NetSight
high8.4

CVE-2020-11234

When sending a socket event message to a user application, invalid information will be passed if socket is freed by other thread resulting in a Use After Free …

Impact

When sending a socket event message to a user application, invalid information will be passed if socket is freed by other thread resulting in a Use After Free condition in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables

Affected products

VendorProductAffected versions
QualcommApq8009 Firmware
All versions
QualcommApq8009w Firmware
All versions
QualcommApq8017 Firmware
All versions
QualcommApq8053 Firmware
All versions
QualcommApq8064au Firmware
All versions
QualcommApq8096au Firmware
All versions
QualcommAqt1000 Firmware
All versions
QualcommAr8031 Firmware
All versions
QualcommAr8035 Firmware
All versions
QualcommAr8151 Firmware
All versions
QualcommCsr6030 Firmware
All versions
QualcommCsra6620 Firmware
All versions

Weakness classification

References