584	qualcomm qca6584	eq	-

Rows per page:

1-10 of 4251

References

www.qualcomm.com/company/product-security/bulletins/february-2021-bulletin

Social References

7.8 High

CVSS3

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

7.7 High

AI Score

Confidence

High

4.6 Medium

CVSS2

Access Vector

LOCAL

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:L/AC:L/Au:N/C:P/I:P/A:P

0.0004 Low

EPSS

Percentile

11.7%

JSON

Related for CVE-2020-11282

prion1