CVE-2020-11230

MediumCVSS 6.4/10Last modified Jun 17, 2026

Description

Potential arbitrary memory corruption when the qseecom driver updates ion physical addresses in the buffer as it exposes a physical address to user land in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Industrial IOT, Snapdragon Mobile

Metrics

CVSS 3.1 6.4/10CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H

Weakness enumeration

CWE-367

Affected software

No affected versions have been published.

Timeline

Published: Mar 17, 2021
Last modified: Jun 17, 2026
NVD status: Modified

Related CVEs from 2020

CVE-2020-112316.7Two threads call one or both functions concurrently leading to corruption of pointers and reference counters which in turn can lead to heap CVE-2020-112337.0Time-of-check time-of-use race condition While processing partition entries due to newly created buffer was read again from mmc without vali CVE-2020-112347.8When sending a socket event message to a user application, invalid information will be passed if socket is freed by other thread resulting i CVE-2020-112357.8Buffer overflow might occur while parsing unified command due to lack of check of input data received in Snapdragon Auto, Snapdragon Compute CVE-2020-112365.5Memory corruption due to invalid value of total dimension in the non-histogram type KPI could lead to a denial of service in Snapdragon Auto CVE-2020-112377.8Memory crash when accessing histogram type KPI input received due to lack of check of histogram definition before accessing it in Snapdragon CVE-2020-112387.5Possible Buffer over-read in ARP/NS parsing due to lack of check of packet length received in Snapdragon Auto, Snapdragon Compute, Snapdrago CVE-2020-112397.8Use after free issue when importing a DMA buffer by using the CPU address of the buffer due to attachment is not cleaned up properly in Snap CVE-2020-11247.8An elevation of privilege vulnerability exists when the Windows State Repository Service improperly handles objects in memory. An attacker w CVE-2020-112407.8Memory corruption due to ioctl command size was incorrectly set to the size of a pointer and not enough storage is allocated for the copy of CVE-2020-112417.5Out of bound read will happen if EAPOL Key length is less than expected while processing NAN shared key descriptor attribute in Snapdragon A CVE-2020-112427.8User could gain access to secure memory due to incorrect argument into address range validation api used in SDI to capture requested content