CVE-2020-11233

HIGH

Qualcomm APQ8009 Firmware - Time-of-check Time-of-use Race Condition in Partition Entry Processing

Title source: llm
STIX 2.1

Description

Time-of-check time-of-use race condition While processing partition entries due to newly created buffer was read again from mmc without validation in Snapdragon Auto, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables

References (1)

Core 1
Core References

Scores

CVSS v3 7.0
EPSS 0.0003
EPSS Percentile 7.6%
Attack Vector LOCAL
CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H

Details

CWE
CWE-367
Status published
Products (50)
qualcomm/apq8009_firmware
qualcomm/apq8009w_firmware
qualcomm/apq8017_firmware
qualcomm/apq8053_firmware
qualcomm/apq8076_firmware
qualcomm/apq8096au_firmware
qualcomm/csr6030_firmware
qualcomm/mdm9206_firmware
qualcomm/mdm9230_firmware
qualcomm/mdm9250_firmware
... and 40 more
Published Jun 09, 2021
Tracked Since Feb 18, 2026