What is the severity of CVE-2020-11152?

CVE-2020-11152 has been classified with a medium severity rating.

How do I fix CVE-2020-11152?

To fix CVE-2020-11152, apply the security patches provided by Qualcomm in their December 2020 security bulletin.

Which devices are affected by CVE-2020-11152?

CVE-2020-11152 affects various Qualcomm Snapdragon chipsets used in automotive, consumer IoT, and mobile devices.

Can CVE-2020-11152 be exploited remotely?

Yes, CVE-2020-11152 can potentially be exploited remotely due to its nature as a race condition in the HAL layer.

What types of products use the affected Qualcomm components in CVE-2020-11152?

Products using Snapdragon Auto, Snapdragon Compute, mobile phones, and certain IoT devices are likely to be impacted by CVE-2020-11152.

Vulnerability/
CVE-2020-11152

medium

6.9

CWE

416 362

21/1/2021

4/8/2024

CVE-2020-11152: Use After Free

First published: Thu Jan 21 2021(Updated: )

Race condition in HAL layer while processing callback objects received from HIDL due to lack of synchronization between accessing objects in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables

Credit: product-security@qualcomm.com

Affected Software	Affected Version	How to fix
Qualcomm APQ8009
Qualcomm APQ8017
qualcomm apq8037 firmware
Qualcomm APQ8052
Qualcomm APQ8053 Firmware
Qualcomm APQ8056 Firmware
Qualcomm APQ8076 Firmware
Qualcomm APQ8096AU Firmware
Qualcomm AQT1000 Firmware
Qualcomm AR8031 Firmware
Qualcomm CSRA6620
Qualcomm csra6640 firmware
Qualcomm Snapdragon 8909
Qualcomm MSM8916 Firmware
Qualcomm MSM8917 Firmware
Qualcomm 8920
qualcomm MSM8937 firmware
qualcomm MSM8940 firmware
Qualcomm 8952
Qualcomm MSM8953 Firmware
Qualcomm MSM8956 Firmware
Qualcomm 8976
Qualcomm 8976
Qualcomm MSM8996AU Firmware
Qualcomm PM439
Qualcomm pm660 firmware
Qualcomm pm660a firmware
Qualcomm PM660L Firmware
Qualcomm pm670 firmware
Qualcomm PM670A
Qualcomm PM670L Firmware
Qualcomm PM8004 Firmware
Qualcomm PM8005 Firmware
Qualcomm PM855P
Qualcomm pm855a firmware
Qualcomm PM855B
Qualcomm pm855l firmware
Qualcomm PM855P
Qualcomm PM8916 Firmware
Qualcomm MSM8937
Qualcomm PMI8940 Firmware
Qualcomm PMI8952 Firmware
Qualcomm PM8953 Firmware
Qualcomm 8956
Qualcomm 8998
Qualcomm PMD9655
Qualcomm PMI632 Firmware
Qualcomm PMI8937
Qualcomm PM8952
Qualcomm 8998
Qualcomm PMM8996AU
Qualcomm PMX24
Qualcomm PMX50
Qualcomm qat3514 firmware
Qualcomm QAT3522 firmware
Qualcomm QAT3550 Firmware
Qualcomm QBT1000 Firmware
Qualcomm qbt1500 firmware
Qualcomm QBT2000
Qualcomm QCA6174A Firmware
Qualcomm QCA6310 Firmware
Qualcomm QCA6320 Firmware
Qualcomm QCA6420 Firmware
Qualcomm QCA6430 firmware
Qualcomm QCA6564A Firmware
Qualcomm QCA6564A
qualcomm qca6574a firmware
Qualcomm QCA6574AU
Qualcomm QCA6584AU firmware
Qualcomm QCA8337 Firmware
Qualcomm QCA9377 Firmware
Qualcomm QCC1110 Firmware
Qualcomm QCS405 Firmware
Qualcomm QCS603 Firmware
Qualcomm QCS605 Firmware
Qualcomm QET4100 Firmware
Qualcomm QET4101 Firmware
