CVEvulnerability

CVE-2020-11148

6.7 MEDIUM Published 2021-01-21 Modified 2026-06-17 Official page ↗
Status
Modified
Published
2021-01-21
Last modified
2026-06-17
Assigner
[email protected]
CVSS 3.1 ([email protected])
6.7 MEDIUM — CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H
CVSS 2.0 ([email protected])
7.2 HIGH — AV:L/AC:L/Au:N/C:C/I:C/A:C
Weaknesses
CWE-416

Description

Use after free issue in HIDL while using callback to post event in Rx thread when internal mutex is not acquired and meantime close is triggered and callback instance is deleted in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Wearables

Affected configurations

• qualcomm apq8017 • qualcomm apq8053 • qualcomm msm8917 • qualcomm msm8953 • qualcomm pm215 • qualcomm pm3003a • qualcomm pm439 • qualcomm pm6125 • qualcomm pm6150 • qualcomm pm6150a • qualcomm pm6150l • qualcomm pm6350 • qualcomm pm640a • qualcomm pm640l • qualcomm pm640p • qualcomm pm660 • qualcomm pm660l • qualcomm pm670 • qualcomm pm670l • qualcomm pm7150a • qualcomm pm7150l • qualcomm pm7250 • qualcomm pm7250b • qualcomm pm7350c • qualcomm pm8008 • qualcomm pm8009 • qualcomm pm8150a • qualcomm pm8150b • qualcomm pm8150c • qualcomm pm8150l • qualcomm pm8250 • qualcomm pm8350 • qualcomm pm8350b • qualcomm pm8350bh • qualcomm pm8350bhs • qualcomm pm8350c • qualcomm pm855 • qualcomm pm855b • qualcomm pm855l • qualcomm pm8916 • qualcomm pm8937 • qualcomm pm8953 • qualcomm pmi632 • qualcomm pmi8937 • qualcomm pmi8952 • qualcomm pmk7350 • qualcomm pmk8002 • qualcomm pmk8003 • qualcomm pmk8350 • qualcomm pmm8195au • qualcomm pmm855au • qualcomm pmr525 • qualcomm pmr735a • qualcomm pmr735b • qualcomm pmx55 • qualcomm qat3514 • qualcomm qat3516 • qualcomm qat3518 • qualcomm qat3519 • qualcomm qat3522 … and 186 more

Related

Weakness · CWE (1)

References