CVE-2020-11129

Severity: high (CVSS 7.8 v3.1)
Exploited in the wild: not listed in CISA KEV
EPSS: 0.2% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2020-09-09 · updated 2026-06-17
Weakness: CWE-416

Description

u'During the error occurrence in capture request, the buffer is freed and later accessed causing the camera APP to fail due to memory use-after-free' in Snapdragon Consumer IOT, Snapdragon Mobile in Bitra, Kamorta, QCS605, Saipan, SDM710, SM8250, SXR2130

Affected products

Qualcomm Bitra Firmware: all versions
Qualcomm Kamorta Firmware: all versions
Qualcomm Qcs605 Firmware: all versions
Qualcomm Saipan Firmware: all versions
Qualcomm Sdm710 Firmware: all versions
Qualcomm Sm8250 Firmware: all versions
Qualcomm Sxr2130 Firmware: all versions

References

https://www.qualcomm.com/company/product-security/bulletins/september-2020-bulletin
https://www.qualcomm.com/company/product-security/bulletins/september-2020-bulletin

Get alerted when CVE-2020-11129 or the next vulnerability affects your stack