{"id":"CVE-2020-11178","aliases":["EUVD-2020-3532","GHSA-7m5x-235r-x9r3"],"status":"published","title":"Trusted APPS to overwrite the CPZ memory of another use-case as TZ only checks the physical...","description":"Trusted APPS to overwrite the CPZ memory of another use-case as TZ only checks the physical address not overlapping with its memory and its RoT memory in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice \u0026 Music, Snapdragon Wired Infrastructure and Networking","severity":{"version":"3.1","score":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","level":"high","assessor":"primary","from":"nvd"},"epss":{"day":"2026-11-09","score":0.0016,"percentile":0.05131,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":false},"cwes":["CWE-20"],"published":"2021-06-09T05:00:39Z","modified":"2026-06-17T02:49:23Z","products":[{"vendor":"qualcomm","product":"aqt1000_firmware"},{"vendor":"qualcomm","product":"ar8031_firmware"},{"vendor":"qualcomm","product":"ar8035_firmware"},{"vendor":"qualcomm","product":"csra6620_firmware"},{"vendor":"qualcomm","product":"csra6640_firmware"},{"vendor":"qualcomm","product":"csrb31024_firmware"},{"vendor":"qualcomm","product":"fsm10055_firmware"},{"vendor":"qualcomm","product":"fsm10056_firmware"},{"vendor":"qualcomm","product":"mdm9205_firmware"},{"vendor":"qualcomm","product":"pm3003a_firmware"},{"vendor":"qualcomm","product":"pm4125_firmware"},{"vendor":"qualcomm","product":"pm456_firmware"},{"vendor":"qualcomm","product":"pm6125_firmware"},{"vendor":"qualcomm","product":"pm6150_firmware"},{"vendor":"qualcomm","product":"pm6150a_firmware"},{"vendor":"qualcomm","product":"pm6150l_firmware"},{"vendor":"qualcomm","product":"pm6250_firmware"},{"vendor":"qualcomm","product":"pm6350_firmware"},{"vendor":"qualcomm","product":"pm640a_firmware"},{"vendor":"qualcomm","product":"pm640l_firmware"},{"vendor":"qualcomm","product":"pm640p_firmware"},{"vendor":"qualcomm","product":"pm660_firmware"},{"vendor":"qualcomm","product":"pm660l_firmware"},{"vendor":"qualcomm","product":"pm670_firmware"},{"vendor":"qualcomm","product":"pm670a_firmware"},{"vendor":"qualcomm","product":"pm670l_firmware"},{"vendor":"qualcomm","product":"pm7150a_firmware"},{"vendor":"qualcomm","product":"pm7150l_firmware"},{"vendor":"qualcomm","product":"pm7250_firmware"},{"vendor":"qualcomm","product":"pm7250b_firmware"},{"vendor":"qualcomm","product":"pm8004_firmware"},{"vendor":"qualcomm","product":"pm8005_firmware"},{"vendor":"qualcomm","product":"pm8008_firmware"},{"vendor":"qualcomm","product":"pm8009_firmware"},{"vendor":"qualcomm","product":"pm8150_firmware"},{"vendor":"qualcomm","product":"pm8150a_firmware"},{"vendor":"qualcomm","product":"pm8150b_firmware"},{"vendor":"qualcomm","product":"pm8150c_firmware"},{"vendor":"qualcomm","product":"pm8150l_firmware"},{"vendor":"qualcomm","product":"pm8250_firmware"},{"vendor":"qualcomm","product":"pm855_firmware"},{"vendor":"qualcomm","product":"pm855b_firmware"},{"vendor":"qualcomm","product":"pm855l_firmware"},{"vendor":"qualcomm","product":"pm855p_firmware"},{"vendor":"qualcomm","product":"pm8998_firmware"},{"vendor":"qualcomm","product":"pmc1000h_firmware"},{"vendor":"qualcomm","product":"pmd9655_firmware"},{"vendor":"qualcomm","product":"pme605_firmware"},{"vendor":"qualcomm","product":"pmi632_firmware"},{"vendor":"qualcomm","product":"pmi8998_firmware"},{"vendor":"qualcomm","product":"pmk8002_firmware"},{"vendor":"qualcomm","product":"pmk8003_firmware"},{"vendor":"qualcomm","product":"pmm6155au_firmware"},{"vendor":"qualcomm","product":"pmm8155au_firmware"},{"vendor":"qualcomm","product":"pmm8195au_firmware