Details of VAR-202101-0087

ID

VAR-202101-0087

CVE

CVE-2020-11152

TITLE

plural Qualcomm Product Race Condition Vulnerabilities

Trust: 0.8

sources: JVNDB: JVNDB-2020-015621

DESCRIPTION

Race condition in HAL layer while processing callback objects received from HIDL due to lack of synchronization between accessing objects in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables. plural Qualcomm The product contains a race condition vulnerability.Information is obtained, information is tampered with, and service is disrupted (DoS) It may be put into a state. The Qualcomm chip is a chip of Qualcomm (Qualcomm). A way to miniaturize circuits (mainly including semiconductor equipment, but also passive components, etc.) and often manufactured on the surface of semiconductor wafers. Many Qualcomm products have a race condition vulnerability, which is caused by the lack of synchronization between access objects, leading to race conditions in the HAL layer

Trust: 2.25

sources: NVD: CVE-2020-11152 // JVNDB: JVNDB-2020-015621 // CNNVD: CNNVD-202012-589 // VULMON: CVE-2020-11152

AFFECTED PRODUCTS

vendor:	qualcomm	model:	qsw8573	scope:	eq	version:	-	Trust: 1.0
vendor:	qualcomm	model:	pm855p	scope:	eq	version:	-	Trust: 1.0
vendor:	qualcomm	model:	wcn3950	scope:	eq	version:	-	Trust: 1.0
vendor:	qualcomm	model:	qfe4303	scope:	eq	version:	-	Trust: 1.0
vendor:	qualcomm	model:	qfe4309	scope:	eq	version:	-	Trust: 1.0
vendor:	qualcomm	model:	sd636	scope:	eq	version:	-	Trust: 1.0
vendor:	qualcomm	model:	wcn3660b	scope:	eq	version:	-	Trust: 1.0
vendor:	qualcomm	model:	qcs605	scope:	eq	version:	-	Trust: 1.0
vendor:	qualcomm	model:	sdx50m	scope:	eq	version:	-	Trust: 1.0
vendor:	qualcomm	model:	apq8056	scope:	eq	version:	-	Trust: 1.0
vendor:	qualcomm	model:	msm8937	scope:	eq	version:	-	Trust: 1.0
vendor:	qualcomm	model:	smb1351	scope:	eq	version:	-	Trust: 1.0
vendor:	qualcomm	model:	pm660a	scope:	eq	version:	-	Trust: 1.0
vendor:	qualcomm	model:	sdw3100	scope:	eq	version:	-	Trust: 1.0
vendor:	qualcomm	model:	apq8017	scope:	eq	version:	-	Trust: 1.0
vendor:	qualcomm	model:	apq8076	scope:	eq	version:	-	Trust: 1.0
vendor:	qualcomm	model:	qca6320	scope:	eq	version:	-	Trust: 1.0
vendor:	qualcomm	model:	wtr4905	scope:	eq	version:	-	Trust: 1.0
vendor:	qualcomm	model:	apq8009w	scope:	eq	version:	-	Trust: 1.0
vendor:	qualcomm	model:	pm8956	scope:	eq	version:	-	Trust: 1.0
vendor:	qualcomm	model:	csra6640	scope:	eq	version:	-	Trust: 1.0
vendor:	qualcomm	model:	wcd9326	scope:	eq	version:	-	Trust: 1.0
vendor:	qualcomm	model:	qcs405	scope:	eq	version:	-	Trust: 1.0
vendor:	qualcomm	model:	qpa4360	scope:	eq	version:	-	Trust: 1.0
vendor:	qualcomm	model:	ar8031	scope:	eq	version:	-	Trust: 1.0
vendor:	qualcomm	model:	qfe4305	scope:	eq	version:	-	Trust: 1.0
vendor:	qualcomm	model:	qfe2101	scope:	eq	version:	-	Trust: 1.0
vendor:	qualcomm	model:	pm855l	scope:	eq	version:	-	Trust: 1.0
vendor:	qualcomm	model:	qet4100	scope:	eq	version:	-	Trust: 1.0
