CVE Vulnerabilities

CVE-2020-11179

Out-of-bounds Read

Published: Jan 21, 2021 | Modified: Nov 21, 2024
CVSS 3.x
7
HIGH
Source:
NVD
CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H
CVSS 2.x
6.9 MEDIUM
AV:L/AC:M/Au:N/C:C/I:C/A:C
RedHat/V2
RedHat/V3
Ubuntu
root.io logo minimus.io logo echo.ai logo

Arbitrary read and write to kernel addresses by temporarily overwriting ring buffer pointer and creating a race condition. in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables

Weakness

The product reads data past the end, or before the beginning, of the intended buffer.

Affected Software

NameVendorStart VersionEnd Version
Apq8009Qualcomm- (including)- (including)
Apq8009wQualcomm- (including)- (including)
Apq8017Qualcomm- (including)- (including)
Apq8037Qualcomm- (including)- (including)
Apq8053Qualcomm- (including)- (including)
Apq8064auQualcomm- (including)- (including)
Apq8096auQualcomm- (including)- (including)
Aqt1000Qualcomm- (including)- (including)
Ar8031Qualcomm- (including)- (including)
Ar8035Qualcomm- (including)- (including)
Ar8151Qualcomm- (including)- (including)
Csra6620Qualcomm- (including)- (including)
Csra6640Qualcomm- (including)- (including)
Csrb31024Qualcomm- (including)- (including)
Fsm10055Qualcomm- (including)- (including)
Fsm10056Qualcomm- (including)- (including)
Mdm9206Qualcomm- (including)- (including)
Mdm9650Qualcomm- (including)- (including)
Msm8909wQualcomm- (including)- (including)
Msm8917Qualcomm- (including)- (including)
Msm8920Qualcomm- (including)- (including)
Msm8937Qualcomm- (including)- (including)
Msm8940Qualcomm- (including)- (including)
Msm8953Qualcomm- (including)- (including)
Msm8996auQualcomm- (including)- (including)
Pm215Qualcomm- (including)- (including)
Pm3003aQualcomm- (including)- (including)
Pm4125Qualcomm- (including)- (including)
Pm439Qualcomm- (including)- (including)
Pm456Qualcomm- (including)- (including)
Pm6125Qualcomm- (including)- (including)
Pm6150Qualcomm- (including)- (including)
Pm6150aQualcomm- (including)- (including)
Pm6150lQualcomm- (including)- (including)
Pm6250Qualcomm- (including)- (including)
Pm6350Qualcomm- (including)- (including)
Pm640aQualcomm- (including)- (including)
Pm640lQualcomm- (including)- (including)
Pm640pQualcomm- (including)- (including)
Pm660Qualcomm- (including)- (including)
Pm660aQualcomm- (including)- (including)
Pm660lQualcomm- (including)- (including)
Pm670Qualcomm- (including)- (including)
Pm670aQualcomm- (including)- (including)
Pm670lQualcomm- (including)- (including)
Pm7150aQualcomm- (including)- (including)
Pm7150lQualcomm- (including)- (including)
Pm7250Qualcomm- (including)- (including)
Pm7250bQualcomm- (including)- (including)
Pm7350cQualcomm- (including)- (including)
Pm8004Qualcomm- (including)- (including)
Pm8005Qualcomm- (including)- (including)
Pm8008Qualcomm- (including)- (including)
Pm8009Qualcomm- (including)- (including)
Pm8150Qualcomm- (including)- (including)
Pm8150aQualcomm- (including)- (including)
Pm8150bQualcomm- (including)- (including)
Pm8150cQualcomm- (including)- (including)
Pm8150lQualcomm- (including)- (including)
Pm8250Qualcomm- (including)- (including)
Pm8350Qualcomm- (including)- (including)
Pm8350bQualcomm- (including)- (including)
Pm8350bhQualcomm- (including)- (including)
Pm8350bhsQualcomm- (including)- (including)
Pm8350cQualcomm- (including)- (including)
Pm855Qualcomm- (including)- (including)
Pm855aQualcomm- (including)- (including)
Pm855bQualcomm- (including)- (including)
Pm855lQualcomm- (including)- (including)
Pm855pQualcomm- (including)- (including)
Pm8909Qualcomm- (including)- (including)
Pm8916Qualcomm- (including)- (including)
Pm8937Qualcomm- (including)- (including)
Pm8940Qualcomm- (including)- (including)
Pm8953Qualcomm- (including)- (including)
Pm8996Qualcomm- (including)- (including)
