CVE-2020-11152

EPSS 0.13%
Veröffentlicht 21.01.2021 10:15:13
Zuletzt bearbeitet 21.11.2024 04:56:56
Erkennungen
Login

Race condition in HAL layer while processing callback objects received from HIDL due to lack of synchronization between accessing objects in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables

Betroffene Produkte Warnungen 0 Metriken 3 CWE 1 Referenzen 5

NVD 160 VulnDex Vulnerability Enrichment 0

Daten sind bereitgestellt durch National Vulnerability Database (NVD)

Qualcomm ≫ Apq8009w Version -

Qualcomm ≫ Apq8017 Version -

Qualcomm ≫ Apq8037 Version -

Qualcomm ≫ Apq8052 Version -

Qualcomm ≫ Apq8053 Version -

Qualcomm ≫ Apq8056 Version -

Qualcomm ≫ Apq8076 Version -

Qualcomm ≫ Apq8096au Version -

Qualcomm ≫ Aqt1000 Version -

Qualcomm ≫ Ar8031 Version -

Qualcomm ≫ Csra6620 Version -

Qualcomm ≫ Csra6640 Version -

Qualcomm ≫ Msm8909w Version -

Qualcomm ≫ Msm8916 Version -

Qualcomm ≫ Msm8917 Version -

Qualcomm ≫ Msm8920 Version -

Qualcomm ≫ Msm8937 Version -

Qualcomm ≫ Msm8940 Version -

Qualcomm ≫ Msm8952 Version -

Qualcomm ≫ Msm8953 Version -

Qualcomm ≫ Msm8956 Version -

Qualcomm ≫ Msm8976 Version -

Qualcomm ≫ Msm8976sg Version -

Qualcomm ≫ Msm8996au Version -

Qualcomm ≫ Pm439 Version -

Qualcomm ≫ Pm660 Version -

Qualcomm ≫ Pm660a Version -

Qualcomm ≫ Pm660l Version -

Qualcomm ≫ Pm670 Version -

Qualcomm ≫ Pm670a Version -

Qualcomm ≫ Pm670l Version -

Qualcomm ≫ Pm8004 Version -

Qualcomm ≫ Pm8005 Version -

Qualcomm ≫ Pm855 Version -

Qualcomm ≫ Pm855a Version -

Qualcomm ≫ Pm855b Version -

Qualcomm ≫ Pm855l Version -

Qualcomm ≫ Pm855p Version -

Qualcomm ≫ Pm8916 Version -

Qualcomm ≫ Pm8937 Version -

Qualcomm ≫ Pm8940 Version -

Qualcomm ≫ Pm8952 Version -

Qualcomm ≫ Pm8953 Version -

Qualcomm ≫ Pm8956 Version -

Qualcomm ≫ Pm8998 Version -

Qualcomm ≫ Pmd9655 Version -

Qualcomm ≫ Pmi632 Version -

Qualcomm ≫ Pmi8937 Version -

Qualcomm ≫ Pmi8952 Version -

Qualcomm ≫ Pmi8998 Version -

Qualcomm ≫ Pmm8996au Version -

Qualcomm ≫ Pmx24 Version -

Qualcomm ≫ Pmx50 Version -

Qualcomm ≫ Qat3514 Version -

Qualcomm ≫ Qat3522 Version -

Qualcomm ≫ Qat3550 Version -

Qualcomm ≫ Qbt1000 Version -

Qualcomm ≫ Qbt1500 Version -

Qualcomm ≫ Qbt2000 Version -

Qualcomm ≫ Qca6174a Version -

Qualcomm ≫ Qca6310 Version -

Qualcomm ≫ Qca6320 Version -

Qualcomm ≫ Qca6420 Version -

Qualcomm ≫ Qca6430 Version -

Qualcomm ≫ Qca6564a Version -

Qualcomm ≫ Qca6564au Version -

Qualcomm ≫ Qca6574a Version -

Qualcomm ≫ Qca6574au Version -

Qualcomm ≫ Qca6584au Version -

Qualcomm ≫ Qca8337 Version -

Qualcomm ≫ Qca9377 Version -

Qualcomm ≫ Qcc1110 Version -

Qualcomm ≫ Qcs405 Version -

Qualcomm ≫ Qcs603 Version -

Qualcomm ≫ Qcs605 Version -

Qualcomm ≫ Qet4100 Version -

Qualcomm ≫ Qet4101 Version -

Qualcomm ≫ Qet5100 Version -

Qualcomm ≫ Qet5100m Version -

Qualcomm ≫ Qfe2080fc Version -

Qualcomm ≫ Qfe2081fc Version -

Qualcomm ≫ Qfe2082fc Version -

Qualcomm ≫ Qfe2101 Version -

Qualcomm ≫ Qfe2550 Version -

Qualcomm ≫ Qfe3100 Version -

Qualcomm ≫ Qfe3440fc Version -

Qualcomm ≫ Qfe4301 Version -

Qualcomm ≫ Qfe4302 Version -

Qualcomm ≫ Qfe4303 Version -

Qualcomm ≫ Qfe4305 Version -

