{"id":"CVE-2020-11298","url":"https://www.cyber-defence.io/tools/cve/CVE-2020-11298","generatedAt":"2026-10-27T23:28:25.849Z","title":"While waiting for a response to a callback or listener request, non-secure clients can change permissions to shared memory buffers used by HLOS Invoke Call to secure kernel in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon…","description":"While waiting for a response to a callback or listener request, non-secure clients can change permissions to shared memory buffers used by HLOS Invoke Call to secure kernel in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wired Infrastructure and Networking","published":"2021-06-09T07:15:08.000Z","lastModified":"2026-06-17T02:50:05.000Z","status":"Modified","sourceIdentifier":"product-security@qualcomm.com","cvss":{"version":"3.1","score":7,"severity":"HIGH","vector":"CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H"},"cwe":["CWE-367"],"affected":["qualcomm/aqt1000 firmware","qualcomm/ar8031 firmware","qualcomm/ar8035 firmware","qualcomm/csra6620 firmware","qualcomm/csra6640 firmware","qualcomm/mdm9205 firmware","qualcomm/mdm9206 firmware","qualcomm/mdm9628 firmware","qualcomm/qca4004 firmware","qualcomm/qca6390 firmware","qualcomm/qca6391 firmware","qualcomm/qca6420 firmware","qualcomm/qca6421 firmware","qualcomm/qca6426 firmware","qualcomm/qca6430 firmware","qualcomm/qca6431 firmware","qualcomm/qca6436 firmware","qualcomm/qca6564a firmware","qualcomm/qca6564au firmware","qualcomm/qca6574a firmware","qualcomm/qca6574au firmware","qualcomm/qca6584au firmware","qualcomm/qca6595 firmware","qualcomm/qca6595au firmware","qualcomm/qca6696 firmware","qualcomm/qca8337 firmware","qualcomm/qca9367 firmware","qualcomm/qca9377 firmware","qualcomm/qca9984 firmware","qualcomm/qcm2290 firmware","qualcomm/qcm4290 firmware","qualcomm/qcm6125 firmware","qualcomm/qcs2290 firmware","qualcomm/qcs405 firmware","qualcomm/qcs410 firmware","qualcomm/qcs4290 firmware","qualcomm/qcs603 firmware","qualcomm/qcs605 firmware","qualcomm/qcs610 firmware","qualcomm/qcs6125 firmware","qualcomm/qsm8250 firmware","qualcomm/sa415m firmware","qualcomm/sa515m firmware","qualcomm/sa6155p firmware","qualcomm/sa8155 firmware","qualcomm/sa8155p firmware","qualcomm/sa8195p firmware","qualcomm/sc8180x\\+sdx55 firmware","qualcomm/sd 675 firmware","qualcomm/sd 8c firmware","qualcomm/sd 8cx firmware","qualcomm/sd460 firmware","qualcomm/sd480 firmware","qualcomm/sd662 firmware","qualcomm/sd665 firmware","qualcomm/sd670 firmware","qualcomm/sd675 firmware","qualcomm/sd678 firmware","qualcomm/sd690 5g firmware","qualcomm/sd710 firmware"],"epss":{"score":0.00137,"percentile":0.0305,"date":"2026-10-26","history":[]},"kev":{"listed":false},"exploits":{"count":0,"verified":false,"firstPublished":null,"source":"Exploit-DB (https://gitlab.com/exploit-database/exploitdb)","entries":[]},"verdict":{"level":"high","text":"High impact if exploited, but EPSS currently rates exploitation as unlikely (0.14%). Schedule it in the normal patch cycle and watch for a rise in EPSS or a public exploit."},"changes":[],"references":[{"url":"https://www.qualcomm.com/company/product-security/bulletins/june-2021-bulletin","tags":["Vendor Advisory"],"source":"product-security@qualcomm.com"},{"url":"https://www.qualcomm.com/company/product-security/bulletins/june-2021-bulletin","tags":["Vendor Advisory"],"source":"af854a3a-2127-422b-91ae-364da2661108"}],"sources":{"nvd":"https://nvd.nist.gov/vuln/detail/CVE-2020-11298","epss":"https://www.first.org/epss/","kev":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog","exploitdb":"https://www.exploit-db.com/"},"licence":"CC BY 4.0 — link back to the CVE Explorer if you publish the results; upstream data remains subject to its own terms."}