CVE-2020-11217

Q: What is the severity of CVE-2020-11217?

CVE-2020-11217 has a CVSS score of 7.8 (HIGH). This CVE describes a double free or invalid memory access vulnerability in Qualcomm's audio driver when reading Speaker Protection parameters. It affects Snapdragon Compute, Connectivity, Industrial IoT, and Mobile platforms. Successful exploitation could allow attackers to execute arbitrary code or cause denial of service.

7.8 HIGH

📋 TL;DR

This CVE describes a double free or invalid memory access vulnerability in Qualcomm's audio driver when reading Speaker Protection parameters. It affects Snapdragon Compute, Connectivity, Industrial IoT, and Mobile platforms. Successful exploitation could allow attackers to execute arbitrary code or cause denial of service.

💻 Affected Systems

Products:

Snapdragon Compute
Snapdragon Connectivity
Snapdragon Industrial IOT
Snapdragon Mobile

Versions: Specific affected versions not detailed in references; check Qualcomm advisory for exact versions

Operating Systems: Android, Linux-based systems using affected Snapdragon chips

Default Config Vulnerable: ⚠️ Yes

Notes: Vulnerability is in Qualcomm's audio driver code, affecting devices with specific Snapdragon chipsets. Exact device models depend on chipset implementation.

📦 What is this software?

⚠️ Risk & Real-World Impact

🔴

Worst Case

Remote code execution with kernel privileges leading to complete system compromise, data theft, or persistent backdoor installation.

🟠

Likely Case

Local privilege escalation allowing attackers to gain elevated privileges on affected devices, potentially leading to data access or further system manipulation.

🟢

If Mitigated

Denial of service through system crash or instability if memory corruption occurs but code execution fails.

🌐 Internet-Facing: MEDIUM

🏢 Internal Only: HIGH

🎯 Exploit Status

Public PoC: ✅ No

Weaponized: UNKNOWN

Unauthenticated Exploit: ✅ No

Complexity: MEDIUM

Exploitation requires local access to trigger the vulnerable audio driver function. No public exploit code was mentioned in the references.

🛠️ Fix & Mitigation

✅ Official Fix

Patch Version: Check device manufacturer for specific patch versions

Vendor Advisory: https://www.qualcomm.com/company/product-security/bulletins/december-2020-bulletin

Restart Required: Yes

Instructions:

1. Check with device manufacturer for available security updates. 2. Apply the latest firmware/OS update from your device manufacturer. 3. Reboot device after update installation.

🔧 Temporary Workarounds

Disable vulnerable audio features

all

If possible, disable Speaker Protection or related audio features that trigger the vulnerable code path

Device-specific commands would vary by manufacturer

🧯 If You Can't Patch

Restrict physical and network access to affected devices
Implement strict application control to prevent unauthorized processes from accessing audio subsystems

🔍 How to Verify

Check if Vulnerable:

Check device chipset model and firmware version against Qualcomm's advisory. Use 'getprop ro.boot.hardware' or similar commands on Android devices.

Check Version:

Android: 'getprop ro.build.fingerprint' or 'getprop ro.build.version.security_patch'

Verify Fix Applied:

Verify firmware version has been updated to a version after December 2020 that includes the Qualcomm security patch.

📡 Detection & Monitoring

Log Indicators:

Kernel panic logs
Audio driver crash reports
Memory corruption warnings in system logs

Network Indicators:

Unusual local process attempting audio driver interactions

SIEM Query:

Search for kernel panic events or audio service crashes on affected devices

📊 Metadata

CVE ID: CVE-2020-11217

CVSS v3 Score: 7.8 (HIGH)

CVSS Vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

CWE: CWE-415

Published: January 21, 2021

Last Updated: November 21, 2024

🔗 References

https://www.qualcomm.com/company/product-security/bulletins/december-2020-bulletin Broken Link
https://www.qualcomm.com/company/product-security/bulletins/december-2020-security-bulletin Patch,Vendor Advisory
https://www.qualcomm.com/company/product-security/bulletins/december-2020-bulletin Broken Link

📋 TL;DR

💻 Affected Systems

📦 What is this software?

Pm3003a by Qualcomm

Pm4125 by Qualcomm

Pm6125 by Qualcomm

Pm6150a by Qualcomm

Pm6150l by Qualcomm

Pm6350 by Qualcomm

Pm660 by Qualcomm

Pm660a by Qualcomm

Pm660l by Qualcomm

Pm7150a by Qualcomm

Pm7150l by Qualcomm

Pm7250 by Qualcomm

Pm7250b by Qualcomm

Pm7350c by Qualcomm

Pm8008 by Qualcomm

Pm8009 by Qualcomm

Pm8150a by Qualcomm

Pm8150b by Qualcomm

Pm8150c by Qualcomm

Pm8150l by Qualcomm

Pm8250 by Qualcomm

Pm8350 by Qualcomm

Pm8350b by Qualcomm

Pm8350bh by Qualcomm

Pm8350bhs by Qualcomm

Pm8350c by Qualcomm

Pmi632 by Qualcomm

Pmk7350 by Qualcomm

Pmk8002 by Qualcomm

Pmk8003 by Qualcomm

Pmk8350 by Qualcomm

Pmr525 by Qualcomm

Pmr735a by Qualcomm

Pmr735b by Qualcomm

Pmx55 by Qualcomm

Qat3514 by Qualcomm

Qat3516 by Qualcomm

Qat3518 by Qualcomm

Qat3519 by Qualcomm

Qat3522 by Qualcomm

Qat3550 by Qualcomm

Qat3555 by Qualcomm

Qat5515 by Qualcomm

Qat5516 by Qualcomm

Qat5522 by Qualcomm

Qat5533 by Qualcomm

Qat5568 by Qualcomm

Qbt2000 by Qualcomm

Qca6390 by Qualcomm

Qca6391 by Qualcomm

Qca6421 by Qualcomm

Qca6426 by Qualcomm

Qca6431 by Qualcomm

Qca6436 by Qualcomm

Qcm2290 by Qualcomm

Qcm4290 by Qualcomm

Qcs2290 by Qualcomm

Qcs4290 by Qualcomm

Qdm2301 by Qualcomm

Qdm2305 by Qualcomm

Qdm2307 by Qualcomm

Qdm2308 by Qualcomm

Qdm2310 by Qualcomm

Qdm3301 by Qualcomm

Qdm3302 by Qualcomm

Qdm4643 by Qualcomm

Qdm4650 by Qualcomm

Qdm5579 by Qualcomm

Qdm5620 by Qualcomm

Qdm5621 by Qualcomm

Qdm5650 by Qualcomm

Qdm5652 by Qualcomm

Qdm5670 by Qualcomm

Qdm5671 by Qualcomm

Qdm5677 by Qualcomm

Qdm5679 by Qualcomm

Qet4100 by Qualcomm