Pm8998Qualcomm- (including)- (including)
Pmc1000hQualcomm- (including)- (including)
Pmc7180Qualcomm- (including)- (including)
Pmd9607Qualcomm- (including)- (including)
Pmd9655Qualcomm- (including)- (including)
Pme605Qualcomm- (including)- (including)
Pmi632Qualcomm- (including)- (including)
Pmi8937Qualcomm- (including)- (including)
Pmi8952Qualcomm- (including)- (including)
Pmi8994Qualcomm- (including)- (including)
Pmi8996Qualcomm- (including)- (including)
Pmi8998Qualcomm- (including)- (including)
Pmk7350Qualcomm- (including)- (including)
Pmk8001Qualcomm- (including)- (including)
Pmk8002Qualcomm- (including)- (including)
Pmk8003Qualcomm- (including)- (including)
Pmk8350Qualcomm- (including)- (including)
Pmm6155auQualcomm- (including)- (including)
Pmm8155auQualcomm- (including)- (including)
Pmm8195auQualcomm- (including)- (including)
Pmm855auQualcomm- (including)- (including)
Pmm8996auQualcomm- (including)- (including)
Pmr525Qualcomm- (including)- (including)
Pmr735aQualcomm- (including)- (including)
Pmr735bQualcomm- (including)- (including)
Pmw3100Qualcomm- (including)- (including)
Pmx20Qualcomm- (including)- (including)
Pmx24Qualcomm- (including)- (including)
Pmx50Qualcomm- (including)- (including)
Pmx55Qualcomm- (including)- (including)
Qat3514Qualcomm- (including)- (including)
Qat3516Qualcomm- (including)- (including)
Qat3518Qualcomm- (including)- (including)
Qat3519Qualcomm- (including)- (including)
Qat3522Qualcomm- (including)- (including)
Qat3550Qualcomm- (including)- (including)
Qat3555Qualcomm- (including)- (including)
Qat5515Qualcomm- (including)- (including)
Qat5516Qualcomm- (including)- (including)
Qat5522Qualcomm- (including)- (including)
Qat5533Qualcomm- (including)- (including)
Qat5568Qualcomm- (including)- (including)
Qbt1000Qualcomm- (including)- (including)
Qbt1500Qualcomm- (including)- (including)
Qbt2000Qualcomm- (including)- (including)
Qca4020Qualcomm- (including)- (including)
Qca6174aQualcomm- (including)- (including)
Qca6175aQualcomm- (including)- (including)
Qca6310Qualcomm- (including)- (including)
Qca6320Qualcomm- (including)- (including)
Qca6335Qualcomm- (including)- (including)
Qca6390Qualcomm- (including)- (including)
Qca6391Qualcomm- (including)- (including)
Qca6420Qualcomm- (including)- (including)
Qca6421Qualcomm- (including)- (including)
Qca6426Qualcomm- (including)- (including)
Qca6430Qualcomm- (including)- (including)
Qca6431Qualcomm- (including)- (including)
Qca6436Qualcomm- (including)- (including)
Qca6564Qualcomm- (including)- (including)
Qca6564aQualcomm- (including)- (including)
Qca6564auQualcomm- (including)- (including)
Qca6574Qualcomm- (including)- (including)
Qca6574aQualcomm- (including)- (including)
Qca6574auQualcomm- (including)- (including)
Qca6584auQualcomm- (including)- (including)
Qca6595Qualcomm- (including)- (including)
Qca6595auQualcomm- (including)- (including)
Qca6696Qualcomm- (including)- (including)
Qca8337Qualcomm- (including)- (including)
Qca9367Qualcomm- (including)- (including)
Qca9377Qualcomm- (including)- (including)
Qca9379Qualcomm- (including)- (including)
Qcc1110Qualcomm- (including)- (including)
Qcm4290Qualcomm- (including)- (including)
Qcm6125Qualcomm- (including)- (including)
Qcs405Qualcomm- (including)- (including)
Qcs4290Qualcomm- (including)- (including)
Qcs603Qualcomm- (including)- (including)
Qcs605Qualcomm- (including)- (including)
Qcs6125Qualcomm- (including)- (including)
Qdm2301Qualcomm- (including)- (including)
Qdm2302Qualcomm- (including)- (including)
Qdm2305Qualcomm- (including)- (including)
Qdm2307Qualcomm- (including)- (including)
Qdm2308Qualcomm- (including)- (including)
Qdm2310Qualcomm- (including)- (including)
Qdm3301Qualcomm- (including)- (including)
Qdm3302Qualcomm- (including)- (including)
Qdm4643Qualcomm- (including)- (including)