Qualcomm ≫ Qfe4308 Version -

Qualcomm ≫ Qfe4309 Version -

Qualcomm ≫ Qfe4320 Version -

Qualcomm ≫ Qfe4373fc Version -

Qualcomm ≫ Qfe4455fc Version -

Qualcomm ≫ Qfe4465fc Version -

Qualcomm ≫ Qln1035bd Version -

Qualcomm ≫ Qpa4340 Version -

Qualcomm ≫ Qpa4360 Version -

Qualcomm ≫ Qpa5460 Version -

Qualcomm ≫ Qsw8573 Version -

Qualcomm ≫ Qtc800h Version -

Qualcomm ≫ Qtc800s Version -

Qualcomm ≫ Qtc800t Version -

Qualcomm ≫ Qtc801s Version -

Qualcomm ≫ Rgr7640au Version -

Qualcomm ≫ Rsw8577 Version -

Qualcomm ≫ Sd439 Version -

Qualcomm ≫ Sd450 Version -

Qualcomm ≫ Sd636 Version -

Qualcomm ≫ Sd660 Version -

Qualcomm ≫ Sd710 Version -

Qualcomm ≫ Sd712 Version -

Qualcomm ≫ Sd835 Version -

Qualcomm ≫ Sd855 Version -

Qualcomm ≫ Sd8cx Version -

Qualcomm ≫ Sdm630 Version -

Qualcomm ≫ Sdm830 Version -

Qualcomm ≫ Sdr051 Version -

Qualcomm ≫ Sdr052 Version -

Qualcomm ≫ Sdr660 Version -

Qualcomm ≫ Sdr8150 Version -

Qualcomm ≫ Sdw2500 Version -

Qualcomm ≫ Sdw3100 Version -

Qualcomm ≫ Sdx24 Version -

Qualcomm ≫ Sdx50m Version -

Qualcomm ≫ Smb1351 Version -

Qualcomm ≫ Smb1355 Version -

Qualcomm ≫ Smb1358 Version -

Qualcomm ≫ Smb1360 Version -

Qualcomm ≫ Smb1380 Version -

Qualcomm ≫ Smb1381 Version -

Qualcomm ≫ Smb1390 Version -

Qualcomm ≫ Smb231 Version -

Qualcomm ≫ Wcd9306 Version -

Qualcomm ≫ Wcd9326 Version -

Qualcomm ≫ Wcd9330 Version -

Qualcomm ≫ Wcd9335 Version -

Qualcomm ≫ Wcd9340 Version -

Qualcomm ≫ Wcd9341 Version -

Qualcomm ≫ Wcd9360 Version -

Qualcomm ≫ Wcn3610 Version -

Qualcomm ≫ Wcn3615 Version -

Qualcomm ≫ Wcn3620 Version -

Qualcomm ≫ Wcn3660b Version -

Qualcomm ≫ Wcn3680b Version -

Qualcomm ≫ Wcn3950 Version -

Qualcomm ≫ Wcn3980 Version -

Qualcomm ≫ Wcn3990 Version -

Qualcomm ≫ Wcn3998 Version -

Qualcomm ≫ Wcn3999 Version -

Qualcomm ≫ Wgr7640 Version -

Qualcomm ≫ Whs9410 Version -

Qualcomm ≫ Wsa8810 Version -

Qualcomm ≫ Wsa8815 Version -

Qualcomm ≫ Wtr2955 Version -

Qualcomm ≫ Wtr2965 Version -

Qualcomm ≫ Wtr3925 Version -

Qualcomm ≫ Wtr4905 Version -

Qualcomm ≫ Wtr5975 Version -

Zu dieser CVE wurde keine Warnung gefunden.

EPSS Metriken
Typ	Quelle	Score	Percentile
EPSS	FIRST.org	0.13%	0.03

CVSS Metriken
Quelle	Base Score	Exploit Score	Impact Score	Vector String
NIST	6.4	0.5	5.9	CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H
NIST	6.9	3.4	10	AV:L/AC:M/Au:N/C:C/I:C/A:C

CWE-362 Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition')

The product contains a concurrent code sequence that requires temporary, exclusive access to a shared resource, but a timing window exists in which the shared resource can be modified by another code sequence operating concurrently.

https://www.qualcomm.com/company/product-security/bulletins/december-2020-bulletin

Broken Link

https://www.qualcomm.com/company/product-security/bulletins/december-2020-security-bulletin

Patch

Vendor Advisory

https://nvd.nist.gov/vuln/detail/CVE-2020-11152

CVE Source (NVD)

https://cveawg.mitre.org/api/cve/CVE-2020-11152

CVE Source (JSON)

https://euvd.enisa.europa.eu/vulnerability/CVE-2020-11152

EUVD

Team-orientierte Vulnerability Management Plattform

Features der Plattform

CVE-2020-11152