vendor:	qualcomm	model:	qca8337	scope:	eq	version:	-	Trust: 1.0
vendor:	qualcomm	model:	qca9377	scope:	eq	version:	-	Trust: 1.0
vendor:	qualcomm	model:	sdr052	scope:	eq	version:	-	Trust: 1.0
vendor:	qualcomm	model:	qfe4308	scope:	eq	version:	-	Trust: 1.0
vendor:	qualcomm	model:	msm8940	scope:	eq	version:	-	Trust: 1.0
vendor:	qualcomm	model:	qca6174a	scope:	eq	version:	-	Trust: 1.0
vendor:	qualcomm	model:	wgr7640	scope:	eq	version:	-	Trust: 1.0
vendor:	qualcomm	model:	pm8940	scope:	eq	version:	-	Trust: 1.0
vendor:	qualcomm	model:	qfe4373fc	scope:	eq	version:	-	Trust: 1.0
vendor:	qualcomm	model:	sd712	scope:	eq	version:	-	Trust: 1.0
vendor:	qualcomm	model:	smb1390	scope:	eq	version:	-	Trust: 1.0
vendor:	qualcomm	model:	pmi8952	scope:	eq	version:	-	Trust: 1.0
vendor:	qualcomm	model:	qfe2080fc	scope:	eq	version:	-	Trust: 1.0
vendor:	qualcomm	model:	wcn3610	scope:	eq	version:	-	Trust: 1.0
vendor:	qualcomm	model:	whs9410	scope:	eq	version:	-	Trust: 1.0
vendor:	qualcomm	model:	qtc801s	scope:	eq	version:	-	Trust: 1.0
vendor:	qualcomm	model:	pm8005	scope:	eq	version:	-	Trust: 1.0
vendor:	qualcomm	model:	sdw2500	scope:	eq	version:	-	Trust: 1.0
vendor:	qualcomm	model:	qca6564a	scope:	eq	version:	-	Trust: 1.0
vendor:	qualcomm	model:	qat3514	scope:	eq	version:	-	Trust: 1.0
vendor:	qualcomm	model:	wcd9335	scope:	eq	version:	-	Trust: 1.0
vendor:	qualcomm	model:	pm8004	scope:	eq	version:	-	Trust: 1.0
vendor:	qualcomm	model:	rgr7640au	scope:	eq	version:	-	Trust: 1.0
vendor:	qualcomm	model:	wsa8815	scope:	eq	version:	-	Trust: 1.0
vendor:	qualcomm	model:	msm8909w	scope:	eq	version:	-	Trust: 1.0
vendor:	qualcomm	model:	qca6310	scope:	eq	version:	-	Trust: 1.0
vendor:	qualcomm	model:	qet4101	scope:	eq	version:	-	Trust: 1.0
vendor:	qualcomm	model:	wtr5975	scope:	eq	version:	-	Trust: 1.0
vendor:	qualcomm	model:	wcd9330	scope:	eq	version:	-	Trust: 1.0
vendor:	qualcomm	model:	pmm8996au	scope:	eq	version:	-	Trust: 1.0
vendor:	qualcomm	model:	qfe2081fc	scope:	eq	version:	-	Trust: 1.0
vendor:	qualcomm	model:	pm8953	scope:	eq	version:	-	Trust: 1.0
vendor:	qualcomm	model:	pm855a	scope:	eq	version:	-	Trust: 1.0
vendor:	qualcomm	model:	pm8952	scope:	eq	version:	-	Trust: 1.0
vendor:	qualcomm	model:	sd439	scope:	eq	version:	-	Trust: 1.0
vendor:	qualcomm	model:	msm8956	scope:	eq	version:	-	Trust: 1.0
vendor:	qualcomm	model:	qln1035bd	scope:	eq	version:	-	Trust: 1.0
vendor:	qualcomm	model:	sdm630	scope:	eq	version:	-	Trust: 1.0
vendor:	qualcomm	model:	qfe4465fc	scope:	eq	version:	-	Trust: 1.0
vendor:	qualcomm	model:	sd855	scope:	eq	version:	-	Trust: 1.0
vendor:	qualcomm	model:	qcs603	scope:	eq	version:	-	Trust: 1.0
vendor:	qualcomm	model:	wcn3615	scope:	eq	version:	-	Trust: 1.0
vendor:	qualcomm	model:	wtr2965	scope:	eq	version:	-	Trust: 1.0
vendor:	qualcomm	model:	pm670l	scope:	eq	version:	-	Trust: 1.0
vendor:	qualcomm	model:	qfe4301	scope:	eq	version:	-	Trust: 1.0
vendor:	qualcomm	model:	qat3522	scope:	eq	version:	-	Trust: 1.0
vendor:	qualcomm	model:	qat3550	scope:	eq	version:	-	Trust: 1.0
