Cryptographic Issues in Qualcomm products - CVE-2020-11123

Vulnerability identifier: #VU112416

CSH Severity: Low

CVSS v4: 8.4 [CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N]

CVE-ID: CVE-2020-11123

CWE-ID: CWE-310

Exploitation vector: Local access

Exploit availability: No public exploit available

The vulnerability allows a local application to read and manipulate data.

The vulnerability exists due to improper input validation in HLOS. A local application can read and manipulate data.

SDM455
SDX50M
SDW2500
SDM850
SDM830
SDM712
SDM640
SDM1000
SDA855
SDA670
SDA640
SDA429W
SC8180XP
WCD9330
SXR2130P
SXR1120
SM8350P
SM8350
SM8150P
SM7250P
SM7250
SM7225
SM7150P
SC7180
SM7125
SM6350
SM6250P
SM6250
SM6150P
SM6125
SM6115P
SM6115
SM4250P
SM4250
SM4125
SDX55M
MDM9207
MSM8909
MSM8608
MSM8209
MSM8208
MSM8108
MDM9655
MDM9628
MDM9250
MDM9205
MDM8207
APQ8096SG
APQ8096
APQ8064AU
APQ8037
APQ8009W
QCS610
SA8195P
SA8155P
SA8155
SA8150P
SA6155
SA6150P
SA6145P
SA515M
SA415M
QSM8350
QSM8250
QCS603
QCS4290
QCS410
QCM4290
MSM8996SG
SDX24
SDM845
SDM710
SDM670
SDM660
SDM636
SDM632
SDM630
SDX55
SDM450
SDM439
SDM429W
SDM429
SDA845
SDA660
SC8180X
SM7150
SXR2130
SXR1130
SM8250
SM8150
SM6150
MSM8917
MSM8909W
MSM8905
MDM9650
MDM9640
MDM9607
MSM8920
MDM9206
MDM9150
APQ8098
APQ8096AU
APQ8053
APQ8017
SA6155P
QM215
APQ8009
QCS605
QCS405
MSM8998
MSM8996AU
MSM8996
MSM8953
MSM8940
MSM8937

Install security update from vendor's website.

• https://docs.qualcomm.com/product/publicresources/securitybulletin/november-2020-security-bulletin.html

• Multiple vulnerabilities in Qualcomm chipsets