CVSS 3.1
7.8 highCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:HCVE-2020-11120
High (7.8) in qualcomm. EPSS 0.2% chance of exploitation in the next 30 days.
u'Calling thread may free the data buffer pointer that was passed to the callback and later when event loop executes the callback, data buffer may not be valid and will lead to use after free scenario' in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables in APQ8096AU, APQ8098, Bitra, Kamorta, MSM8917, MSM8953, MSM8998, QCM2150, QCS405, QCS605, QM215, Rennell, Saipan, SDM429, SDM439, SDM450, SDM632, SM6150, SM7150, SM8150, SM8250, SXR2130
Severity
- EPSS
- 0.2% chance of exploitation in the next 30 days; higher than 8% of CVEs (scores of 2026-10-31)
- CWE
- CWE-416
- Published
- Modified
- Record from
- the NVD, synced
Affected
- qualcomm:apq8096au_firmware
- qualcomm:apq8098_firmware
- qualcomm:bitra_firmware
- qualcomm:kamorta_firmware
- qualcomm:msm8917_firmware
- qualcomm:msm8953_firmware
- qualcomm:msm8998_firmware
- qualcomm:qcm2150_firmware
- qualcomm:qcs405_firmware
- qualcomm:qcs605_firmware
- qualcomm:qm215_firmware
- qualcomm:rennell_firmware
- qualcomm:saipan_firmware
- qualcomm:sdm429_firmware
- qualcomm:sdm439_firmware
- qualcomm:sdm450_firmware
- qualcomm:sdm632_firmware
- qualcomm:sm6150_firmware
- qualcomm:sm7150_firmware
- qualcomm:sm8150_firmware
- qualcomm:sm8250_firmware
- qualcomm:sxr2130_firmware