2023-04-24 12:24:31 +02:00
{
"id" : "CVE-2020-3680" ,
"sourceIdentifier" : "product-security@qualcomm.com" ,
"published" : "2020-06-02T15:15:14.210" ,
2024-11-23 13:10:58 +00:00
"lastModified" : "2024-11-21T05:31:33.890" ,
"vulnStatus" : "Modified" ,
2024-12-08 03:06:42 +00:00
"cveTags" : [ ] ,
2023-04-24 12:24:31 +02:00
"descriptions" : [
{
"lang" : "en" ,
"value" : "A race condition can occur when using the fastrpc memory mapping API. in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Wearables in APQ8009, APQ8053, MSM8909W, MSM8917, MSM8953, QCS605, QM215, SA415M, SDM429, SDM429W, SDM439, SDM450, SDM632, SDM670, SDM710, SDM845, SDX24, SXR1130"
} ,
{
"lang" : "es" ,
"value" : "Una condici\u00f3n de carrera puede ocurrir cuando se usa la API de asignaci\u00f3n de memoria fastrpc. En los productos Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Wearables en las versiones APQ8009, APQ8053, MSM8909W, MSM8917, MSM8953, QCS605, QM215, SA415M, SDM429, SDM429W, SDM439, SDM450, SDM632, SDM670, SDM710, SDM845, SDX24, SXR1130."
}
] ,
"metrics" : {
"cvssMetricV31" : [
{
"source" : "nvd@nist.gov" ,
"type" : "Primary" ,
"cvssData" : {
"version" : "3.1" ,
"vectorString" : "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H" ,
2024-11-23 13:10:58 +00:00
"baseScore" : 7.0 ,
"baseSeverity" : "HIGH" ,
2023-04-24 12:24:31 +02:00
"attackVector" : "LOCAL" ,
"attackComplexity" : "HIGH" ,
"privilegesRequired" : "LOW" ,
"userInteraction" : "NONE" ,
"scope" : "UNCHANGED" ,
"confidentialityImpact" : "HIGH" ,
"integrityImpact" : "HIGH" ,
2024-11-23 13:10:58 +00:00
"availabilityImpact" : "HIGH"
2023-04-24 12:24:31 +02:00
} ,
"exploitabilityScore" : 1.0 ,
"impactScore" : 5.9
}
] ,
"cvssMetricV2" : [
{
"source" : "nvd@nist.gov" ,
"type" : "Primary" ,
"cvssData" : {
"version" : "2.0" ,
"vectorString" : "AV:L/AC:M/Au:N/C:C/I:C/A:C" ,
2024-11-23 13:10:58 +00:00
"baseScore" : 6.9 ,
2023-04-24 12:24:31 +02:00
"accessVector" : "LOCAL" ,
"accessComplexity" : "MEDIUM" ,
"authentication" : "NONE" ,
"confidentialityImpact" : "COMPLETE" ,
"integrityImpact" : "COMPLETE" ,
2024-11-23 13:10:58 +00:00
"availabilityImpact" : "COMPLETE"
2023-04-24 12:24:31 +02:00
} ,
"baseSeverity" : "MEDIUM" ,
"exploitabilityScore" : 3.4 ,
"impactScore" : 10.0 ,
"acInsufInfo" : false ,
"obtainAllPrivilege" : false ,
"obtainUserPrivilege" : false ,
"obtainOtherPrivilege" : false ,
"userInteractionRequired" : false
}
]
} ,
"weaknesses" : [
{
"source" : "nvd@nist.gov" ,
"type" : "Primary" ,
"description" : [
{
"lang" : "en" ,
"value" : "CWE-367"
}
]
}
] ,
"configurations" : [
{
"operator" : "AND" ,
"nodes" : [
{
"operator" : "OR" ,
"negate" : false ,
"cpeMatch" : [
{
"vulnerable" : true ,
"criteria" : "cpe:2.3:o:qualcomm:apq8009_firmware:-:*:*:*:*:*:*:*" ,
"matchCriteriaId" : "C61BF93F-53DF-4399-AF41-45CEC1E0A2B8"
}
]
} ,
{