Qdm4650Qualcomm- (including)- (including)
Qdm5579Qualcomm- (including)- (including)
Qdm5620Qualcomm- (including)- (including)
Qdm5621Qualcomm- (including)- (including)
Qdm5650Qualcomm- (including)- (including)
Qdm5652Qualcomm- (including)- (including)
Qdm5670Qualcomm- (including)- (including)
Qdm5671Qualcomm- (including)- (including)
Qdm5677Qualcomm- (including)- (including)
Qdm5679Qualcomm- (including)- (including)
Qet4100Qualcomm- (including)- (including)
Qet4101Qualcomm- (including)- (including)
Qet4200aqQualcomm- (including)- (including)
Qet5100Qualcomm- (including)- (including)
Qet5100mQualcomm- (including)- (including)
Qet6100Qualcomm- (including)- (including)
Qet6110Qualcomm- (including)- (including)
Qfe2101Qualcomm- (including)- (including)
Qfe2520Qualcomm- (including)- (including)
Qfe2550Qualcomm- (including)- (including)
Qfe3340Qualcomm- (including)- (including)
Qfe4301Qualcomm- (including)- (including)
Qfe4302Qualcomm- (including)- (including)
Qfe4303Qualcomm- (including)- (including)
Qfe4305Qualcomm- (including)- (including)
Qfe4308Qualcomm- (including)- (including)
Qfe4309Qualcomm- (including)- (including)
Qfe4320Qualcomm- (including)- (including)
Qfe4373fcQualcomm- (including)- (including)
Qfs2530Qualcomm- (including)- (including)
Qfs2580Qualcomm- (including)- (including)
Qfs2608Qualcomm- (including)- (including)
Qfs2630Qualcomm- (including)- (including)
Qln1020Qualcomm- (including)- (including)
Qln1021aqQualcomm- (including)- (including)
Qln1030Qualcomm- (including)- (including)
Qln1031Qualcomm- (including)- (including)
Qln1036aqQualcomm- (including)- (including)
Qln4640Qualcomm- (including)- (including)
Qln4642Qualcomm- (including)- (including)
Qln4650Qualcomm- (including)- (including)
Qln5020Qualcomm- (including)- (including)
Qln5030Qualcomm- (including)- (including)
Qln5040Qualcomm- (including)- (including)
Qpa2625Qualcomm- (including)- (including)
Qpa4340Qualcomm- (including)- (including)
Qpa4360Qualcomm- (including)- (including)
Qpa4361Qualcomm- (including)- (including)
Qpa5373Qualcomm- (including)- (including)
Qpa5460Qualcomm- (including)- (including)
Qpa5461Qualcomm- (including)- (including)
Qpa5580Qualcomm- (including)- (including)
Qpa5581Qualcomm- (including)- (including)
Qpa6560Qualcomm- (including)- (including)
Qpa8673Qualcomm- (including)- (including)
Qpa8675Qualcomm- (including)- (including)
Qpa8686Qualcomm- (including)- (including)
Qpa8688Qualcomm- (including)- (including)
Qpa8801Qualcomm- (including)- (including)
Qpa8802Qualcomm- (including)- (including)
Qpa8803Qualcomm- (including)- (including)
Qpa8821Qualcomm- (including)- (including)
Qpa8842Qualcomm- (including)- (including)
Qpm4621Qualcomm- (including)- (including)
Qpm4630Qualcomm- (including)- (including)
Qpm4640Qualcomm- (including)- (including)
Qpm4641Qualcomm- (including)- (including)
Qpm4650Qualcomm- (including)- (including)
Qpm5541Qualcomm- (including)- (including)
Qpm5577Qualcomm- (including)- (including)
Qpm5579Qualcomm- (including)- (including)
Qpm5621Qualcomm- (including)- (including)
Qpm5641Qualcomm- (including)- (including)
Qpm5658Qualcomm- (including)- (including)
Qpm5670Qualcomm- (including)- (including)
Qpm5677Qualcomm- (including)- (including)
Qpm5679Qualcomm- (including)- (including)
Qpm5870Qualcomm- (including)- (including)
Qpm5875Qualcomm- (including)- (including)
Qpm6325Qualcomm- (including)- (including)
Qpm6375Qualcomm- (including)- (including)
Qpm6582Qualcomm- (including)- (including)
Qpm6585Qualcomm- (including)- (including)
Qpm6621Qualcomm- (including)- (including)
Qpm6670Qualcomm- (including)- (including)
Qpm8820Qualcomm- (including)- (including)
Qpm8830Qualcomm- (including)- (including)
Qpm8870Qualcomm- (including)- (including)
Qpm8895Qualcomm- (including)- (including)
Qsm7250Qualcomm- (including)- (including)
