VulnerabilityModified
CVE-2020-11277
Possible race condition during async fastrpc session after sending RPC message due to the fastrpc ctx gets free during async session in Snapdragon Compute, Snapdragon Industrial IOT, Snapdragon Mobile
HIGH 7.4EPSS 0.11%
Does this matter?
High impact if exploited, but EPSS currently rates exploitation as unlikely (0.11%). Schedule it in the normal patch cycle and watch for a rise in EPSS or a public exploit.
Description
Possible race condition during async fastrpc session after sending RPC message due to the fastrpc ctx gets free during async session in Snapdragon Compute, Snapdragon Industrial IOT, Snapdragon Mobile
- CVSS 3.1
- 7.4 HIGHCVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H
- EPSS
- 0.11% probability · 2th percentile
- CISA KEV
- Not listed
- Weakness
- CWE-362, CWE-416
- Affected
- qualcomm/pm3003a firmware · qualcomm/pm4250 firmware · qualcomm/pm6125 firmware · qualcomm/pm6150a firmware · qualcomm/pm6150l firmware · qualcomm/pm6350 firmware · qualcomm/pm7150a firmware · qualcomm/pm7150l firmware · qualcomm/pm7250 firmware · qualcomm/pm7250b firmware · qualcomm/pm7350c firmware · qualcomm/pm8008 firmware · qualcomm/pm8009 firmware · qualcomm/pm8150a firmware · qualcomm/pm8150b firmware · qualcomm/pm8150c firmware · qualcomm/pm8150l firmware · qualcomm/pm8250 firmware · qualcomm/pm8350 firmware · qualcomm/pm8350b firmware · +40 more
- Source
- product-security@qualcomm.com
References
Source: NVD record, EPSS from FIRST.org, KEV from CISA. Refreshed daily.