CVE-2020-11152
MEDIUMQualcomm Snapdragon - Race Condition in HAL Layer via HIDL Callback Processing
Title source: llmDescription
Race condition in HAL layer while processing callback objects received from HIDL due to lack of synchronization between accessing objects in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables
References (2)
Core 2
Core References
Broken Link x_refsource_confirm
https://www.qualcomm.com/company/product-security/bulletins/december-2020-bulletin
Patch, Vendor Advisory
https://www.qualcomm.com/company/product-security/bulletins/december-2020-security-bulletin
Scores
CVSS v3
6.4
EPSS
0.0003
EPSS Percentile
8.3%
Attack Vector
LOCAL
CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H
Details
CWE
CWE-362
Status
published
Products (50)
qualcomm/apq8009w
qualcomm/apq8017
qualcomm/apq8037
qualcomm/apq8052
qualcomm/apq8053
qualcomm/apq8056
qualcomm/apq8076
qualcomm/apq8096au
qualcomm/aqt1000
qualcomm/ar8031
... and 40 more
Published
Jan 21, 2021
Tracked Since
Feb 18, 2026