What’s Vulnerable › Vulnerabilities

CVE-2020-11151

• Severity: medium (CVSS 6.4 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 0.1% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2021-01-21 · updated 2026-06-17
• Weakness: CWE-362

Description

Race condition occurs while calling user space ioctl from two different threads can results to use after free issue in video in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Wearables

Affected products

• Qualcomm Pm3003A: all versions
• Qualcomm Pm6125: all versions
• Qualcomm Pm6150: all versions
• Qualcomm Pm6150A: all versions
• Qualcomm Pm6150L: all versions
• Qualcomm Pm6350: all versions
• Qualcomm Pm640A: all versions
• Qualcomm Pm640L: all versions
• Qualcomm Pm640P: all versions
• Qualcomm Pm7150A: all versions
• Qualcomm Pm7150L: all versions
• Qualcomm Pm7250: all versions
• Qualcomm Pm7250B: all versions
• Qualcomm Pm8008: all versions
• Qualcomm Pm8009: all versions
• Qualcomm Pm8150A: all versions
• Qualcomm Pm8150B: all versions
• Qualcomm Pm8150C: all versions
• Qualcomm Pm8150L: all versions
• Qualcomm Pm8250: all versions
• Qualcomm Pmi632: all versions
• Qualcomm Pmk8002: all versions
• Qualcomm Pmk8003: all versions
• Qualcomm Pmm8195Au: all versions
• Qualcomm Pmm855Au: all versions
• Qualcomm Pmr525: all versions
• Qualcomm Pmr735A: all versions
• Qualcomm Pmr735B: all versions
• Qualcomm Pmx55: all versions
• Qualcomm Qat3516: all versions

References

• https://www.qualcomm.com/company/product-security/bulletins/december-2020-bulletin
• https://www.qualcomm.com/company/product-security/bulletins/december-2020-security-bulletin
• https://www.qualcomm.com/company/product-security/bulletins/december-2020-bulletin

Get alerted when CVE-2020-11151 or the next vulnerability affects your stack