vendor:	qualcomm	model:	qpa5460	scope:	eq	version:	-	Trust: 1.0
vendor:	qualcomm	model:	sd450	scope:	eq	version:	-	Trust: 1.0
vendor:	qualcomm	model:	smb1380	scope:	eq	version:	-	Trust: 1.0
vendor:	qualcomm	model:	pmx50	scope:	eq	version:	-	Trust: 1.0
vendor:	qualcomm	model:	qbt2000	scope:	eq	version:	-	Trust: 1.0
vendor:	qualcomm	model:	qbt1000	scope:	eq	version:	-	Trust: 1.0
vendor:	qualcomm	model:	apq8053	scope:	eq	version:	-	Trust: 1.0
vendor:	qualcomm	model:	qfe2550	scope:	eq	version:	-	Trust: 1.0
vendor:	qualcomm	model:	pm439	scope:	eq	version:	-	Trust: 1.0
vendor:	qualcomm	model:	apq8052	scope:	eq	version:	-	Trust: 1.0
vendor:	qualcomm	model:	smb1381	scope:	eq	version:	-	Trust: 1.0
vendor:	qualcomm	model:	pm8937	scope:	eq	version:	-	Trust: 1.0
vendor:	qualcomm	model:	msm8917	scope:	eq	version:	-	Trust: 1.0
vendor:	qualcomm	model:	qcc1110	scope:	eq	version:	-	Trust: 1.0
vendor:	qualcomm	model:	qbt1500	scope:	eq	version:	-	Trust: 1.0
vendor:	qualcomm	model:	sd835	scope:	eq	version:	-	Trust: 1.0
vendor:	qualcomm	model:	pmd9655	scope:	eq	version:	-	Trust: 1.0
vendor:	qualcomm	model:	qfe4320	scope:	eq	version:	-	Trust: 1.0
vendor:	qualcomm	model:	msm8920	scope:	eq	version:	-	Trust: 1.0
vendor:	qualcomm	model:	aqt1000	scope:	eq	version:	-	Trust: 1.0
vendor:	qualcomm	model:	wcn3680b	scope:	eq	version:	-	Trust: 1.0
vendor:	qualcomm	model:	wsa8810	scope:	eq	version:	-	Trust: 1.0
vendor:	qualcomm	model:	smb1355	scope:	eq	version:	-	Trust: 1.0
vendor:	qualcomm	model:	pm670a	scope:	eq	version:	-	Trust: 1.0
vendor:	qualcomm	model:	pm855b	scope:	eq	version:	-	Trust: 1.0
vendor:	qualcomm	model:	qfe3100	scope:	eq	version:	-	Trust: 1.0
vendor:	qualcomm	model:	sd8cx	scope:	eq	version:	-	Trust: 1.0
vendor:	qualcomm	model:	wcd9360	scope:	eq	version:	-	Trust: 1.0
vendor:	qualcomm	model:	msm8976sg	scope:	eq	version:	-	Trust: 1.0
vendor:	qualcomm	model:	qfe2082fc	scope:	eq	version:	-	Trust: 1.0
vendor:	qualcomm	model:	qtc800h	scope:	eq	version:	-	Trust: 1.0
vendor:	qualcomm	model:	smb1360	scope:	eq	version:	-	Trust: 1.0
vendor:	qualcomm	model:	pmi8937	scope:	eq	version:	-	Trust: 1.0
vendor:	qualcomm	model:	qca6574au	scope:	eq	version:	-	Trust: 1.0
vendor:	qualcomm	model:	qpa4340	scope:	eq	version:	-	Trust: 1.0
vendor:	qualcomm	model:	pm670	scope:	eq	version:	-	Trust: 1.0
vendor:	qualcomm	model:	qfe4302	scope:	eq	version:	-	Trust: 1.0
vendor:	qualcomm	model:	wcd9341	scope:	eq	version:	-	Trust: 1.0
vendor:	qualcomm	model:	pm660	scope:	eq	version:	-	Trust: 1.0
vendor:	qualcomm	model:	qca6564au	scope:	eq	version:	-	Trust: 1.0
vendor:	qualcomm	model:	wcn3999	scope:	eq	version:	-	Trust: 1.0
vendor:	qualcomm	model:	wcn3620	scope:	eq	version:	-	Trust: 1.0
vendor:	qualcomm	model:	qtc800t	scope:	eq	version:	-	Trust: 1.0
vendor:	qualcomm	model:	wtr2955	scope:	eq	version:	-	Trust: 1.0
vendor:	qualcomm	model:	csra6620	scope:	eq	version:	-	Trust: 1.0
vendor:	qualcomm	model:	wcn3980	scope:	eq	version:	-	Trust: 1.0
vendor:	qualcomm	model:	pmi8998	scope:	eq	version:	-	Trust: 1.0
