NetSight
high7.8

CVE-2020-11298

While waiting for a response to a callback or listener request, non-secure clients can change permissions to shared memory buffers used by HLOS Invoke Call to …

Impact

While waiting for a response to a callback or listener request, non-secure clients can change permissions to shared memory buffers used by HLOS Invoke Call to secure kernel in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wired Infrastructure and Networking

Affected products

VendorProductAffected versions
QualcommAqt1000 Firmware
All versions
QualcommAr8031 Firmware
All versions
QualcommAr8035 Firmware
All versions
QualcommCsra6620 Firmware
All versions
QualcommCsra6640 Firmware
All versions
QualcommMdm9205 Firmware
All versions
QualcommMdm9206 Firmware
All versions
QualcommMdm9628 Firmware
All versions
QualcommQca4004 Firmware
All versions
QualcommQca6390 Firmware
All versions
QualcommQca6391 Firmware
All versions
QualcommQca6420 Firmware
All versions

Weakness classification

References