Buffer overflow in Qualcomm products - CVE-2020-11284

Vulnerability identifier: #VU52809

CSH Severity: Medium

CVSS v4: 8.5 [CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N]

CVE-ID: CVE-2020-11284

CWE-ID: CWE-119

Exploitation vector: Local access

Exploit availability: No public exploit available

The vulnerability allows a local user to escalate privileges on the system.

The vulnerability exists due to a boundary error in QTEE. Locked memory can be unlocked and modified by non secure boot loader through improper system call sequence making the memory region untrusted source of input for secure boot loader.

SDR735
SD8655G
SD870
SD8885G
SDM830
SDR425
SDR660
SDR660G
SDR735G
SDR8150
SDR8250
SDR865
SDX55M
SDXR25G
SD662
SD480
SD460
SD8CX
SD8C
SA8195P
QTM525
QTC801S
QTC800S
QTC800H
QTC410S
QSW8574
QPA6560
QPA5460
WCN3999
WCD9385
WCN3910
WCN3950
WCN3980
WCN3988
WCN3990
WCN3991
WCN3998
WCD9380
WGR7640
WHS9410
WSA8810
WSA8815
WTR2965
WTR3925
WTR5975
QPA4360
WCD9375
WCD9370
WCD9360
WCD9341
WCD9340
SMR546
SMR545
SMR526
SMR525
SMB1396
SMB1390
SMB1355
SMB1354
SMB1351
SM4125
PM855B
PM8009
PM8150A
PM8150B
PM8150C
PM8150L
PM8250
PM8350
PM855
PM8008
PM855L
PM855P
PM8998
PMD9655
PMI632
PMI8998
PMK8002
PMK8003
PM8005
PM8004
PM7250B
PM640P
PM640L
PM640A
PM6350
PM6150L
PM6150A
PM6150
PM6125
PM4250
PM4125
PM3003A
AR8035
QCA6431
QFS2580
QFS2530
QET6105
QET6100
QET5100
QET4101
QCS4290
QCS2290
QCM4290
QCM2290
QCA9984
QCA6595
QCA6436
AQT1000
QCA6430
QCA6426
QCA6421
QCA6420
QCA6391
QCA6390
QBT2000
QBT1500
QAT3550
QAT3522
PMX55
PMX24
PMR525
PMM855AU
PMM8195AU
SD855
SD675
SDX24
SDX55
SA6155P
QCS405
QCA6574AU
Google Android

Install updates from vendor's website.

Google Android - addressed in versions 8.1 2021-05-05, 9.0 2021-05-05, 10 2021-05-05, 11 2021-05-05

• https://www.qualcomm.com/company/product-security/bulletins/may-2021-bulletin

• Multiple vulnerabilities in Qualcomm chipsets
• Multiple vulnerabilities in Google Android