vendor:	qualcomm	model:	msm8953	scope:	eq	version:	-	Trust: 1.0
vendor:	qualcomm	model:	sdm830	scope:	eq	version:	-	Trust: 1.0
vendor:	qualcomm	model:	msm8996au	scope:	eq	version:	-	Trust: 1.0
vendor:	qualcomm	model:	qca6584au	scope:	eq	version:	-	Trust: 1.0
vendor:	qualcomm	model:	msm8952	scope:	eq	version:	-	Trust: 1.0
vendor:	qualcomm	model:	qet5100m	scope:	eq	version:	-	Trust: 1.0
vendor:	qualcomm	model:	pmi632	scope:	eq	version:	-	Trust: 1.0
vendor:	qualcomm	model:	sdx24	scope:	eq	version:	-	Trust: 1.0
vendor:	qualcomm	model:	wcd9306	scope:	eq	version:	-	Trust: 1.0
vendor:	qualcomm	model:	pm855	scope:	eq	version:	-	Trust: 1.0
vendor:	qualcomm	model:	pm8916	scope:	eq	version:	-	Trust: 1.0
vendor:	qualcomm	model:	wtr3925	scope:	eq	version:	-	Trust: 1.0
vendor:	qualcomm	model:	qca6420	scope:	eq	version:	-	Trust: 1.0
vendor:	qualcomm	model:	qca6430	scope:	eq	version:	-	Trust: 1.0
vendor:	qualcomm	model:	msm8976	scope:	eq	version:	-	Trust: 1.0
vendor:	qualcomm	model:	pm660l	scope:	eq	version:	-	Trust: 1.0
vendor:	qualcomm	model:	wcd9340	scope:	eq	version:	-	Trust: 1.0
vendor:	qualcomm	model:	qca6574a	scope:	eq	version:	-	Trust: 1.0
vendor:	qualcomm	model:	apq8096au	scope:	eq	version:	-	Trust: 1.0
vendor:	qualcomm	model:	sdr051	scope:	eq	version:	-	Trust: 1.0
vendor:	qualcomm	model:	wcn3998	scope:	eq	version:	-	Trust: 1.0
vendor:	qualcomm	model:	qfe4455fc	scope:	eq	version:	-	Trust: 1.0
vendor:	qualcomm	model:	msm8916	scope:	eq	version:	-	Trust: 1.0
vendor:	qualcomm	model:	pm8998	scope:	eq	version:	-	Trust: 1.0
vendor:	qualcomm	model:	pmx24	scope:	eq	version:	-	Trust: 1.0
vendor:	qualcomm	model:	qtc800s	scope:	eq	version:	-	Trust: 1.0
vendor:	qualcomm	model:	sd660	scope:	eq	version:	-	Trust: 1.0
vendor:	qualcomm	model:	smb1358	scope:	eq	version:	-	Trust: 1.0
vendor:	qualcomm	model:	wcn3990	scope:	eq	version:	-	Trust: 1.0
vendor:	qualcomm	model:	smb231	scope:	eq	version:	-	Trust: 1.0
vendor:	qualcomm	model:	qet5100	scope:	eq	version:	-	Trust: 1.0
vendor:	qualcomm	model:	apq8037	scope:	eq	version:	-	Trust: 1.0
vendor:	qualcomm	model:	qfe3440fc	scope:	eq	version:	-	Trust: 1.0
vendor:	qualcomm	model:	rsw8577	scope:	eq	version:	-	Trust: 1.0
vendor:	qualcomm	model:	sdr660	scope:	eq	version:	-	Trust: 1.0
vendor:	qualcomm	model:	sdr8150	scope:	eq	version:	-	Trust: 1.0
vendor:	qualcomm	model:	sd710	scope:	eq	version:	-	Trust: 1.0
vendor:	クアルコム	model:	apq8056	scope:	-	version:	-	Trust: 0.8
vendor:	クアルコム	model:	apq8037	scope:	-	version:	-	Trust: 0.8
vendor:	クアルコム	model:	apq8096au	scope:	-	version:	-	Trust: 0.8
vendor:	クアルコム	model:	aqt1000	scope:	-	version:	-	Trust: 0.8
vendor:	クアルコム	model:	apq8076	scope:	-	version:	-	Trust: 0.8
vendor:	クアルコム	model:	apq8052	scope:	-	version:	-	Trust: 0.8
vendor:	クアルコム	model:	apq8009w	scope:	-	version:	-	Trust: 0.8
vendor:	クアルコム	model:	apq8017	scope:	-	version:	-	Trust: 0.8
vendor:	クアルコム	model:	ar8031	scope:	-	version:	-	Trust: 0.8
vendor:	クアルコム	model:	apq8053	scope:	-	version:	-	Trust: 0.8

