CVE-2020-13998: 
Citrix XenApp vulnerability analysis and mitigation

A critical vulnerability was discovered in Qualcomm's closed-source components affecting various Android devices. The vulnerability, identified as CVE-2020-13998, was addressed as part of Google's August 2020 Android security updates (Android Bulletin, Register Report).

The vulnerability was classified as critical severity and affected multiple Qualcomm components used in Android devices. It was one of five critical flaws patched in Qualcomm's closed-source components, alongside CVE-2019-10562, CVE-2019-10615, CVE-2020-3619, and CVE-2020-3667. While specific technical details were not publicly disclosed due to the closed-source nature of the affected components, the critical designation typically indicates potential remote code execution capabilities (Register Report).

As a critical severity vulnerability in Qualcomm components, the flaw could potentially allow attackers to execute arbitrary code on affected Android devices. The vulnerability affected a wide range of Qualcomm-powered Android devices, including various smartphone models and tablets (Threatpost).

No active exploitation of this vulnerability was reported in the wild at the time of patching. Google made no mention of the bug being actively targeted, which suggested limited real-world impact at the time of disclosure (Register Report).

The vulnerability was addressed in Google's August 2020 Android security updates. Users with Google-branded devices could receive the security updates immediately, while other Android device users needed to wait for their respective hardware vendor or carrier to validate and release the patches (Register Report).