NetSight
medium6.4

CVE-2020-11230

Potential arbitrary memory corruption when the qseecom driver updates ion physical addresses in the buffer as it exposes a physical address to user land in Sna…

Impact

Potential arbitrary memory corruption when the qseecom driver updates ion physical addresses in the buffer as it exposes a physical address to user land in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Industrial IOT, Snapdragon Mobile

Affected products

VendorProductAffected versions
QualcommAqt1000 Firmware
All versions
QualcommFsm10055 Firmware
All versions
QualcommPm3003a Firmware
All versions
QualcommPm7150a Firmware
All versions
QualcommPm7150l Firmware
All versions
QualcommPm7250 Firmware
All versions
QualcommPm7250b Firmware
All versions
QualcommPm7350c Firmware
All versions
QualcommPm8004 Firmware
All versions
QualcommPm8008 Firmware
All versions
QualcommPm8009 Firmware
All versions
QualcommPm8150a Firmware
All versions

Weakness classification

References