What’s Vulnerable › Vulnerabilities
CVE-2020-11120
- Severity: high (CVSS 7.8 v3.1)
- Exploited in the wild: not listed in CISA KEV
- EPSS: 0.2% probability of exploitation in the next 30 days
- Public exploit or detection template: none known
- Published: 2020-09-08 · updated 2026-06-17
- Weakness: CWE-416
Description
u'Calling thread may free the data buffer pointer that was passed to the callback and later when event loop executes the callback, data buffer may not be valid and will lead to use after free scenario' in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables in APQ8096AU, APQ8098, Bitra, Kamorta, MSM8917, MSM8953, MSM8998, QCM2150, QCS405, QCS605, QM215, Rennell, Saipan, SDM429, SDM439, SDM450, SDM632, SM6150, SM7150, SM8150, SM8250, SXR2130
Affected products
- Qualcomm Apq8096Au Firmware: all versions
- Qualcomm Apq8098 Firmware: all versions
- Qualcomm Bitra Firmware: all versions
- Qualcomm Kamorta Firmware: all versions
- Qualcomm Msm8917 Firmware: all versions
- Qualcomm Msm8953 Firmware: all versions
- Qualcomm Msm8998 Firmware: all versions
- Qualcomm Qcm2150 Firmware: all versions
- Qualcomm Qcs405 Firmware: all versions
- Qualcomm Qcs605 Firmware: all versions
- Qualcomm Qm215 Firmware: all versions
- Qualcomm Rennell Firmware: all versions
- Qualcomm Saipan Firmware: all versions
- Qualcomm Sdm429 Firmware: all versions
- Qualcomm Sdm439 Firmware: all versions
- Qualcomm Sdm450 Firmware: all versions
- Qualcomm Sdm632 Firmware: all versions
- Qualcomm Sm6150 Firmware: all versions
- Qualcomm Sm7150 Firmware: all versions
- Qualcomm Sm8150 Firmware: all versions
- Qualcomm Sm8250 Firmware: all versions
- Qualcomm Sxr2130 Firmware: all versions
References
- https://www.qualcomm.com/company/product-security/bulletins/august-2020-bulletin
- https://www.qualcomm.com/company/product-security/bulletins/august-2020-security-bulletin
- https://www.qualcomm.com/company/product-security/bulletins/august-2020-bulletin
Get alerted when CVE-2020-11120 or the next vulnerability affects your stack