sources: JVNDB: JVNDB-2020-015621 // NVD: CVE-2020-11152

CVSS

SEVERITY

CVSSV2

CVSSV3

nvd@nist.gov:	CVE-2020-11152
value:	MEDIUM
Trust: 1.0
NVD:	CVE-2020-11152
value:	MEDIUM
Trust: 0.8
CNNVD:	CNNVD-202012-589
value:	MEDIUM
Trust: 0.6
VULMON:	CVE-2020-11152
value:	MEDIUM
Trust: 0.1

nvd@nist.gov:	CVE-2020-11152
severity:	MEDIUM
baseScore:	6.9
vectorString:	AV:L/AC:M/AU:N/C:C/I:C/A:C
accessVector:	LOCAL
accessComplexity:	MEDIUM
authentication:	NONE
confidentialityImpact:	COMPLETE
integrityImpact:	COMPLETE
availabilityImpact:	COMPLETE
exploitabilityScore:	3.4
impactScore:	10.0
acInsufInfo:	NONE
obtainAllPrivilege:	NONE
obtainUserPrivilege:	NONE
obtainOtherPrivilege:	NONE
userInteractionRequired:	NONE
version:	2.0
Trust: 1.9

nvd@nist.gov:	CVE-2020-11152
baseSeverity:	MEDIUM
baseScore:	6.4
vectorString:	CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H
attackVector:	LOCAL
attackComplexity:	HIGH
privilegesRequired:	HIGH
userInteraction:	NONE
scope:	UNCHANGED
confidentialityImpact:	HIGH
integrityImpact:	HIGH
availabilityImpact:	HIGH
exploitabilityScore:	0.5
impactScore:	5.9
version:	3.1
Trust: 1.0
NVD:	CVE-2020-11152
baseSeverity:	MEDIUM
baseScore:	6.4
vectorString:	CVSS:3.0/AV:L/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H
attackVector:	LOCAL
attackComplexity:	HIGH
privilegesRequired:	HIGH
userInteraction:	NONE
scope:	UNCHANGED
confidentialityImpact:	HIGH
integrityImpact:	HIGH
availabilityImpact:	HIGH
exploitabilityScore:	NONE
impactScore:	NONE
version:	3.0
Trust: 0.8

