What’s Vulnerable › Vulnerabilities

CVE-2020-11152

• Severity: medium (CVSS 6.4 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 0.1% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2021-01-21 · updated 2026-06-17
• Weakness: CWE-362

Description

Race condition in HAL layer while processing callback objects received from HIDL due to lack of synchronization between accessing objects in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables

Affected products

• Qualcomm Apq8009W: all versions
• Qualcomm Apq8017: all versions
• Qualcomm Apq8037: all versions
• Qualcomm Apq8052: all versions
• Qualcomm Apq8053: all versions
• Qualcomm Apq8056: all versions
• Qualcomm Apq8076: all versions
• Qualcomm Apq8096Au: all versions
• Qualcomm Aqt1000: all versions
• Qualcomm Ar8031: all versions
• Qualcomm Csra6620: all versions
• Qualcomm Csra6640: all versions
• Qualcomm Msm8909W: all versions
• Qualcomm Msm8916: all versions
• Qualcomm Msm8917: all versions
• Qualcomm Msm8920: all versions
• Qualcomm Msm8937: all versions
• Qualcomm Msm8940: all versions
• Qualcomm Msm8952: all versions
• Qualcomm Msm8953: all versions
• Qualcomm Msm8956: all versions
• Qualcomm Msm8976: all versions
• Qualcomm Msm8976Sg: all versions
• Qualcomm Msm8996Au: all versions
• Qualcomm Pm439: all versions
• Qualcomm Pm660: all versions
• Qualcomm Pm660A: all versions
• Qualcomm Pm660L: all versions
• Qualcomm Pm670: all versions
• Qualcomm Pm670A: all versions

References

• https://www.qualcomm.com/company/product-security/bulletins/december-2020-bulletin
• https://www.qualcomm.com/company/product-security/bulletins/december-2020-security-bulletin
• https://www.qualcomm.com/company/product-security/bulletins/december-2020-bulletin

Get alerted when CVE-2020-11152 or the next vulnerability affects your stack