CVE-2020-11120

🗓️ 08 Sep 2020 09:31:36Reported by qualcommType

Calling thread may free the data buffer pointer that was passed to the callback and later when event loop executes the callback, data buffer may not be valid and will lead to use after free scenario in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables in APQ8096AU, APQ8098, Bitra, Kamorta, MSM8917, MSM8953, MSM8998, QCM2150, QCS405, QCS605, QM215, Rennell, Saipan, SDM429, SDM439, SDM450, SDM632, SM6150, SM7150, SM8150, SM8250, SXR213

Reporter	Title	Published	Views	Family All 6
Cvelist	CVE-2020-11120	8 Sep 202009:31	–	cvelist
EUVD	EUVD-2020-3474	7 Oct 202500:30	–	euvd
NVD	CVE-2020-11120	8 Sep 202010:15	–	nvd
OSV	ASB-A-155652795	1 Aug 202000:00	–	osv
Prion	Buffer overflow	8 Sep 202010:15	–	prion
RedhatCVE	CVE-2020-11120	22 May 202516:08	–	redhatcve

NVD

Node

qualcomm apq8096au_firmwareMatch-

AND

qualcomm apq8096auMatch-

Node

qualcomm apq8098_firmwareMatch-

AND

qualcomm apq8098Match-

Node

qualcomm bitra_firmwareMatch-

AND

qualcomm bitraMatch-

Node

qualcomm kamorta_firmwareMatch-

AND

qualcomm kamortaMatch-

Node

qualcomm msm8917_firmwareMatch-

AND

qualcomm msm8917Match-

Node

qualcomm msm8953_firmwareMatch-

AND

qualcomm msm8953Match-

Node

qualcomm msm8998_firmwareMatch-

AND

qualcomm msm8998Match-

Node

qualcomm qcm2150_firmwareMatch-

AND

qualcomm qcm2150Match-

Node

qualcomm qcs405_firmwareMatch-

AND

qualcomm qcs405Match-

Node

qualcomm qcs605_firmwareMatch-

AND

qualcomm qcs605Match-

Node

qualcomm qm215_firmwareMatch-

AND

qualcomm qm215Match-

Node

qualcomm rennell_firmwareMatch-

AND

qualcomm rennellMatch-

Node

qualcomm saipan_firmwareMatch-

AND

qualcomm saipanMatch-

Node

qualcomm sdm429_firmwareMatch-

AND

qualcomm sdm429Match-

Node

qualcomm sdm439_firmwareMatch-

AND

qualcomm sdm439Match-

Node

qualcomm sdm450_firmwareMatch-

AND

qualcomm sdm450Match-

Node

qualcomm sdm632_firmwareMatch-

AND

qualcomm sdm632Match-

Node

qualcomm sm6150_firmwareMatch-

AND

qualcomm sm6150Match-

Node

qualcomm sm7150_firmwareMatch-

AND

qualcomm sm7150Match-

Node

qualcomm sm8150_firmwareMatch-

AND

qualcomm sm8150Match-

Node

qualcomm sm8250_firmwareMatch-

AND

qualcomm sm8250Match-

Node

qualcomm sxr2130_firmwareMatch-

AND

qualcomm sxr2130Match-

[
  {
    "product": "Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables",
    "vendor": "Qualcomm, Inc.",
    "versions": [
      {
        "status": "affected",
        "version": "APQ8096AU, APQ8098, Bitra, Kamorta, MSM8917, MSM8953, MSM8998, QCM2150, QCS405, QCS605, QM215, Rennell, Saipan, SDM429, SDM439, SDM450, SDM632, SM6150, SM7150, SM8150, SM8250, SXR2130"
      }
    ]
  }
]

Source	Link
qualcomm	www.qualcomm.com/company/product-security/bulletins/august-2020-bulletin
qualcomm	www.qualcomm.com/company/product-security/bulletins/august-2020-security-bulletin

21 Nov 2024 04:56Current

7.8High risk

Vulners AI Score7.8

CVSS 24.6

CVSS 3.17.8

EPSS0.00044

CWE-416