CVE-2020-11124
u'Possible use-after-free while accessing diag client map table since list can be reallocated due to exceeding max client limit.' in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music in MDM9607, Nicobar, QCS404, QCS405, QCS610, Rennell, SA6155P, SA8155P, Saipan, SC8180X, SDM660, SDX55, SM6150, SM7150, SM8150, SM8250, SXR2130
- Score
- CVSS 3.1 7.8 High
- Status
- Modified - product-security@qualcomm.com
- Published
- 2020-09-09
- Last modified
- 2024-08-04
- Weaknesses
- CWE-416
Affected products
- Mdm9607 Firmware (Qualcomm)
- Nicobar Firmware (Qualcomm)
- Qcs404 Firmware (Qualcomm)
- Qcs405 Firmware (Qualcomm)
- Qcs610 Firmware (Qualcomm)
- Rennell Firmware (Qualcomm)
- Sa6155p Firmware (Qualcomm)
- Sa8155p Firmware (Qualcomm)
- Saipan Firmware (Qualcomm)
- Sc8180x Firmware (Qualcomm)
- Sdm660 Firmware (Qualcomm)
- Sdx55 Firmware (Qualcomm)
- Sm6150 Firmware (Qualcomm)
- Sm7150 Firmware (Qualcomm)
- Sm8150 Firmware (Qualcomm)
- Sm8250 Firmware (Qualcomm)
- Sxr2130 Firmware (Qualcomm)
- Snapdragon Auto (Qualcomm Inc.)
- Snapdragon Compute (Qualcomm Inc.)
- Snapdragon Consumer Iot (Qualcomm Inc.)
- Snapdragon Industrial Iot (Qualcomm Inc.)
- Snapdragon Mobile (Qualcomm Inc.)
- Snapdragon Voice Music (Qualcomm Inc.)
References
- https://www.qualcomm.com/company/product-security/bulletins/september-2020-bulletin
