CVE-2020-11179

Arbitrary read and write to kernel addresses by temporarily overwriting ring buffer pointer and creating a race condition. in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables

Affected

Qualcomm, Inc. · Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables

CVSS v3.1 NVD

7.0 HIGHCVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H

CVSS v2.0 NVD

6.9 MEDIUMAV:L/AC:M/Au:N/C:C/I:C/A:C

EPSS

0.32% chance of exploitation in the next 30 days, 23rd percentile

Published

2021-01-21

Updated

2024-08-04

Proof-of-concept exploits (1)

• sparrow-labz/CVE-2020-11179-Adreno-Qualcomm-GPU8★ · 2024-12-22

Security advisories

• https://www.qualcomm.com/company/product-security/bulletins/december-2020-security-bullet…
• https://www.qualcomm.com/company/product-security/bulletins/december-2020-bulletin

References

• CVE Record
• NVD entry

Related

• CVE-2020-0423