VulnerabilityModified
CVE-2020-11231
Two threads call one or both functions concurrently leading to corruption of pointers and reference counters which in turn can lead to heap corruption in Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT,…
MEDIUM 6.7EPSS 0.15%
Does this matter?
Lower severity and a low EPSS score (0.15%). Track it; it rarely justifies an emergency change on its own.
Description
Two threads call one or both functions concurrently leading to corruption of pointers and reference counters which in turn can lead to heap corruption in Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile
- CVSS 3.1
- 6.7 MEDIUMCVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H
- EPSS
- 0.15% probability · 5th percentile
- CISA KEV
- Not listed
- Weakness
- CWE-415
- Affected
- qualcomm/apq8017 firmware · qualcomm/apq8053 firmware · qualcomm/aqt1000 firmware · qualcomm/msm8917 firmware · qualcomm/msm8953 firmware · qualcomm/pm215 firmware · qualcomm/pm3003a firmware · qualcomm/pm439 firmware · qualcomm/pm6125 firmware · qualcomm/pm6150 firmware · qualcomm/pm6150l firmware · qualcomm/pm7150a firmware · qualcomm/pm7150l firmware · qualcomm/pm7250 firmware · qualcomm/pm7250b firmware · qualcomm/pm7350c firmware · qualcomm/pm8008 firmware · qualcomm/pm8009 firmware · qualcomm/pm8150a firmware · qualcomm/pm8150b firmware · +40 more
- Source
- product-security@qualcomm.com
References
- https://www.qualcomm.com/company/product-security/bulletins/april-2021-bulletinPatch, Vendor Advisory
- https://www.qualcomm.com/company/product-security/bulletins/april-2021-bulletinPatch, Vendor Advisory
Source: NVD record, EPSS from FIRST.org, KEV from CISA. Refreshed daily.