CVE-2020-11129

HighCVSS 7.8/10Last modified Jun 17, 2026

Description

u'During the error occurrence in capture request, the buffer is freed and later accessed causing the camera APP to fail due to memory use-after-free' in Snapdragon Consumer IOT, