CVE-2020-11123

MediumCVSS 5.5/10Last modified Jun 17, 2026

Description

u'information disclosure in gatekeeper trustzone implementation as the throttling mechanism to prevent brute force attempts at getting user`s lock-screen password can be bypassed by performing the standard gatekeeper operations.' in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon IoT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables, Snapdragon Wired Infrastructure and Networking in APQ8009, APQ8009W, APQ8017, APQ8037, APQ8053, APQ8064AU, APQ8096, APQ8096AU, APQ8096SG, APQ8098, MDM8207, MDM9150, MDM9205, MDM9206, MDM9207, MDM9250, MDM9607, MDM9628, MDM9640, MDM9650, MDM9655, MSM8108, MSM8208, MSM8209, MSM8608, MSM8905, MSM8909, MSM8909W, MSM8917, MSM8920, MSM8937, MSM8940, MSM8953, MSM8996, MSM8996AU, MSM8996SG, MSM8998, QCM4290, QCS405, QCS410, QCS4290, QCS603, QCS605, QCS610, QM215, QSM8250, QSM8350, SA415M, SA515M, SA6145P, SA6150P, SA6155, SA6155P, SA8150P, SA8155, SA8155P, SA8195P, SC7180, SC8180X, SC8180XP, SDA429W, SDA640, SDA660, SDA670, SDA845, SDA855, SDM1000, SDM429, SDM429W, SDM439, SDM450, SDM455, SDM630, SDM632, SDM636, SDM640, SDM660, SDM670, SDM710, SDM712, SDM830, SDM845, SDM850, SDW2500, SDX24, SDX50M, SDX55, SDX55M, SM4125, SM4250, SM4250P, SM6115, SM6115P, SM6125, SM6150, SM6150P, SM6250, SM6250P, SM6350, SM7125, SM7150, SM7150P, SM7225, SM7250, SM7250P, SM8150, SM8150P, SM8250, SM8350, SM8350P, SXR1120, SXR1130, SXR2130, SXR2130P, WCD9330

Metrics

CVSS 3.1 5.5/10CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

Affected software

No affected versions have been published.

Timeline

Published: Nov 12, 2020
Last modified: Jun 17, 2026
NVD status: Modified

Related CVEs from 2020

CVE-2020-111247.8u'Possible use-after-free while accessing diag client map table since list can be reallocated due to exceeding max client limit.' in Snapdra CVE-2020-111257.8u'Out of bound access can happen in MHI command process due to lack of check of channel id value received from MHI devices' in Snapdragon Au CVE-2020-111269.1Possible out of bound read while WLAN frame parsing due to lack of check for body and header length in Snapdragon Auto, Snapdragon Compute, CVE-2020-111277.8u'Integer overflow can cause a buffer overflow due to lack of table length check in the extensible boot Loader during the validation of secu CVE-2020-111287.8u'Possible out of bound access while copying the mask file content into the buffer without checking the buffer size' in Snapdragon Auto, Sna CVE-2020-111297.8u'During the error occurrence in capture request, the buffer is freed and later accessed causing the camera APP to fail due to memory use-af CVE-2020-11135.3A security feature bypass vulnerability exists in Microsoft Windows when the Task Scheduler service fails to properly verify client connecti CVE-2020-111307.8u'Possible buffer overflow in WIFI hal process due to copying data without checking the buffer length' in Snapdragon Auto, Snapdragon Comput CVE-2020-111317.8u'Possible buffer overflow in WMA message processing due to integer overflow occurs when processing command received from user space' in Sna CVE-2020-111327.1u'Buffer over read in boot due to size check ignored before copying GUID attribute from request to response' in Snapdragon Auto, Snapdragon CVE-2020-111337.8u'Possible out of bound array write in rxdco cal utility due to lack of array bound check' in Snapdragon Compute, Snapdragon Consumer IOT, S CVE-2020-111349.8Possible stack out of bound write might happen due to time bitmap length and bit duration fields of the attributes like NAN ranging setup at