PT-2021-9245 · Qualcomm · Qualcomm Snapdragon

Published 2021-04-07 · Updated 2021-04-12 · CVE-2020-11231

Positive Technologies (AI Summary)

CVSS v3.1

6.7

Medium

Base vector

AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Qualcomm Snapdragon (affected versions not specified)

Description The issue arises when two threads call one or both functions concurrently, leading to corruption of pointers and reference counters, which in turn can cause heap corruption. This affects various Snapdragon components, including Compute, Connectivity, Consumer IOT, Industrial IOT, and Mobile.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Double Free

Weakness Enumeration

CWE-415

Related Identifiers

CVE-2020-11231

Affected Products

Qualcomm Snapdragon

References · 4

• https://nvd.nist.gov/vuln/detail/CVE-2020-11231 · Security Note
• https://qualcomm.com/company/product-security/bulletins/april-2021-bulletin · Vendor Advisory
• https://t.me/cvenotify/13114 · Telegram Post
• https://t.me/cvenotify/12801 · Telegram Post