CVE-2020-11120 - Qualcomm Apq8098 Firmware, Qualcomm Qcs605 Firmware and Qualcomm Qm215 Firmware

Critical 7.8

u'Calling thread may free the data buffer pointer that was passed to the callback and later when event loop executes the callback, data buffer may not be valid and will lead to use after free scenario' in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables in APQ8096AU, APQ8098, Bitra, Kamorta, MSM8917, MSM8953, MSM8998, QCM2150, QCS405, QCS605, QM215, Rennell, Saipan, SDM429, SDM439, SDM450, SDM632, SM6150, SM7150, SM8150, SM8250, SXR2130

Affected software

Qualcomm Apq8098 Firmware

Qualcomm Qcs605 Firmware

Qualcomm Qm215 Firmware

Qualcomm Sm8250 Firmware

Qualcomm Sdm429 Firmware

Qualcomm Apq8096au Firmware

Qualcomm Msm8953 Firmware

Qualcomm Msm8998 Firmware

Qualcomm Rennell Firmware

Qualcomm Sm6150 Firmware

Qualcomm Sm8150 Firmware

Qualcomm Sdm439 Firmware

Qualcomm Sm7150 Firmware

Qualcomm Sdm632 Firmware

Qualcomm Saipan Firmware

Qualcomm Qcm2150 Firmware

Qualcomm Sdm450 Firmware

Qualcomm Kamorta Firmware

Qualcomm Bitra Firmware

Qualcomm Msm8917 Firmware

Qualcomm Qcs405 Firmware

Qualcomm Sxr2130 Firmware

Reference links

Get alerted to vulnerabilities in your software

CVE alerts, vulnerability alerts, latest versions and news matched to your software stack.