CVE-2020-11220

MediumCVSS 6.4/10Last modified Jun 17, 2026

Description

While processing storage SCM commands there is a time of check or time of use window where a pointer used could be invalid at a specific time while executing the storage SCM call in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Wired Infrastructure and Networking

Metrics

CVSS 3.1 6.4/10CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H

Weakness enumeration

CWE-367

Affected software

No affected versions have been published.

Timeline

Published
Mar 17, 2021
Last modified
Jun 17, 2026
NVD status
Modified

Related CVEs from 2020

CVE-2020-112215.5Usage of syscall by non-secure entity can allow extraction of secure QTEE diagnostic information in clear text form due to insufficient checCVE-2020-112229.1Buffer over read while processing MT SMS with maximum length due to improper length check in Snapdragon Auto, Snapdragon Compute, SnapdragonCVE-2020-112237.8Out of bound in camera driver due to lack of check of validation of array index before copying into array in Snapdragon Auto, Snapdragon ComCVE-2020-112259.8Out of bound access in WLAN driver due to lack of validation of array length before copying into array in Snapdragon Auto, Snapdragon ComputCVE-2020-112267.5Out of bound memory read in Data modem while unpacking data due to lack of offset length check in Snapdragon Auto, Snapdragon Compute, SnapdCVE-2020-112279.8Out of bound write while parsing RTT/TTY packet parsing due to lack of check of buffer size before copying into buffer in Snapdragon Auto, SCVE-2020-112287.8Part of RPM region was not protected from xblSec itself due to improper policy and leads to unprivileged access in Snapdragon Auto, SnapdragCVE-2020-11235.5A denial of service vulnerability exists when Connected User Experiences and Telemetry Service improperly handles file operations. An attackCVE-2020-112306.4Potential arbitrary memory corruption when the qseecom driver updates ion physical addresses in the buffer as it exposes a physical address CVE-2020-112316.7Two threads call one or both functions concurrently leading to corruption of pointers and reference counters which in turn can lead to heap CVE-2020-112337.0Time-of-check time-of-use race condition While processing partition entries due to newly created buffer was read again from mmc without valiCVE-2020-112347.8When sending a socket event message to a user application, invalid information will be passed if socket is freed by other thread resulting i