PT-2020-12562 · Qualcomm · Qualcomm Snapdragon

Published 2020-11-12 · Updated 2020-11-19 · CVE-2020-11123

Positive Technologies (AI Summary)

CVSS v2.0

2.1

Low

Base vector

AV:L/AC:L/Au:N/C:P/I:N/A:N

Name of the Vulnerable Software and Affected Versions Qualcomm Snapdragon versions APQ8009 through SDX55M

Description The issue concerns an information disclosure in the Gatekeeper TrustZone implementation. This vulnerability allows the throttling mechanism, designed to prevent brute force attempts at guessing a user's lock-screen password, to be bypassed by performing standard Gatekeeper operations.

Recommendations For Qualcomm Snapdragon versions APQ8009 through SDX55M, as a temporary workaround, consider restricting access to the Gatekeeper operations until a patch is available. Additionally, avoid using the lock-screen password feature in a manner that could be exploited by brute force attempts. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Related Identifiers

CVE-2020-11123

Affected Products

Qualcomm Snapdragon

References · 2

• https://nvd.nist.gov/vuln/detail/CVE-2020-11123 · Security Note
• https://qualcomm.com/company/product-security/bulletins/november-2020-bulletin · Vendor Advisory