60
CVE-2020-11233
—CVSS 3.1
7.0 high
EPSS
<1%p3
Published
()
Modified
Description
Time-of-check time-of-use race condition While processing partition entries due to newly created buffer was read again from mmc without validation in Snapdragon Auto, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables
- Vendors
- qualcomm
- Products
- apq8009 firmware, apq8009w firmware, apq8017 firmware, apq8053 firmware, apq8076 firmware, apq8096au firmware, csr6030 firmware, mdm9206 firmware, mdm9230 firmware, mdm9250 firmware, mdm9330 firmware, mdm9607 firmware
- Weakness
- CWE-367
- Vector
- CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H