Skip to main content

Severity by source

NVD PRIMARY
7.0 HIGH
AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H

Primary rating from NVD · only source for this CVE.

CVSS VectorNVD

CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H
Attack Vector
Local
Attack Complexity
High
Privileges Required
Low
User Interaction
None
Scope
Unchanged
Confidentiality
High
Integrity
High
Availability
High

Lifecycle Timeline

1
CVE Published
Nov 02, 2020 - 07:15 nvd
HIGH 7.0

DescriptionNVD

u'Two threads running simultaneously from user space can lead to race condition in fastRPC driver' in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables, Snapdragon Wired Infrastructure and Networking in Agatti, APQ8053, Bitra, IPQ4019, IPQ5018, IPQ6018, IPQ8064, IPQ8074, Kamorta, MDM9607, MSM8953, Nicobar, QCA6390, QCS404, QCS405, QCS610, Rennell, SA515M, SA6155P, SA8155P, Saipan, SC8180X, SDA845, SDM429, SDM429W, SDM632, SDM660, SDX55, SM6150, SM7150, SM8150, SM8250, SXR2130

AnalysisAI

u'Two threads running simultaneously from user space can lead to race condition in fastRPC driver' in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon. Rated high severity (CVSS 7.0).

Technical ContextAI

This vulnerability is classified under CWE-362. u'Two threads running simultaneously from user space can lead to race condition in fastRPC driver' in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables, Snapdragon Wired Infrastructure and Networking in Agatti, APQ8053, Bitra, IPQ4019, IPQ5018, IPQ6018, IPQ8064, IPQ8074, Kamorta, MDM9607, MSM8953, Nicobar, QCA6390, QCS404, QCS405, QCS610, Rennell, SA515M, SA6155P, SA8155P, Saipan, SC8180X, SDA845, SDM429, SDM429W, SDM632, SDM660, SDX55, SM6150, SM7150, SM8150, SM8250, SXR2130 Affected products include: Qualcomm Agatti Firmware, Qualcomm Apq8053 Firmware, Qualcomm Bitra Firmware, Qualcomm Ipq4019 Firmware, Qualcomm Ipq5018 Firmware.

RemediationAI

A vendor patch is available. Apply the latest security update as soon as possible. Apply vendor patches when available. Implement network segmentation and monitoring as interim mitigations.

CVE-2020-3692 CRITICAL
9.8 Nov 02

u'Possible buffer overflow while updating output buffer for IMEI and Gateway Address due to lack of check of input valid

CVE-2020-3673 CRITICAL
9.8 Nov 02

u'Buffer overflow can happen as part of SIP message packet processing while storing values in array due to lack of check

CVE-2020-3654 CRITICAL
9.8 Nov 02

u'Buffer overflow occurs while processing SIP message packet due to lack of check of index validation before copying int

CVE-2020-3670 CRITICAL
9.1 Nov 02

u'Potential out of bounds read while processing downlink NAS transport message due to improper length check of Informati

CVE-2020-3690 HIGH
7.8 Nov 02

u'Due to an incorrect SMMU configuration, the modem crypto engine can potentially compromise the hypervisor' in Snapdrag

CVE-2020-3684 HIGH
7.8 Nov 02

u'QSEE reads the access permission policy for the SMEM TOC partition from the SMEM TOC contents populated by XBL Loader

CVE-2020-3678 HIGH
7.8 Nov 02

u'A buffer overflow could occur if the API is improperly used due to UIE init does not contain a buffer size a param' in

CVE-2020-3638 HIGH
7.8 Nov 02

u'An Unaligned address or size can propagate to the database due to improper page permissions and can lead to improper a

CVE-2020-11174 HIGH
7.8 Nov 02

u'Array index underflow issue in adsp driver due to improper check of channel id before used as array index.' in Snapdra

CVE-2020-11164 HIGH
7.8 Nov 02

u'Third-party app may also call the broadcasts in Perfdump and cause privilege escalation issue due to improper access c

CVE-2020-11162 HIGH
7.8 Nov 02

u'Possible buffer overflow in MHI driver due to lack of input parameter validation of EOT events received from MHI devic

CVE-2020-11125 HIGH
7.8 Nov 02

u'Out of bound access can happen in MHI command process due to lack of check of channel id value received from MHI devic

Share

CVE-2020-11173 vulnerability details – vuln.today

This site uses cookies essential for authentication and security. No tracking or analytics cookies are used. Privacy Policy