CVE-2020-11152

MediumCVSS 6.4/10Last modified Jun 17, 2026

Description

Race condition in HAL layer while processing callback objects received from HIDL due to lack of synchronization between accessing objects in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables

Metrics

CVSS 3.1 6.4/10CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H

Weakness enumeration

CWE-362

Affected software

No affected versions have been published.

Timeline

Published
Jan 21, 2021
Last modified
Jun 17, 2026
NVD status
Modified

Related CVEs from 2020

CVE-2020-111539.8u'Out of bound memory access while processing GATT data received due to lack of check of pdu data length and leads to remote code execution'CVE-2020-111548.8u'Buffer overflow while processing a crafted PDU data packet in bluetooth due to lack of check of buffer size before copying' in Snapdragon CVE-2020-111558.8u'Buffer overflow while processing PDU packet in bluetooth due to lack of check of buffer length before copying into it.' in Snapdragon AutoCVE-2020-111568.1u'Buffer over-read issue in Bluetooth estack due to lack of check for invalid length of L2cap packet received from peer device.' in SnapdragCVE-2020-111577.5u'Lack of handling unexpected control messages while encryption was in progress can terminate the connection and thus leading to a DoS' in SCVE-2020-111587.5u'Null pointer dereference in HP OfficeJet Pro 8210 jbig2 filter due to lack of check of PDF font array leads to denial of service' in IPS PCVE-2020-111599.1Buffer over-read can happen while processing WPA,RSN IE of beacon and response frames if IE length is less than length of frame pointer beinCVE-2020-11165.5An information disclosure vulnerability exists when the Windows Client Server Run-Time Subsystem (CSRSS) fails to properly handle objects inCVE-2020-111606.7Resource leakage issue during dci client registration due to reference count is not decremented if dci client registration fails in SnapdragCVE-2020-111617.1Out-of-bounds memory access can occur while calculating alignment requirements for a negative width from external components in Snapdragon ACVE-2020-111627.8u'Possible buffer overflow in MHI driver due to lack of input parameter validation of EOT events received from MHI device side' in SnapdragoCVE-2020-111639.8Possible buffer overflow while updating ikev2 parameters due to lack of check of input validation for certain parameters received from the e