NetSight
high7.8

CVE-2020-11124

u'Possible use-after-free while accessing diag client map table since list can be reallocated due to exceeding max client limit.' in Snapdragon Auto, Snapdrago…

Impact

u'Possible use-after-free while accessing diag client map table since list can be reallocated due to exceeding max client limit.' in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music in MDM9607, Nicobar, QCS404, QCS405, QCS610, Rennell, SA6155P, SA8155P, Saipan, SC8180X, SDM660, SDX55, SM6150, SM7150, SM8150, SM8250, SXR2130

Affected products

VendorProductAffected versions
QualcommMdm9607 Firmware
All versions
QualcommNicobar Firmware
All versions
QualcommQcs404 Firmware
All versions
QualcommQcs405 Firmware
All versions
QualcommQcs610 Firmware
All versions
QualcommRennell Firmware
All versions
QualcommSa6155p Firmware
All versions
QualcommSa8155p Firmware
All versions
QualcommSaipan Firmware
All versions
QualcommSc8180x Firmware
All versions
QualcommSdm660 Firmware
All versions
QualcommSdx55 Firmware
All versions

Weakness classification

References