"operator" : "OR" ,
"negate" : false ,
"cpeMatch" : [
{
"vulnerable" : false ,
"criteria" : "cpe:2.3:h:qualcomm:apq8009:-:*:*:*:*:*:*:*" ,
"matchCriteriaId" : "7CC498E0-B82B-4A53-8F55-6C1DA58AFA88"
}
]
}
]
} ,
{
"operator" : "AND" ,
"nodes" : [
{
"operator" : "OR" ,
"negate" : false ,
"cpeMatch" : [
{
"vulnerable" : true ,
"criteria" : "cpe:2.3:o:qualcomm:apq8053_firmware:-:*:*:*:*:*:*:*" ,
"matchCriteriaId" : "B052615D-857A-46D4-9098-1CBFA14687C6"
}
]
} ,
{
"operator" : "OR" ,
"negate" : false ,
"cpeMatch" : [
{
"vulnerable" : false ,
"criteria" : "cpe:2.3:h:qualcomm:apq8053:-:*:*:*:*:*:*:*" ,
"matchCriteriaId" : "19B59B60-A298-4A56-A45A-E34B7AAB43D7"
}
]
}
]
} ,
{
"operator" : "AND" ,
"nodes" : [
{
"operator" : "OR" ,
"negate" : false ,
"cpeMatch" : [
{
"vulnerable" : true ,
"criteria" : "cpe:2.3:o:qualcomm:msm8909w_firmware:-:*:*:*:*:*:*:*" ,
"matchCriteriaId" : "FE28A59C-7AA6-4B85-84E8-07852B96108E"
}
]
} ,
{
"operator" : "OR" ,
"negate" : false ,
"cpeMatch" : [
{
"vulnerable" : false ,
"criteria" : "cpe:2.3:h:qualcomm:msm8909w:-:*:*:*:*:*:*:*" ,
"matchCriteriaId" : "5DEE828B-09A7-4AC1-8134-491A7C87C118"
}
]
}
]
} ,
{
"operator" : "AND" ,
"nodes" : [
{
"operator" : "OR" ,
"negate" : false ,
"cpeMatch" : [
{
"vulnerable" : true ,
"criteria" : "cpe:2.3:o:qualcomm:msm8917_firmware:-:*:*:*:*:*:*:*" ,
"matchCriteriaId" : "9BD0305A-E31C-4888-B97E-CE571D40560A"
}
]
} ,
{
"operator" : "OR" ,
"negate" : false ,
"cpeMatch" : [
{
"vulnerable" : false ,
"criteria" : "cpe:2.3:h:qualcomm:msm8917:-:*:*:*:*:*:*:*" ,
"matchCriteriaId" : "369295A2-8236-44B6-A09F-7CB0BD20527F"
}
]
}
]
} ,
{
"operator" : "AND" ,
"nodes" : [
{
"operator" : "OR" ,
"negate" : false ,
"cpeMatch" : [
{
"vulnerable" : true ,
"criteria" : "cpe:2.3:o:qualcomm:msm8953_firmware:-:*:*:*:*:*:*:*" ,
"matchCriteriaId" : "BE4E0E39-0081-4261-8350-149E763AB462"
}
]
} ,
{
"operator" : "OR" ,
"negate" : false ,
"cpeMatch" : [
{
"vulnerable" : false ,
"criteria" : "cpe:2.3:h:qualcomm:msm8953:-:*:*:*:*:*:*:*" ,
"matchCriteriaId" : "94F76229-1A4A-4306-A4CC-C823A99F041A"
}
]
}
]
} ,
{
"operator" : "AND" ,
"nodes" : [
{
"operator" : "OR" ,
"negate" : false ,
"cpeMatch" : [
{
"vulnerable" : true ,
"criteria" : "cpe:2.3:o:qualcomm:qcs605_firmware:-:*:*:*:*:*:*:*" ,
"matchCriteriaId" : "B05FD66D-13A6-40E9-A64B-E428378F237E"
}
]
} ,
{
"operator" : "OR" ,
"negate" : false ,
"cpeMatch" : [
{
"vulnerable" : false ,
"criteria" : "cpe:2.3:h:qualcomm:qcs605:-:*:*:*:*:*:*:*" ,
"matchCriteriaId" : "D0D665C1-3EBA-42F2-BF56-55E6C365F7DF"
}
]
}
]
} ,
{
"operator" : "AND" ,
"nodes" : [
{
"operator" : "OR" ,
"negate" : false ,
"cpeMatch" : [
{
"vulnerable" : true ,
"criteria" : "cpe:2.3:o:qualcomm:qm215_firmware:-:*:*:*:*:*:*:*" ,
"matchCriteriaId" : "F18CD1F1-C36A-4840-88CD-8F00BD68EF1A"
}
]
} ,
{
"operator" : "OR" ,
"negate" : false ,
"cpeMatch" : [
{
