CVE-2020-11233
Time-of-check time-of-use race condition While processing partition entries due to newly created...
Time-of-check time-of-use race condition While processing partition entries due to newly created buffer was read again from mmc without validation in Snapdragon Auto, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables
Attack profile
How easy it is to exploit
- Attack vector
- Local
- Complexity
- High
- Privileges needed
- Low
- User interaction
- None
What an attacker can affect
- Confidentiality
- High
- Integrity
- High
- Availability
- High
Exploit likelihood
What each source reports
NVD Score used
Time-of-check time-of-use race condition While processing partition entries due to newly created buffer was read again from mmc without validation in Snapdragon Auto, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables
- Record
CVE-2020-11233- CVSS 3.1
- 7.0 High
CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H - CVSS 2.0
- 6.9 Medium
AV:L/AC:M/Au:N/C:C/I:C/A:C - Weakness
- CWE-367
- Updated
- 2026-11-02
CVE List No score
Time-of-check time-of-use race condition While processing partition entries due to newly created buffer was read again from mmc without validation in Snapdragon Auto, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables
- Record
CVE-2020-11233- Updated
- 2026-11-02
EUVDEUVD-2020-3587 No score
Time-of-check time-of-use race condition While processing partition entries due to newly created buffer was read again from mmc without validation in Snapdragon Auto, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables
- Record
EUVD-2020-3587- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-rj5v-43f2-c55m No score
Time-of-check time-of-use race condition While processing partition entries due to newly created...
Time-of-check time-of-use race condition While processing partition entries due to newly created buffer was read again from mmc without validation in Snapdragon Auto, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables
- Record
GHSA-rj5v-43f2-c55m- Weakness
- CWE-367
- Updated
- 2026-11-02
Affected products
- qualcomm, inc. snapdragon auto, snapdragon connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon mobile, snapdragon voice & music, snapdragon wearables
- qualcomm apq8009 firmware
- qualcomm apq8009w firmware
- qualcomm apq8017 firmware
- qualcomm apq8053 firmware
- qualcomm apq8076 firmware
- qualcomm apq8096au firmware
- qualcomm csr6030 firmware
- qualcomm mdm9206 firmware
- qualcomm mdm9230 firmware
- qualcomm mdm9250 firmware
- qualcomm mdm9330 firmware
Show 101 moreShow less
- qualcomm mdm9607 firmware
- qualcomm mdm9626 firmware
- qualcomm mdm9628 firmware
- qualcomm mdm9630 firmware
- qualcomm mdm9640 firmware
- qualcomm mdm9650 firmware
- qualcomm mdm9655 firmware
- qualcomm msm8909w firmware
- qualcomm msm8937 firmware
- qualcomm msm8996au firmware
- qualcomm pm215 firmware
- qualcomm pm439 firmware
- qualcomm pm660 firmware
- qualcomm pm8004 firmware
- qualcomm pm8909 firmware
- qualcomm pm8916 firmware
- qualcomm pm8937 firmware
- qualcomm pm8952 firmware
- qualcomm pm8953 firmware
- qualcomm pm8956 firmware
- qualcomm pm8996 firmware
- qualcomm pmd9607 firmware
- qualcomm pmd9635 firmware
- qualcomm pmd9645 firmware
- qualcomm pmd9655 firmware
- qualcomm pmi632 firmware
- qualcomm pmi8937 firmware
- qualcomm pmi8952 firmware
- qualcomm pmi8994 firmware
- qualcomm pmi8996 firmware
- qualcomm pmk8001 firmware
- qualcomm pmm8996au firmware
- qualcomm pmx20 firmware
- qualcomm qca4020 firmware
- qualcomm qca6174 firmware
- qualcomm qca6174a firmware
- qualcomm qca6564a firmware
- qualcomm qca6564au firmware
- qualcomm qca6574a firmware
- qualcomm qca6574au firmware
- qualcomm qca6584 firmware
- qualcomm qca9367 firmware
- qualcomm qca9377 firmware
- qualcomm qca9379 firmware
- qualcomm qcc1110 firmware
- qualcomm qcc112 firmware
- qualcomm qet4100 firmware
- qualcomm qet4101 firmware
- qualcomm qet4200aq firmware
- qualcomm qfe1035 firmware
- qualcomm qfe1040 firmware
- qualcomm qfe1045 firmware
- qualcomm qfe2340 firmware
- qualcomm qfe2550 firmware
- qualcomm qfe3100 firmware
- qualcomm qfe3320 firmware
- qualcomm qfe3335 firmware
- qualcomm qfe3345 firmware
- qualcomm qln1021aq firmware
- qualcomm qln1030 firmware
- qualcomm qln1031 firmware
- qualcomm qln1036aq firmware
- qualcomm qsw8573 firmware
- qualcomm qtc801s firmware
- qualcomm qualcomm215 firmware
- qualcomm rgr7640au firmware
- qualcomm sd205 firmware
- qualcomm sd210 firmware
- qualcomm sd439 firmware
- qualcomm sd820 firmware
- qualcomm sdw2500 firmware
- qualcomm sdw3100 firmware
- qualcomm sdx20 firmware
- qualcomm sdx20m firmware
- qualcomm smb1350 firmware
- qualcomm smb1351 firmware
- qualcomm smb1355 firmware
- qualcomm smb1357 firmware
- qualcomm smb1358 firmware
- qualcomm smb1360 firmware
- qualcomm smb231 firmware
- qualcomm smb358s firmware
- qualcomm wcd9306 firmware
- qualcomm wcd9326 firmware
- qualcomm wcd9330 firmware
- qualcomm wcd9335 firmware
- qualcomm wcn3610 firmware
- qualcomm wcn3615 firmware
- qualcomm wcn3620 firmware
- qualcomm wcn3660b firmware
- qualcomm wcn3680 firmware
- qualcomm wcn3680b firmware
- qualcomm wgr7640 firmware
- qualcomm wsa8810 firmware
- qualcomm wsa8815 firmware
- qualcomm wtr2955 firmware
- qualcomm wtr2965 firmware
- qualcomm wtr3905 firmware
- qualcomm wtr3925 firmware
- qualcomm wtr4905 firmware
- qualcomm wtr5975 firmware
Affected packages
| Package | Affected | Fixed |
|---|---|---|
kernel/lkAndroid |
SoCVersion:0 up to SoCVersion:2021-01-05, plus listed versions SoCVersion |
SoCVersion:2021-01-05 |
History
| Recorded | Changed | Sources |
|---|---|---|
| facts | OSV | |
| aliases | EUVD | |
| first indexed | CVE List, GitHub Advisories, NVD, OSV |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2020-11233 is a high vulnerability (CVSS 7.0) in Qualcomm, Inc. Snapdragon Auto, Snapdragon Connectivity, Snapdragon Consumer Iot, Snapdragon Industrial Iot, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables, published January 1, 2021. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 0.13%, the 2nd percentile. Fixed in kernel/lk SoCVersion:2021-01-05.