Qualcomm QET5100 Firmware
Qualcomm QET5100M Firmware
Qualcomm QFE2080FC Firmware
Qualcomm QFE2081FC
Qualcomm QFE2082FC
Qualcomm QFE2101 Firmware
Qualcomm QFE2550 Firmware
Qualcomm QFE3100 Firmware
Qualcomm QFE3440FC Firmware
Qualcomm QFE4301 Firmware
Qualcomm QFE4302 Firmware
Qualcomm QFE4303 Firmware
Qualcomm QFE4305 firmware
Qualcomm QFE4308 Firmware
Qualcomm QFE4309 Firmware
Qualcomm QFE4320 Firmware
Qualcomm QFE4373FC Firmware
Qualcomm QFE4455FC
Qualcomm QFE4465FC
Qualcomm QLN1035BD Firmware
Qualcomm QPA4340 Firmware
Qualcomm QPA4360 Firmware
Qualcomm qpa5460 firmware
Qualcomm QSW8573 Firmware
Qualcomm QTC800H Firmware
Qualcomm QTC800S Firmware
Qualcomm QTC800T Firmware
Qualcomm QTC801S Firmware
Qualcomm RGR7640AU Firmware
Qualcomm RSW8577
Qualcomm Snapdragon 439
Qualcomm Snapdragon 450
Qualcomm Snapdragon 636
Qualcomm Snapdragon 660
Qualcomm SD710 Firmware
Qualcomm SD 712
Qualcomm Snapdragon 835
Qualcomm Snapdragon 855
Qualcomm Snapdragon 8cx
Qualcomm SDM630 Firmware
Qualcomm Snapdragon 830
Qualcomm SDR051 Firmware
Qualcomm SDR052
Qualcomm SDR660
Qualcomm SDR8150 Firmware
Qualcomm SDW2500
Qualcomm SDW3100 Firmware
Qualcomm SDX24
Qualcomm SDX50M Firmware
Qualcomm SMB1351 Firmware
Qualcomm SMB1355 Firmware
Qualcomm SMB1358 Firmware
Qualcomm SMB1360 Firmware
Qualcomm SMB1380 Firmware
Qualcomm SMB1381 Firmware
Qualcomm SMB1390 Firmware
Qualcomm SMB231 Firmware
Qualcomm WCD9306
Qualcomm WCD9326 Firmware
Qualcomm WCD9330 Firmware
Qualcomm WCD9335 Firmware
Qualcomm WCD9340 Firmware
Qualcomm WCD9341 Firmware
Qualcomm WCD9360 Firmware
Qualcomm WCN3610 Firmware
Qualcomm WCN3615 Firmware
Qualcomm WCN3620 Firmware
Qualcomm WCN3660B Firmware
Qualcomm WCN3680B Firmware
Qualcomm WCN3950 Firmware
Qualcomm WCN3980
Qualcomm WCN3990
Qualcomm wcn3998 firmware
Qualcomm WCN3999 Firmware
Qualcomm WGR7640 Firmware
Qualcomm WHS9410
Qualcomm WSA8810 Firmware
Qualcomm WSA8815 Firmware
Qualcomm WTR2955 Firmware
Qualcomm WTR2965
Qualcomm WTR3925L
Qualcomm WTR4905 Firmware
Qualcomm WTR5975 Firmware

Remedy

https://www.qualcomm.com/company/product-security/bulletins/december-2020-security-bulletin

Never miss a vulnerability like this again

Reference Links

Frequently Asked Questions

What is the severity of CVE-2020-11152?
CVE-2020-11152 has been classified with a medium severity rating.
How do I fix CVE-2020-11152?
To fix CVE-2020-11152, apply the security patches provided by Qualcomm in their December 2020 security bulletin.
Which devices are affected by CVE-2020-11152?
CVE-2020-11152 affects various Qualcomm Snapdragon chipsets used in automotive, consumer IoT, and mobile devices.
Can CVE-2020-11152 be exploited remotely?
Yes, CVE-2020-11152 can potentially be exploited remotely due to its nature as a race condition in the HAL layer.
What types of products use the affected Qualcomm components in CVE-2020-11152?
Products using Snapdragon Auto, Snapdragon Compute, mobile phones, and certain IoT devices are likely to be impacted by CVE-2020-11152.