"},{"vendor":"qualcomm","product":"pmm855au_firmware"},{"vendor":"qualcomm","product":"pmr525_firmware"},{"vendor":"qualcomm","product":"pmr735a_firmware"},{"vendor":"qualcomm","product":"pmr735b_firmware"},{"vendor":"qualcomm","product":"pmx24_firmware"},{"vendor":"qualcomm","product":"pmx50_firmware"},{"vendor":"qualcomm","product":"pmx55_firmware"},{"vendor":"qualcomm","product":"qat3516_firmware"},{"vendor":"qualcomm","product":"qat3518_firmware"},{"vendor":"qualcomm","product":"qat3519_firmware"},{"vendor":"qualcomm","product":"qat3522_firmware"},{"vendor":"qualcomm","product":"qat3550_firmware"},{"vendor":"qualcomm","product":"qat3555_firmware"},{"vendor":"qualcomm","product":"qat5515_firmware"},{"vendor":"qualcomm","product":"qat5516_firmware"},{"vendor":"qualcomm","product":"qat5522_firmware"},{"vendor":"qualcomm","product":"qat5533_firmware"},{"vendor":"qualcomm","product":"qbt1500_firmware"},{"vendor":"qualcomm","product":"qbt2000_firmware"},{"vendor":"qualcomm","product":"qca4004_firmware"},{"vendor":"qualcomm","product":"qca6174a_firmware"},{"vendor":"qualcomm","product":"qca6175a_firmware"},{"vendor":"qualcomm","product":"qca6310_firmware"},{"vendor":"qualcomm","product":"qca6335_firmware"},{"vendor":"qualcomm","product":"qca6390_firmware"},{"vendor":"qualcomm","product":"qca6391_firmware"},{"vendor":"qualcomm","product":"qca6420_firmware"},{"vendor":"qualcomm","product":"qca6421_firmware"},{"vendor":"qualcomm","product":"qca6426_firmware"},{"vendor":"qualcomm","product":"qca6430_firmware"},{"vendor":"qualcomm","product":"qca6431_firmware"},{"vendor":"qualcomm","product":"qca6436_firmware"},{"vendor":"qualcomm","product":"qca6564_firmware"},{"vendor":"qualcomm","product":"qca6564a_firmware"},{"vendor":"qualcomm","product":"qca6564au_firmware"},{"vendor":"qualcomm","product":"qca6574_firmware"},{"vendor":"qualcomm","product":"qca6574a_firmware"},{"vendor":"qualcomm","product":"qca6574au_firmware"},{"vendor":"qualcomm","product":"qca6584au_firmware"},{"vendor":"qualcomm","product":"qca6595_firmware"},{"vendor":"qualcomm","product":"qca6595au_firmware"},{"vendor":"qualcomm","product":"qca6696_firmware"},{"vendor":"qualcomm","product":"qca8337_firmware"},{"vendor":"qualcomm","product":"qca9377_firmware"},{"vendor":"qualcomm","product":"qca9984_firmware"},{"vendor":"qualcomm","product":"qcm2290_firmware"},{"vendor":"qualcomm","product":"qcm4290_firmware"},{"vendor":"qualcomm","product":"qcs2290_firmware"},{"vendor":"qualcomm","product":"qcs405_firmware"},{"vendor":"qualcomm","product":"qcs410_firmware"},{"vendor":"qualcomm","product":"qcs4290_firmware"},{"vendor":"qualcomm","product":"qcs603_firmware"},{"vendor":"qualcomm","product":"qcs605_firmware"},{"vendor":"qualcomm","product":"qcs610_firmware"},{"vendor":"qualcomm","product":"qdm2301_firmware"},{"vendor":"qualcomm","product":"qdm2302_firmware"},{"vendor":"qualcomm","product":"qdm2305_firmware"},{"vendor":"qualcomm","product":"qdm2307_firmware"},{"vendor":"qualcomm","product":"qdm2308_firmware"},{"vendor":"qualcomm","product":"qdm2310_firmware"},{"vendor":"qualcomm","product":"qdm3301_firmware"},{"vendor":"qualcomm","product":"qdm5620_firmware"},{"vendor":"qualcomm","product":"qdm5621_firmware"},{"vendor":"qualcomm","product":"qdm5650_firmware"},{"vendor":"qualcomm","product":"qdm5652_firmware"},{"vendor":"qualcomm","product":"qdm5670_firmware"},{"vendor":"qualcomm","product":"qdm5671_firmware"},{"vendor":"qualcomm","product":"qdm5677_firmware"},{"vendor":"qualcomm","product":"qdm5679_firmware"},{"vendor":"qualcomm","product":"qet4100_firmware"},{"vendor":"qualcomm","product":"qet4101_firmware"},{"vendor":"qualcomm","product":"qet4200aq_firmware"},{"vendor":"qualcomm","product":"qet5100_firmware"},{"vendor":"qualcomm","product":"qet5100m_firmware"},{"vendor":"qualcomm","product":"qet6100_firmware"},{"vendor":"qualcomm","product":"qet6110_firmware"},{"vendor":"qualcomm","product":"qfs2530_firmware"},{"vendor":"qualcomm","product":"qfs2580_firmware"},{"vendor":"qualcomm","product":"qln1021aq_firmware"},{"vendor":"qualcomm","product":"qln1031_firmware"},{"vendor":"qualcomm","product":"qln1036aq_firmware"},{"vendor":"qualcomm","product":"qln4640_firmware"},{"vendor":"qualcomm","product":"qln4642_firmware"},{"vendor":"qualcomm","product":"qln4650_firmware"},{"vendor":"qualcomm","product":"qln5020_firmware"},{"vendor":"qualcomm","product":"qln5030_firmware"},{"vendor":"qualcomm","product":"qln5040_firmware"},{"vendor":"qualcomm","product":"qpa2625_firmware"},{"vendor":"qualcomm","product":"qpa4360_firmware"},{"vendor":"qualcomm","product":"qpa4361_firmware"},{"vendor":"qualcomm","product":"qpa5460_firmware"},{"vendor":"qualcomm","product":"qpa5580_firmware"},{"vendor":"qualcomm","product":"qpa5581_firmware"},{"vendor":"qualcomm","product":"qpa6560_firmware"},{"vendor":"qualcomm","product":"qpa8673_firmware"},{"vendor":"qualcomm","product":"qpa8675_firmware"},{"vendor":"qualcomm","product":"qpa8686_firmware"},{"vendor":"qualcomm","product":"qpa8688_firmware"},{"vendor":"qualcomm","product":"qpa8801_firmware"},{"vendor":"qualcomm","product":"qpa8802_firmware"},{"vendor":"qualcomm","product":"qpa8803_firmware"},{"vendor":"qualcomm","product":"qpa8821_firmware"},{"vendor":"qualcomm","product":"qpa8842_firmware"},{"vendor":"qualcomm","product":"qpm4650_firmware"},{"vendor":"qualcomm","product":"qpm5541_firmware"},{"vendor":"qualcomm","product":"qpm5577_firmware"},{"vendor":"qualcomm","product":"qpm5579_firmware"},{"vendor":"qualcomm","product":"qpm5620_firmware"},{"vendor":"qualcomm","product":"qpm5621_firmware"},{"vendor":"qualcomm","product":"qpm5657_firmware"},{"vendor":"qualcomm","product":"qpm5658_firmware"},{"vendor":"qualcomm","product":"qpm5670_firmware"},{"vendor":"qualcomm","product":"qpm5677_firmware"},{"vendor":"qualcomm","product":"qpm5679_firmware"},{"vendor":"qualcomm","product":"qpm6325_firmware"},{"vendor":"qualcomm","product":"qpm6375_firmware"},{"vendor":"qualcomm","product":"qpm6582_firmware"},{"vendor":"qualcomm","product":"qpm6585_firmware"},{"vendor":"qualcomm","product":"qpm8820_firmware"},{"vendor":"qualcomm","product":"qpm8830_firmware"},{"vendor":"qualcomm","product":"qpm8870_firmware"},{"vendor":"qualcomm","product":"qpm8895_firmware"},{"vendor":"qualcomm","product":"qsm7250_firmware"},{"vendor":"qualcomm","product":"qsm8250_firmware"},{"vendor":"qualcomm","product":"qsw6310_firmware"},{"vendor":"qualcomm","product":"qsw8573_firmware"},{"vendor":"qualcomm","product":"qsw8574_firmware"},{"vendor":"qualcomm","product":"qtc410s_firmware"},{"vendor":"qualcomm","product":"qtc800h_firmware"},{"vendor":"qualcomm","product":"qtc800s_firmware"},{"vendor":"qualcomm","product":"qtc801s_firmware"},{"vendor":"qualcomm","product":"qtm525_firmware"},{"vendor":"qualcomm","product":"qtm527_firmware"},{"vendor":"qualcomm","product":"sa415m_firmware"},{"vendor":"qualcomm","product":"sa6145p_firmware"},{"vendor":"qualcomm","product":"sa6150p_firmware"},{"vendor":"qualcomm","product":"sa6155_firmware"},{"vendor":"qualcomm","product":"sa6155p_firmware"},{"vendor":"qualcomm","product":"sa8150p_firmware"},{"vendor":"qualcomm","product":"sa8155_firmware"},{"vendor":"qualcomm","product":"sa8155p_firmware"},{"vendor":"qualcomm","product":"sa8195p_firmware"},{"vendor":"qualcomm","product":"sc8180x\\+sdx55_firmware"},{"vendor":"qualcomm","product":"sd460_firmware"},{"vendor":"qualcomm","product":"sd662_firmware"},{"vendor":"qualcomm","product":"sd665_firmware"},{"vendor":"qualcomm","product":"sd670_firmware"},{"vendor":"qualcomm","product":"sd675_firmware"},{"vendor":"qualcomm","product":"sd690_5g_firmware"},{"vendor":"qualcomm","product":"sd710_firmware"},{"vendor":"qualcomm","product":"sd712_firmware"},{"vendor":"qualcomm","product":"sd720g_firmware"},{"vendor":"qualcomm","product":"sd730_firmware"},{"vendor":"qualcomm","product":"sd750g_firmware"},{"vendor":"qualcomm","product":"sd765_firmware"},{"vendor":"qualcomm","product":"sd765g_firmware"},{"vendor":"qualcomm","product":"sd768g_firmware"},{"vendor":"qualcomm","product":"sd7c_firmware"},{"vendor":"qualcomm","product":"sd845_firmware"},{"vendor":"qualcomm","product":"sd850_firmware"},{"vendor":"qualcomm","product":"sd855_firmware"},{"vendor":"qualcomm","product":"sd865_5g_firmware"},{"vendor":"qualcomm","product":"sd_675_firmware"},{"vendor":"qualcomm","product":"sd_8c_firmware"},{"vendor":"qualcomm","product":"sd_8cx_firmware"},{"vendor":"qualcomm","product":"sdm830_firmware"},{"vendor":"qualcomm","product":"sdr051_firmware"},{"vendor":"qualcomm","product":"sdr052_firmware"},{"vendor":"qualcomm","product":"sdr105_firmware"},{"vendor":"qualcomm","product":"sdr425_firmware"},{"vendor":"qualcomm","product":"sdr660_firmware"},{"vendor":"qualcomm","product":"sdr660g_firmware"},{"vendor":"qualcomm","product":"sdr675_firmware"},{"vendor":"qualcomm","product":"sdr735_firmware"},{"vendor":"qualcomm","product":"sdr735g_firmware"},{"vendor":"qualcomm","product":"sdr8150_firmware"},{"vendor":"qualcomm","product":"sdr8250_firmware"},{"vendor":"qualcomm","product":"sdr865_firmware"},{"vendor":"qualcomm","product":"sdx24_firmware"},{"vendor":"qualcomm","product":"sdx50m_firmware"},{"vendor":"qualcomm","product":"sdx55_firmware"},{"vendor":"qualcomm","product":"sdx55m_firmware"},{"vendor":"qualcomm","product":"sdxr1_firmware"},{"vendor":"qualcomm","product":"sdxr2_5g_firmware"},{"vendor":"qualcomm","product":"sm4125_firmware"},{"vendor":"qualcomm","product":"sm4350_firmware"},{"vendor":"qualcomm","product":"sm6250_firmware"},{"vendor":"qualcomm","product":"sm6250p_firmware"},{"vendor":"qualcomm","product":"sm7250p_firmware"},{"vendor":"qualcomm","product":"smb1351_firmware"},{"vendor":"qualcomm","product":"smb1354_firmware"},{"vendor":"qualcomm","product":"smb1355_firmware"},{"vendor":"qualcomm","product":"smb1380_firmware"},{"vendor":"qualcomm","product":"smb1381_firmware"},{"vendor":"qualcomm","product":"smb1390_firmware"},{"vendor":"qualcomm","product":"smb1395_firmware"},{"vendor":"qualcomm","product":"smb1396_firmware"},{"vendor":"qualcomm","product":"smb231_firmware"},{"vendor":"qualcomm","product":"smb2351_firmware"},{"vendor":"qualcomm","product":"smr525_firmware"},{"vendor":"qualcomm","product":"smr526_firmware"},{"vendor":"qualcomm","product":"wcd9306_firmware"},{"vendor":"qualcomm","product":"wcd9326_firmware"},{"vendor":"qualcomm","product":"wcd9335_firmware"},{"vendor":"qualcomm","product":"wcd9340_firmware"},{"vendor":"qualcomm","product":"wcd9341_firmware"},{"vendor":"qualcomm","product":"wcd9360_firmware"},{"vendor":"qualcomm","product":"wcd9370_firmware"},{"vendor":"qualcomm","product":"wcd9371_firmware"},{"vendor":"qualcomm","product":"wcd9375_firmware"},{"vendor":"qualcomm","product":"wcd9380_firmware"},{"vendor":"qualcomm","product":"wcd9385_firmware"},{"vendor":"qualcomm","product":"wcn3910_firmware"},{"vendor":"qualcomm","product":"wcn3950_firmware"},{"vendor":"qualcomm