CVE-2020-11282
HIGHQualcomm PM8004 - Improper Access Control via mmap with Special Offset
Title source: llmDescription
Improper access control when using mmap with the kgsl driver with a special offset value that can be provided to map the memstore of the GPU to user space in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables
References (1)
Core 1
Core References
Patch, Vendor Advisory x_refsource_confirm
https://www.qualcomm.com/company/product-security/bulletins/february-2021-bulletin
Scores
CVSS v3
7.8
EPSS
0.0004
EPSS Percentile
13.2%
Attack Vector
LOCAL
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Details
Status
published
Products (50)
qualcomm/apq8009
qualcomm/apq8009w
qualcomm/apq8017
qualcomm/apq8037
qualcomm/apq8053
qualcomm/apq8064au
qualcomm/apq8076
qualcomm/apq8096au
qualcomm/aqt1000
qualcomm/ar6003
... and 40 more
Published
Feb 22, 2021
Tracked Since
Feb 18, 2026