{"id":"CVE-2020-11228","url":"https://www.cyber-defence.io/tools/cve/CVE-2020-11228","generatedAt":"2026-10-27T21:19:53.520Z","title":"Part of RPM region was not protected from xblSec itself due to improper policy and leads to unprivileged access in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile,…","description":"Part of RPM region was not protected from xblSec itself due to improper policy and leads to unprivileged access in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Wired Infrastructure and Networking","published":"2021-03-17T06:15:14.000Z","lastModified":"2026-06-17T02:49:39.000Z","status":"Modified","sourceIdentifier":"product-security@qualcomm.com","cvss":{"version":"3.1","score":7.8,"severity":"HIGH","vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H"},"cwe":[],"affected":["qualcomm/aqt1000 firmware","qualcomm/ar8035 firmware","qualcomm/pm4125 firmware","qualcomm/pm4250 firmware","qualcomm/pm6125 firmware","qualcomm/pm6150 firmware","qualcomm/pm6150a firmware","qualcomm/pm6150l firmware","qualcomm/pm6350 firmware","qualcomm/pm640a firmware","qualcomm/pm640l firmware","qualcomm/pm640p firmware","qualcomm/pm7250b firmware","qualcomm/pm8004 firmware","qualcomm/pm8005 firmware","qualcomm/pm8008 firmware","qualcomm/pm8350 firmware","qualcomm/pm855 firmware","qualcomm/pm855a firmware","qualcomm/pm855b firmware","qualcomm/pm855l firmware","qualcomm/pm855p firmware","qualcomm/pm8998 firmware","qualcomm/pmd9655 firmware","qualcomm/pmi632 firmware","qualcomm/pmi8998 firmware","qualcomm/pmk8002 firmware","qualcomm/pmk8003 firmware","qualcomm/pmm8195au firmware","qualcomm/pmm855au firmware","qualcomm/pmx24 firmware","qualcomm/pmx50 firmware","qualcomm/pmx55 firmware","qualcomm/qat3519 firmware","qualcomm/qat3522 firmware","qualcomm/qat3550 firmware","qualcomm/qat3555 firmware","qualcomm/qat5515 firmware","qualcomm/qat5516 firmware","qualcomm/qbt1500 firmware","qualcomm/qbt2000 firmware","qualcomm/qca6390 firmware","qualcomm/qca6420 firmware","qualcomm/qca6430 firmware","qualcomm/qca6574a firmware","qualcomm/qca6574au firmware","qualcomm/qca6595 firmware","qualcomm/qca6696 firmware","qualcomm/qca9984 firmware","qualcomm/qcm2290 firmware","qualcomm/qcm4290 firmware","qualcomm/qcs2290 firmware","qualcomm/qcs405 firmware","qualcomm/qcs4290 firmware","qualcomm/qdm2301 firmware","qualcomm/qdm2302 firmware","qualcomm/qet4101 firmware","qualcomm/qet5100 firmware","qualcomm/qpa4360 firmware","qualcomm/qpa4361 firmware"],"epss":{"score":0.00205,"percentile":0.10399,"date":"2026-10-26","history":[]},"kev":{"listed":false},"exploits":{"count":0,"verified":false,"firstPublished":null,"source":"Exploit-DB (https://gitlab.com/exploit-database/exploitdb)","entries":[]},"verdict":{"level":"high","text":"High impact if exploited, but EPSS currently rates exploitation as unlikely (0.21%). Schedule it in the normal patch cycle and watch for a rise in EPSS or a public exploit."},"changes":[],"references":[{"url":"https://www.qualcomm.com/company/product-security/bulletins/march-2021-bulletin","tags":["Vendor Advisory"],"source":"product-security@qualcomm.com"},{"url":"https://www.qualcomm.com/company/product-security/bulletins/march-2021-bulletin","tags":["Vendor Advisory"],"source":"af854a3a-2127-422b-91ae-364da2661108"}],"sources":{"nvd":"https://nvd.nist.gov/vuln/detail/CVE-2020-11228","epss":"https://www.first.org/epss/","kev":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog","exploitdb":"https://www.exploit-db.com/"},"licence":"CC BY 4.0 — link back to the CVE Explorer if you publish the results; upstream data remains subject to its own terms."}