Qsw6310Qualcomm- (including)- (including)
Qsw8573Qualcomm- (including)- (including)
Qsw8574Qualcomm- (including)- (including)
Qtc410sQualcomm- (including)- (including)
Qtc800hQualcomm- (including)- (including)
Qtc800sQualcomm- (including)- (including)
Qtc800tQualcomm- (including)- (including)
Qtc801sQualcomm- (including)- (including)
Qtm525Qualcomm- (including)- (including)
Qtm527Qualcomm- (including)- (including)
Qualcomm215Qualcomm- (including)- (including)
Rgr7640auQualcomm- (including)- (including)
Rsw8577Qualcomm- (including)- (including)
Sa415mQualcomm- (including)- (including)
Sa515mQualcomm- (including)- (including)
Sa6145pQualcomm- (including)- (including)
Sa6150pQualcomm- (including)- (including)
Sa6155Qualcomm- (including)- (including)
Sa6155pQualcomm- (including)- (including)
Sa8150pQualcomm- (including)- (including)
Sa8155Qualcomm- (including)- (including)
Sa8155pQualcomm- (including)- (including)
Sa8195pQualcomm- (including)- (including)
Sd205Qualcomm- (including)- (including)
Sd210Qualcomm- (including)- (including)
Sd429Qualcomm- (including)- (including)
Sd439Qualcomm- (including)- (including)
Sd450Qualcomm- (including)- (including)
Sd455Qualcomm- (including)- (including)
Sd460Qualcomm- (including)- (including)
Sd632Qualcomm- (including)- (including)
Sd636Qualcomm- (including)- (including)
Sd660Qualcomm- (including)- (including)
Sd662Qualcomm- (including)- (including)
Sd665Qualcomm- (including)- (including)
Sd670Qualcomm- (including)- (including)
Sd675Qualcomm- (including)- (including)
Sd6905gQualcomm- (including)- (including)
Sd710Qualcomm- (including)- (including)
Sd720gQualcomm- (including)- (including)
Sd730Qualcomm- (including)- (including)
Sd750gQualcomm- (including)- (including)
Sd765Qualcomm- (including)- (including)
Sd765gQualcomm- (including)- (including)
Sd768gQualcomm- (including)- (including)
Sd7cQualcomm- (including)- (including)
Sd820Qualcomm- (including)- (including)
Sd821Qualcomm- (including)- (including)
Sd835Qualcomm- (including)- (including)
Sd845Qualcomm- (including)- (including)
Sd855Qualcomm- (including)- (including)
Sd8655gQualcomm- (including)- (including)
Sd8885gQualcomm- (including)- (including)
Sd8cQualcomm- (including)- (including)
Sd8cxQualcomm- (including)- (including)
Sda429wQualcomm- (including)- (including)
Sdm429wQualcomm- (including)- (including)
Sdm630Qualcomm- (including)- (including)
Sdm830Qualcomm- (including)- (including)
Sdr051Qualcomm- (including)- (including)
Sdr052Qualcomm- (including)- (including)
Sdr425Qualcomm- (including)- (including)
Sdr660Qualcomm- (including)- (including)
Sdr660gQualcomm- (including)- (including)
Sdr675Qualcomm- (including)- (including)
Sdr735Qualcomm- (including)- (including)
Sdr735gQualcomm- (including)- (including)
Sdr8150Qualcomm- (including)- (including)
Sdr8250Qualcomm- (including)- (including)
Sdr845Qualcomm- (including)- (including)
Sdr865Qualcomm- (including)- (including)
Sdw2500Qualcomm- (including)- (including)
Sdw3100Qualcomm- (including)- (including)
Sdx20Qualcomm- (including)- (including)
Sdx20mQualcomm- (including)- (including)
Sdx24Qualcomm- (including)- (including)
Sdx50mQualcomm- (including)- (including)
Sdx55Qualcomm- (including)- (including)
Sdx55mQualcomm- (including)- (including)
Sdxr1Qualcomm- (including)- (including)
Sdxr25gQualcomm- (including)- (including)
Sm4125Qualcomm- (including)- (including)
Sm4350Qualcomm- (including)- (including)
Sm6250Qualcomm- (including)- (including)
Sm6250pQualcomm- (including)- (including)
Sm7250pQualcomm- (including)- (including)
Sm7350Qualcomm- (including)- (including)
Smb1350Qualcomm- (including)- (including)
Smb1351Qualcomm- (including)- (including)
Smb1354Qualcomm- (including)- (including)
Smb1355Qualcomm- (including)- (including)
Smb1357Qualcomm- (including)- (including)
Smb1358Qualcomm- (including)- (including)
Smb1360Qualcomm- (including)- (including)
Smb1380Qualcomm- (including)- (including)
Smb1381Qualcomm- (including)- (including)
Smb1390Qualcomm- (including)- (including)
Smb1394Qualcomm- (including)- (including)
Smb1395Qualcomm- (including)- (including)
Smb1396Qualcomm- (including)- (including)
Smb1398Qualcomm- (including)- (including)
Smb231Qualcomm- (including)- (including)
Smb2351Qualcomm- (including)- (including)
Smr525Qualcomm- (including)- (including)
Smr526Qualcomm- (including)- (including)
Smr545Qualcomm- (including)- (including)
Smr546Qualcomm- (including)- (including)
Wcd9326Qualcomm- (including)- (including)
Wcd9330Qualcomm- (including)- (including)
Wcd9335Qualcomm- (including)- (including)
Wcd9340Qualcomm- (including)- (including)
Wcd9341Qualcomm- (including)- (including)
Wcd9370Qualcomm- (including)- (including)
Wcd9375Qualcomm- (including)- (including)
Wcd9380Qualcomm- (including)- (including)
Wcd9385Qualcomm- (including)- (including)
Wcn3610Qualcomm- (including)- (including)
Wcn3615Qualcomm- (including)- (including)
Wcn3620Qualcomm- (including)- (including)
Wcn3660Qualcomm- (including)- (including)
Wcn3660bQualcomm- (including)- (including)
Wcn3680Qualcomm- (including)- (including)
Wcn3680bQualcomm- (including)- (including)
Wcn3910Qualcomm- (including)- (including)
Wcn3950Qualcomm- (including)- (including)
Wcn3980Qualcomm- (including)- (including)
Wcn3988Qualcomm- (including)- (including)
Wcn3990Qualcomm- (including)- (including)
Wcn3991Qualcomm- (including)- (including)
Wcn3998Qualcomm- (including)- (including)
Wcn3999Qualcomm- (including)- (including)
Wcn6740Qualcomm- (including)- (including)
Wcn6750Qualcomm- (including)- (including)
Wcn6850Qualcomm- (including)- (including)
Wcn6851Qualcomm- (including)- (including)
Wcn6856Qualcomm- (including)- (including)
Wgr7640Qualcomm- (including)- (including)
Wsa8810Qualcomm- (including)- (including)
Wsa8815Qualcomm- (including)- (including)
Wsa8830Qualcomm- (including)- (including)
Wsa8835Qualcomm- (including)- (including)
Wtr2955Qualcomm- (including)- (including)
Wtr2965Qualcomm- (including)- (including)
Wtr3905Qualcomm- (including)- (including)
Wtr3925Qualcomm- (including)- (including)
Wtr3950Qualcomm- (including)- (including)
Wtr4905Qualcomm- (including)- (including)
Wtr5975Qualcomm- (including)- (including)

Potential Mitigations

  • Assume all input is malicious. Use an “accept known good” input validation strategy, i.e., use a list of acceptable inputs that strictly conform to specifications. Reject any input that does not strictly conform to specifications, or transform it into something that does.
  • When performing input validation, consider all potentially relevant properties, including length, type of input, the full range of acceptable values, missing or extra inputs, syntax, consistency across related fields, and conformance to business rules. As an example of business rule logic, “boat” may be syntactically valid because it only contains alphanumeric characters, but it is not valid if the input is only expected to contain colors such as “red” or “blue.”
  • Do not rely exclusively on looking for malicious or malformed inputs. This is likely to miss at least one undesirable input, especially if the code’s environment changes. This can give attackers enough room to bypass the intended validation. However, denylists can be useful for detecting potential attacks or determining which inputs are so malformed that they should be rejected outright.
  • To reduce the likelihood of introducing an out-of-bounds read, ensure that you validate and ensure correct calculations for any length argument, buffer size calculation, or offset. Be especially careful of relying on a sentinel (i.e. special character such as NUL) in untrusted inputs.

References