{"id":"CVE-2020-11284","url":"https://www.cyber-defence.io/tools/cve/CVE-2020-11284","generatedAt":"2026-10-27T22:25:45.321Z","title":"Locked memory can be unlocked and modified by non secure boot loader through improper system call sequence making the memory region untrusted source of input for secure boot loader in Snapdragon Auto, Snapdragon Compute, Snapdragon Industrial IOT,…","description":"Locked memory can be unlocked and modified by non secure boot loader through improper system call sequence making the memory region untrusted source of input for secure boot loader in Snapdragon Auto, Snapdragon Compute, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Wired Infrastructure and Networking","published":"2021-05-07T09:15:08.000Z","lastModified":"2026-06-17T02:49:59.000Z","status":"Modified","sourceIdentifier":"product-security@qualcomm.com","cvss":{"version":"3.1","score":7.8,"severity":"HIGH","vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H"},"cwe":["CWE-667"],"affected":["qualcomm/aqt1000 firmware","qualcomm/ar8035 firmware","qualcomm/pm3003a firmware","qualcomm/pm4125 firmware","qualcomm/pm4250 firmware","qualcomm/pm6125 firmware","qualcomm/pm6150 firmware","qualcomm/pm6150a firmware","qualcomm/pm6150l firmware","qualcomm/pm6350 firmware","qualcomm/pm640a firmware","qualcomm/pm640l firmware","qualcomm/pm640p firmware","qualcomm/pm7250b firmware","qualcomm/pm8004 firmware","qualcomm/pm8005 firmware","qualcomm/pm8008 firmware","qualcomm/pm8009 firmware","qualcomm/pm8150a firmware","qualcomm/pm8150b firmware","qualcomm/pm8150c firmware","qualcomm/pm8150l firmware","qualcomm/pm8250 firmware","qualcomm/pm8350 firmware","qualcomm/pm855 firmware","qualcomm/pm855b firmware","qualcomm/pm855l firmware","qualcomm/pm855p firmware","qualcomm/pm8998 firmware","qualcomm/pmd9655 firmware","qualcomm/pmi632 firmware","qualcomm/pmi8998 firmware","qualcomm/pmk8002 firmware","qualcomm/pmk8003 firmware","qualcomm/pmm8195au firmware","qualcomm/pmm855au firmware","qualcomm/pmr525 firmware","qualcomm/pmx24 firmware","qualcomm/pmx55 firmware","qualcomm/qat3522 firmware","qualcomm/qat3550 firmware","qualcomm/qbt1500 firmware","qualcomm/qbt2000 firmware","qualcomm/qca6390 firmware","qualcomm/qca6391 firmware","qualcomm/qca6420 firmware","qualcomm/qca6421 firmware","qualcomm/qca6426 firmware","qualcomm/qca6430 firmware","qualcomm/qca6431 firmware","qualcomm/qca6436 firmware","qualcomm/qca6574au firmware","qualcomm/qca6595 firmware","qualcomm/qca9984 firmware","qualcomm/qcm2290 firmware","qualcomm/qcm4290 firmware","qualcomm/qcs2290 firmware","qualcomm/qcs405 firmware","qualcomm/qcs4290 firmware","qualcomm/qet4101 firmware"],"epss":{"score":0.00158,"percentile":0.04937,"date":"2026-10-26","history":[]},"kev":{"listed":false},"exploits":{"count":0,"verified":false,"firstPublished":null,"source":"Exploit-DB (https://gitlab.com/exploit-database/exploitdb)","entries":[]},"verdict":{"level":"high","text":"High impact if exploited, but EPSS currently rates exploitation as unlikely (0.16%). Schedule it in the normal patch cycle and watch for a rise in EPSS or a public exploit."},"changes":[],"references":[{"url":"https://www.qualcomm.com/company/product-security/bulletins/may-2021-bulletin","tags":["Vendor Advisory"],"source":"product-security@qualcomm.com"},{"url":"https://www.qualcomm.com/company/product-security/bulletins/may-2021-bulletin","tags":["Vendor Advisory"],"source":"af854a3a-2127-422b-91ae-364da2661108"}],"sources":{"nvd":"https://nvd.nist.gov/vuln/detail/CVE-2020-11284","epss":"https://www.first.org/epss/","kev":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog","exploitdb":"https://www.exploit-db.com/"},"licence":"CC BY 4.0 — link back to the CVE Explorer if you publish the results; upstream data remains subject to its own terms."}