Qualcomm, Inc. Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Wearables
At a glance
- Source
- NVD
- EPSS
- EPSS 0.13 % · percentile 3 ()
- State
- PUBLISHED
- Published
- Updated
- Assigner
- qualcomm
- NVD status
- Modified
Description
Race condition occurs while calling user space ioctl from two different threads can results to use after free issue in video in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Wearables
Weaknesses (CWE)
- CWE-362 — Concurrent Execution using Shared Resource with Improper Synchronization
- CWE-416 — Use After Free
References
Scores
| Version | Score | Vector | Scored by |
|---|---|---|---|
| CVSS 3.1 | MEDIUM 6.4 | CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H | NVD · nvd@nist.gov (Primary) |
| CVSS 2.0 | MEDIUM 6.9 | AV:L/AC:M/Au:N/C:C/I:C/A:C | NVD · nvd@nist.gov (Primary) |
European references
- ENISA EUVD · EUVD-2020-3505
- GCVE · GCVE-0-2020-11151
Affected configurations (NVD CPE)
cpe:2.3:h:qualcomm:pm3003a:-:*:*:*:*:*:*:*cpe:2.3:h:qualcomm:pm6125:-:*:*:*:*:*:*:*cpe:2.3:h:qualcomm:pm6150:-:*:*:*:*:*:*:*cpe:2.3:h:qualcomm:pm6150a:-:*:*:*:*:*:*:*cpe:2.3:h:qualcomm:pm6150l:-:*:*:*:*:*:*:*cpe:2.3:h:qualcomm:pm6350:-:*:*:*:*:*:*:*cpe:2.3:h:qualcomm:pm640a:-:*:*:*:*:*:*:*cpe:2.3:h:qualcomm:pm640l:-:*:*:*:*:*:*:*cpe:2.3:h:qualcomm:pm640p:-:*:*:*:*:*:*:*cpe:2.3:h:qualcomm:pm7150a:-:*:*:*:*:*:*:*cpe:2.3:h:qualcomm:pm7150l:-:*:*:*:*:*:*:*cpe:2.3:h:qualcomm:pm7250:-:*:*:*:*:*:*:*cpe:2.3:h:qualcomm:pm7250b:-:*:*:*:*:*:*:*cpe:2.3:h:qualcomm:pm8008:-:*:*:*:*:*:*:*cpe:2.3:h:qualcomm:pm8009:-:*:*:*:*:*:*:*cpe:2.3:h:qualcomm:pm8150a:-:*:*:*:*:*:*:*cpe:2.3:h:qualcomm:pm8150b:-:*:*:*:*:*:*:*cpe:2.3:h:qualcomm:pm8150c:-:*:*:*:*:*:*:*cpe:2.3:h:qualcomm:pm8150l:-:*:*:*:*:*:*:*cpe:2.3:h:qualcomm:pm8250:-:*:*:*:*:*:*:*cpe:2.3:h:qualcomm:pmi632:-:*:*:*:*:*:*:*cpe:2.3:h:qualcomm:pmk8002:-:*:*:*:*:*:*:*cpe:2.3:h:qualcomm:pmk8003:-:*:*:*:*:*:*:*cpe:2.3:h:qualcomm:pmm8195au:-:*:*:*:*:*:*:*cpe:2.3:h:qualcomm:pmm855au:-:*:*:*:*:*:*:*cpe:2.3:h:qualcomm:pmr525:-:*:*:*:*:*:*:*cpe:2.3:h:qualcomm:pmr735a:-:*:*:*:*:*:*:*cpe:2.3:h:qualcomm:pmr735b:-:*:*:*:*:*:*:*cpe:2.3:h:qualcomm:pmx55:-:*:*:*:*:*:*:*cpe:2.3:h:qualcomm:qat3516:-:*:*:*:*:*:*:*cpe:2.3:h:qualcomm:qat3518:-:*:*:*:*:*:*:*cpe:2.3:h:qualcomm:qat3519:-:*:*:*:*:*:*:*cpe:2.3:h:qualcomm:qat3522:-:*:*:*:*:*:*:*cpe:2.3:h:qualcomm:qat3550:-:*:*:*:*:*:*:*cpe:2.3:h:qualcomm:qat3555:-:*:*:*:*:*:*:*cpe:2.3:h:qualcomm:qat5515:-:*:*:*:*:*:*:*cpe:2.3:h:qualcomm:qat5516:-:*:*:*:*:*:*:*cpe:2.3:h:qualcomm:qat5522:-:*:*:*:*:*:*:*cpe:2.3:h:qualcomm:qat5533:-:*:*:*:*:*:*:*cpe:2.3:h:qualcomm:qbt1500:-:*:*:*:*:*:*:*- +125 more
Affected products
| Product | Versions |
|---|---|
| Qualcomm, Inc. · Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Wearables | affected PM3003A, PM6125, PM6150, PM6150A, PM6150L, PM6350, PM640A, PM640L, PM640P, PM7150A, PM7150L, PM7250, PM7250B, PM8008, PM8009, PM8150A, PM8150B, PM8150C, PM8150L, PM8250, PMI632, PMK8002, PMK8003, PMM8195AU, PMM855AU, PMR525, PMR735A, PMR735B, PMX55, QAT3516, QAT3518, QAT3519, QAT3522, QAT3550, QAT3555, QAT5515, QAT5516, QAT5522, QAT5533, QBT1500, QBT2000, QCA6390, QCA6391, QCA6421, QCA6426, QCA6431, QCA6436, QCA6574A, QCA6574AU, QCA6584AU, QCA6595, QCA6595AU, QCA6696, QCM4290, QCS4290, QDM2301, QDM2305, QDM2307, QDM2308, QDM2310, QDM3301, QDM5620, QDM5621, QDM5650, QDM5652, QDM5670, QDM5671, QDM5677, QDM5679, QET4101, QET5100, QET6100, QET6110, QFS2530, QFS2580, QLN4642, QLN4650, QLN5020, QLN5030, QLN5040, QPA2625, QPA4360, QPA5580, QPA5581, QPA6560, QPA8673, QPA8686, QPA8801, QPA8802, QPA8803, QPA8821, QPA8842, QPM4650, QPM5621, QPM5658, QPM5670, QPM5677, QPM5679, QPM6582, QPM6585, QPM8820, QPM8830, QPM8870, QPM8895, QSM7250, QSW8574, QTC410S, QTC800H, QTC801S, QTM525, SA6155P, SA8150P, SA815 ...[truncated*] |
Sources
| Source | Licence |
|---|---|
| CVE List (CVEProject cvelistV5) | CVE Program Terms of Use |
| EPSS (FIRST.org) | FIRST — attribution requested |
| ENISA EUVD | ENISA — reproduction authorised, source acknowledged |
| NVD (NIST) via fkie-cad/nvd-json-data-feeds | Public domain — this product uses data from the NVD API but is not endorsed or certified by the NVD |