sources: VULMON: CVE-2020-11152 // JVNDB: JVNDB-2020-015621 // CNNVD: CNNVD-202012-589 // NVD: CVE-2020-11152

PROBLEMTYPE DATA

problemtype:	CWE-362	Trust: 1.0
problemtype:	Race condition (CWE-362) [NVD Evaluation ]	Trust: 0.8

sources: JVNDB: JVNDB-2020-015621 // NVD: CVE-2020-11152

THREAT TYPE

local

Trust: 0.6

sources: CNNVD: CNNVD-202012-589

TYPE

competition condition problem

Trust: 0.6

sources: CNNVD: CNNVD-202012-589

PATCH

title:	December 2020 Security Bulletin	url:	https://www.qualcomm.com/company/product-security/bulletins/december-2020-security-bulletin	Trust: 0.8
title:	Google Android Security vulnerabilities	url:	http://www.cnnvd.org.cn/web/xxk/bdxqById.tag?id=136102	Trust: 0.6

sources: JVNDB: JVNDB-2020-015621 // CNNVD: CNNVD-202012-589

EXTERNAL IDS

db:	NVD	id:	CVE-2020-11152	Trust: 2.5
db:	JVNDB	id:	JVNDB-2020-015621	Trust: 0.8
db:	CNNVD	id:	CNNVD-202012-589	Trust: 0.6
db:	VULMON	id:	CVE-2020-11152	Trust: 0.1

sources: VULMON: CVE-2020-11152 // JVNDB: JVNDB-2020-015621 // CNNVD: CNNVD-202012-589 // NVD: CVE-2020-11152

REFERENCES

url:	https://www.qualcomm.com/company/product-security/bulletins/december-2020-bulletin	Trust: 1.7
url:	https://www.qualcomm.com/company/product-security/bulletins/december-2020-security-bulletin	Trust: 1.7
url:	https://nvd.nist.gov/vuln/detail/cve-2020-11152	Trust: 1.4
url:	https://vigilance.fr/vulnerability/google-android-pixel-multiple-vulnerabilities-of-december-2020-34050	Trust: 0.6
url:	https://cwe.mitre.org/data/definitions/362.html	Trust: 0.1
url:	https://nvd.nist.gov	Trust: 0.1

sources: VULMON: CVE-2020-11152 // JVNDB: JVNDB-2020-015621 // CNNVD: CNNVD-202012-589 // NVD: CVE-2020-11152

SOURCES

db:	VULMON	id:	CVE-2020-11152
db:	JVNDB	id:	JVNDB-2020-015621
db:	CNNVD	id:	CNNVD-202012-589
db:	NVD	id:	CVE-2020-11152

LAST UPDATE DATE

2024-08-14T15:38:12.529000+00:00

SOURCES UPDATE DATE

db:	VULMON	id:	CVE-2020-11152	date:	2021-01-29T00:00:00
db:	JVNDB	id:	JVNDB-2020-015621	date:	2021-10-06T08:57:00
db:	CNNVD	id:	CNNVD-202012-589	date:	2021-07-09T00:00:00
db:	NVD	id:	CVE-2020-11152	date:	2021-01-29T20:24:22.057

SOURCES RELEASE DATE

db:	VULMON	id:	CVE-2020-11152	date:	2021-01-21T00:00:00
db:	JVNDB	id:	JVNDB-2020-015621	date:	2021-10-06T00:00:00
db:	CNNVD	id:	CNNVD-202012-589	date:	2020-12-08T00:00:00
db:	NVD	id:	CVE-2020-11152	date:	2021-01-21T10:15:13.947