CVE-2020-11120: Qualcomm APQ8096AU Firmware

High severity, CVSS 7.8. EPSS: 0.2% chance of exploitation in the next 30 days.

u'Calling thread may free the data buffer pointer that was passed to the callback and later when event loop executes the callback, data buffer may not be valid and will lead to use after free scenario' in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables in APQ8096AU, APQ8098, Bitra, Kamorta, MSM8917, MSM8953, MSM8998, QCM2150, QCS405, QCS605, QM215, Rennell, Saipan, SDM429, SDM439, SDM450, SDM632, SM6150, SM7150, SM8150, SM8250, SXR2130

Affected products

Qualcomm APQ8096AU Firmware: affected versions not specified
Qualcomm APQ8098 Firmware: affected versions not specified
Qualcomm Bitra Firmware: affected versions not specified
Qualcomm Kamorta Firmware: affected versions not specified
Qualcomm MSM8917 Firmware: affected versions not specified
Qualcomm MSM8953 Firmware: affected versions not specified
Qualcomm MSM8998 Firmware: affected versions not specified
Qualcomm QCM2150 Firmware: affected versions not specified
Qualcomm QCS405 Firmware: affected versions not specified
Qualcomm QCS605 Firmware: affected versions not specified
Qualcomm QM215 Firmware: affected versions not specified
Qualcomm Rennell Firmware: affected versions not specified
Qualcomm Saipan Firmware: affected versions not specified
Qualcomm SDM429 Firmware: affected versions not specified
Qualcomm SDM439 Firmware: affected versions not specified
Qualcomm SDM450 Firmware: affected versions not specified
Qualcomm SDM632 Firmware: affected versions not specified
Qualcomm SM6150 Firmware: affected versions not specified
Qualcomm SM7150 Firmware: affected versions not specified
Qualcomm SM8150 Firmware: affected versions not specified
Qualcomm SM8250 Firmware: affected versions not specified
Qualcomm SXR2130 Firmware: affected versions not specified

Published 2020-09-08. Last modified 2026-06-17.