VULNERABILITY INTELLIGENCE
CVE-2020-11284
CVSS score8.4 HIGH
EPSS probability0.16%
CISA KEVNot currently listed
Published2021-05-07
Last modified2026-06-17
CVSS vectorCVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Description
Locked memory can be unlocked and modified by non secure boot loader through improper system call sequence making the memory region untrusted source of input for secure boot loader in Snapdragon Auto, Snapdragon Compute, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Wired Infrastructure and Networking
Weakness classification
- nvd@nist.gov: CWE-667
Primary references
- product-security@qualcomm.com — Vendor Advisory
- af854a3a-2127-422b-91ae-364da2661108 — Vendor Advisory