"vulnerable" : false ,
"criteria" : "cpe:2.3:h:qualcomm:qm215:-:*:*:*:*:*:*:*" ,
"matchCriteriaId" : "6A01800E-994E-4095-AD86-F02DC9D9C86E"
}
]
}
]
} ,
{
"operator" : "AND" ,
"nodes" : [
{
"operator" : "OR" ,
"negate" : false ,
"cpeMatch" : [
{
"vulnerable" : true ,
"criteria" : "cpe:2.3:o:qualcomm:sa415m_firmware:-:*:*:*:*:*:*:*" ,
"matchCriteriaId" : "D4387DBE-67F7-4E95-A2B0-828211EBDC22"
}
]
} ,
{
"operator" : "OR" ,
"negate" : false ,
"cpeMatch" : [
{
"vulnerable" : false ,
"criteria" : "cpe:2.3:h:qualcomm:sa415m:-:*:*:*:*:*:*:*" ,
"matchCriteriaId" : "AC798E06-0A2E-4DAD-81D1-9B2FAE6327C0"
}
]
}
]
} ,
{
"operator" : "AND" ,
"nodes" : [
{
"operator" : "OR" ,
"negate" : false ,
"cpeMatch" : [
{
"vulnerable" : true ,
"criteria" : "cpe:2.3:o:qualcomm:sdm429_firmware:-:*:*:*:*:*:*:*" ,
"matchCriteriaId" : "9DFD2C9A-6C25-4B8F-BE64-DAD3DCCDEADD"
}
]
} ,
{
"operator" : "OR" ,
"negate" : false ,
"cpeMatch" : [
{
"vulnerable" : false ,
"criteria" : "cpe:2.3:h:qualcomm:sdm429:-:*:*:*:*:*:*:*" ,
"matchCriteriaId" : "8DE61FCE-CA87-46E1-981D-B44697E54CB1"
}
]
}
]
} ,
{
"operator" : "AND" ,
"nodes" : [
{
"operator" : "OR" ,
"negate" : false ,
"cpeMatch" : [
{
"vulnerable" : true ,
"criteria" : "cpe:2.3:o:qualcomm:sdm429w_firmware:-:*:*:*:*:*:*:*" ,
"matchCriteriaId" : "C7E52771-4FB7-45DB-A349-4DD911F53752"
}
]
} ,
{
"operator" : "OR" ,
"negate" : false ,
"cpeMatch" : [
{
"vulnerable" : false ,
"criteria" : "cpe:2.3:h:qualcomm:sdm429w:-:*:*:*:*:*:*:*" ,
"matchCriteriaId" : "72F6CE39-9299-4FC3-BC48-11F79034F2E4"
}
]
}
]
} ,
{
"operator" : "AND" ,
"nodes" : [
{
"operator" : "OR" ,
"negate" : false ,
"cpeMatch" : [
{
"vulnerable" : true ,
"criteria" : "cpe:2.3:o:qualcomm:sdm439_firmware:-:*:*:*:*:*:*:*" ,
"matchCriteriaId" : "84289E6D-DA2A-4D04-9DDA-E8C46DDDD056"
}
]
} ,
{
"operator" : "OR" ,
"negate" : false ,
"cpeMatch" : [
{
"vulnerable" : false ,
"criteria" : "cpe:2.3:h:qualcomm:sdm439:-:*:*:*:*:*:*:*" ,
"matchCriteriaId" : "C0B56360-7AC3-410A-B7F8-1BE8514B3781"
}
]
}
]
} ,
{
"operator" : "AND" ,
"nodes" : [
{
"operator" : "OR" ,
"negate" : false ,
"cpeMatch" : [
{
"vulnerable" : true ,
"criteria" : "cpe:2.3:o:qualcomm:sdm450_firmware:-:*:*:*:*:*:*:*" ,
"matchCriteriaId" : "8F3B5AFF-4AD4-4C10-9E39-C553C7E9E16E"
}
]
} ,
{
"operator" : "OR" ,
"negate" : false ,
"cpeMatch" : [
{
"vulnerable" : false ,
"criteria" : "cpe:2.3:h:qualcomm:sdm450:-:*:*:*:*:*:*:*" ,
"matchCriteriaId" : "A09E7B90-DD7B-4617-90FD-29FF5BB190A9"
}
]
}
]
} ,
{
"operator" : "AND" ,
"nodes" : [
{
"operator" : "OR" ,
"negate" : false ,
"cpeMatch" : [
{
"vulnerable" : true ,
"criteria" : "cpe:2.3:o:qualcomm:sdm632_firmware:-:*:*:*:*:*:*:*" ,
"matchCriteriaId" : "A02E12AC-F845-4164-9D95-ACD7167B6DD6"
}
]
} ,
{
"operator" : "OR" ,
"negate" : false ,
"cpeMatch" : [
{
"vulnerable" : false ,
"criteria" : "cpe:2.3:h:qualcomm:sdm632:-:*:*:*:*:*:*:*" ,