","product":"wcn3980_firmware"},{"vendor":"qualcomm","product":"wcn3988_firmware"},{"vendor":"qualcomm","product":"wcn3990_firmware"},{"vendor":"qualcomm","product":"wcn3991_firmware"},{"vendor":"qualcomm","product":"wcn3998_firmware"},{"vendor":"qualcomm","product":"wcn3999_firmware"},{"vendor":"qualcomm","product":"wcn6750_firmware"},{"vendor":"qualcomm","product":"wcn6850_firmware"},{"vendor":"qualcomm","product":"wcn6851_firmware"},{"vendor":"qualcomm","product":"wgr7640_firmware"},{"vendor":"qualcomm","product":"whs9410_firmware"},{"vendor":"qualcomm","product":"wsa8810_firmware"},{"vendor":"qualcomm","product":"wsa8815_firmware"},{"vendor":"qualcomm","product":"wsa8830_firmware"},{"vendor":"qualcomm","product":"wsa8835_firmware"},{"vendor":"qualcomm","product":"wtr2965_firmware"},{"vendor":"qualcomm","product":"wtr3925_firmware"},{"vendor":"qualcomm","product":"wtr5975_firmware"},{"vendor":"qualcomm, inc.","product":"snapdragon auto, snapdragon compute, snapdragon connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon mobile, snapdragon voice \u0026 music, snapdragon wired infrastructure and networking"}],"references":[{"url":"https://www.qualcomm.com/company/product-security/bulletins/january-2021-bulletin","tags":["x_refsource_CONFIRM","x_transferred","Vendor Advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2020-11178"},{"url":"https://github.com/advisories/GHSA-7m5x-235r-x9r3"}],"sources":{"cve":[{"id":"CVE-2020-11178","description":"Trusted APPS to overwrite the CPZ memory of another use-case as TZ only checks the physical address not overlapping with its memory and its RoT memory in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice \u0026 Music, Snapdragon Wired Infrastructure and Networking","status":"published","published":"2021-06-09T05:00:39Z","modified":"2024-08-04T11:28:13.321Z","updated_at":"2026-11-02T14:35:57.67317Z"}],"euvd":[{"id":"EUVD-2020-3532","description":"Trusted APPS to overwrite the CPZ memory of another use-case as TZ only checks the physical address not overlapping with its memory and its RoT memory in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice \u0026 Music, Snapdragon Wired Infrastructure and Networking","status":"published","published":"2021-06-09T05:00:39Z","modified":"2024-08-04T11:28:13Z","updated_at":"2026-11-03T03:07:47.591202Z"}],"ghsa":[{"id":"GHSA-7m5x-235r-x9r3","title":"Trusted APPS to overwrite the CPZ memory of another use-case as TZ only checks the physical...","description":"Trusted APPS to overwrite the CPZ memory of another use-case as TZ only checks the physical address not overlapping with its memory and its RoT memory in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice \u0026 Music, Snapdragon Wired Infrastructure and Networking","status":"published","published":"2022-05-24T19:04:44Z","modified":"2023-01-29T05:06:56Z","cwes":["CWE-20"],"updated_at":"2026-11-02T14:46:07.317218Z"}],"nvd":[{"id":"CVE-2020-11178","description":"Trusted APPS to overwrite the CPZ memory of another use-case as TZ only checks the physical address not overlapping with its memory and its RoT memory in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice \u0026 Music, Snapdragon Wired Infrastructure and Networking","status":"published","published":"2021-06-09T05:15:07.217Z","modified":"2026-06-17T02:49:23.01Z","cvss":[{"version":"3.1","score":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","level":"high","assessor":"primary"},{"version":"2.0","score":7.2,"vector":"AV:L/AC:L/Au:N/C:C/I:C/A:C","level":"high","assessor":"primary"}],"cwes":["CWE-20"],"updated_at":"2026-11-02T14:06:43.288951Z"}]}}