NULL pointer dereference in Qualcomm products - CVE-2020-11254

Vulnerability identifier: #VU52827

CSH Severity: Low

CVSS v4: 6.8 [CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N]

CVE-ID: CVE-2020-11254

CWE-ID: CWE-476

Exploitation vector: Local access

Exploit availability: No public exploit available

The vulnerability allows a local user to perform a denial of service (DoS) attack.

The vulnerability exists due to a NULL pointer dereference error in DSP. A local user can dereference the session ctx pointer and perform a denial of service attack.

QPM8820
SD480
SA8195P
SA8155P
SA8150P
SA6150P
SA6145P
QTM525
QTC801S
QTC800S
QTC800H
QPM8870
SD8885G
QPM6670
QPM6621
QPM6585
QPM5875
QPM5870
QPM5679
QPM5677
QPM5670
QPM5641
QPM5621
QPM4650
QPM4641
QPM4640
QPM4630
WCD9341
WSA8835
WSA8830
WCN6856
WCN6855
WCN6851
WCN6850
WCN3991
WCN3990
WCN3988
WCN3980
WCD9385
WCD9380
WCD9375
WCD9370
QPM4621
WCD9326
SMR546
SMR545
SMR526
SMB1398
SMB1396
SMB1355
SMB1351
SDXR1
SDR865
SDR735G
SDR735
SDR660G
SDR660
PMM8155AU
QCA6696
QBT1500
QAT5568
QAT5522
QAT5516
QAT5515
QAT3555
QAT3519
QAT3518
QAT3516
PMR735B
PMR735A
PMM8195AU
QDM3301
PMM6155AU
PMK8350
PMK8003
PM8350C
PM8350BH
PM8350B
PM8350
PM8009
PM8008
PM7250B
PM660L
PM660
PM6350
PM6150L
QFS2630
QPA8842
QPA8821
QPA8803
QPA8802
QPA8801
QPA5581
QPA5580
QPA5461
QPA2625
QLN5040
QLN5030
QLN5020
QLN4650
QLN4642
PM6150A
QFS2608
QFS2580
QFS2530
QET6110
QET6105
QET6100
QET5100M
QET5100
QDM5671
QDM5670
QDM5621
QDM5620
QDM4650
QDM4643
SD888
SD710
SD670
SA6155P
QCA6574AU

Install updates from vendor's website.

• https://www.qualcomm.com/company/product-security/bulletins/may-2021-bulletin
• https://source.codeaurora.org/quic/la/kernel/msm-5.4/commit/?id=9900d61a478ba8403b0e3bf22cf50b18973bc3c1

• Multiple vulnerabilities in Qualcomm chipsets