"matchCriteriaId" : "321F7DE7-E6E9-449F-867B-04A9F53334B0"
}
]
}
]
} ,
{
"operator" : "AND" ,
"nodes" : [
{
"operator" : "OR" ,
"negate" : false ,
"cpeMatch" : [
{
"vulnerable" : true ,
"criteria" : "cpe:2.3:o:qualcomm:sdm670_firmware:-:*:*:*:*:*:*:*" ,
"matchCriteriaId" : "00865826-86AE-425F-BE6F-162F611FB200"
}
]
} ,
{
"operator" : "OR" ,
"negate" : false ,
"cpeMatch" : [
{
"vulnerable" : false ,
"criteria" : "cpe:2.3:h:qualcomm:sdm670:-:*:*:*:*:*:*:*" ,
"matchCriteriaId" : "0CC0441C-C30B-4D99-9BAD-C1E4387302BB"
}
]
}
]
} ,
{
"operator" : "AND" ,
"nodes" : [
{
"operator" : "OR" ,
"negate" : false ,
"cpeMatch" : [
{
"vulnerable" : true ,
"criteria" : "cpe:2.3:o:qualcomm:sdm710_firmware:-:*:*:*:*:*:*:*" ,
"matchCriteriaId" : "D045BE4B-BC19-4A51-90E6-00C18389C81B"
}
]
} ,
{
"operator" : "OR" ,
"negate" : false ,
"cpeMatch" : [
{
"vulnerable" : false ,
"criteria" : "cpe:2.3:h:qualcomm:sdm710:-:*:*:*:*:*:*:*" ,
"matchCriteriaId" : "4F006960-CDE3-4E74-B4F0-2C4B2CA93959"
}
]
}
]
} ,
{
"operator" : "AND" ,
"nodes" : [
{
"operator" : "OR" ,
"negate" : false ,
"cpeMatch" : [
{
"vulnerable" : true ,
"criteria" : "cpe:2.3:o:qualcomm:sdm845_firmware:-:*:*:*:*:*:*:*" ,
"matchCriteriaId" : "DED4B719-53B5-4D16-B3FA-ADE29D28ED86"
}
]
} ,
{
"operator" : "OR" ,
"negate" : false ,
"cpeMatch" : [
{
"vulnerable" : false ,
"criteria" : "cpe:2.3:h:qualcomm:sdm845:-:*:*:*:*:*:*:*" ,
"matchCriteriaId" : "D342C86B-E184-457C-9F72-BD853ED79425"
}
]
}
]
} ,
{
"operator" : "AND" ,
"nodes" : [
{
"operator" : "OR" ,
"negate" : false ,
"cpeMatch" : [
{
"vulnerable" : true ,
"criteria" : "cpe:2.3:o:qualcomm:sdx24_firmware:-:*:*:*:*:*:*:*" ,
"matchCriteriaId" : "F9BE864E-7B1E-44D5-A10A-60078095DE33"
}
]
} ,
{
"operator" : "OR" ,
"negate" : false ,
"cpeMatch" : [
{
"vulnerable" : false ,
"criteria" : "cpe:2.3:h:qualcomm:sdx24:-:*:*:*:*:*:*:*" ,
"matchCriteriaId" : "96DD6B48-2554-464D-A061-DBB4B8E00758"
}
]
}
]
} ,
{
"operator" : "AND" ,
"nodes" : [
{
"operator" : "OR" ,
"negate" : false ,
"cpeMatch" : [
{
"vulnerable" : true ,
"criteria" : "cpe:2.3:o:qualcomm:sxr1130_firmware:-:*:*:*:*:*:*:*" ,
"matchCriteriaId" : "096F7BA5-FF58-416B-93EF-733B16326C86"
}
]
} ,
{
"operator" : "OR" ,
"negate" : false ,
"cpeMatch" : [
{
"vulnerable" : false ,
"criteria" : "cpe:2.3:h:qualcomm:sxr1130:-:*:*:*:*:*:*:*" ,
"matchCriteriaId" : "7AF958FB-1611-4102-A2DB-8D4311AE0D72"
}
]
}
]
}
] ,
"references" : [
{
"url" : "https://www.qualcomm.com/company/product-security/bulletins/may-2020-bulletin" ,
"source" : "product-security@qualcomm.com" ,
"tags" : [
"Patch" ,
"Vendor Advisory"
]
2024-11-23 13:10:58 +00:00
} ,
{
"url" : "https://www.qualcomm.com/company/product-security/bulletins/may-2020-bulletin" ,
"source" : "af854a3a-2127-422b-91ae-364da2661108" ,
"tags" : [
"Patch" ,
"Vendor Advisory"
]
2023-04-24 12:24:31 +02:00
}
]
}