Vulnerability Description
Locked memory can be unlocked and modified by non secure boot loader through improper system call sequence making the memory region untrusted source of input for secure boot loader in Snapdragon Auto, Snapdragon Compute, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Wired Infrastructure and Networking
CVSS Score
HIGH
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Qualcomm | Aqt1000 Firmware | - |
| Qualcomm | Aqt1000 | - |
| Qualcomm | Ar8035 Firmware | - |
| Qualcomm | Ar8035 | - |
| Qualcomm | Pm3003A Firmware | - |
| Qualcomm | Pm3003A | - |
| Qualcomm | Pm4125 Firmware | - |
| Qualcomm | Pm4125 | - |
| Qualcomm | Pm4250 Firmware | - |
| Qualcomm | Pm4250 | - |
| Qualcomm | Pm6125 Firmware | - |
| Qualcomm | Pm6125 | - |
| Qualcomm | Pm6150 Firmware | - |
| Qualcomm | Pm6150 | - |
| Qualcomm | Pm6150A Firmware | - |
| Qualcomm | Pm6150A | - |
| Qualcomm | Pm6150L Firmware | - |
| Qualcomm | Pm6150L | - |
| Qualcomm | Pm6350 Firmware | - |
| Qualcomm | Pm6350 | - |
Related Weaknesses (CWE)
References
- https://www.qualcomm.com/company/product-security/bulletins/may-2021-bulletinVendor Advisory
- https://www.qualcomm.com/company/product-security/bulletins/may-2021-bulletinVendor Advisory
FAQ
What is CVE-2020-11284?
CVE-2020-11284 is a vulnerability with a CVSS score of 8.4 (HIGH). Locked memory can be unlocked and modified by non secure boot loader through improper system call sequence making the memory region untrusted source of input for secure boot loader in Snapdragon Auto,...
How severe is CVE-2020-11284?
CVE-2020-11284 has been rated HIGH with a CVSS base score of 8.4/10. Review the CVSS metrics above for detailed severity breakdown.
Is there a patch for CVE-2020-11284?
Check the references section above for vendor advisories and patch information. Affected products include: Qualcomm Aqt1000 Firmware, Qualcomm Aqt1000, Qualcomm Ar8035 Firmware, Qualcomm Ar8035, Qualcomm Pm3003A Firmware.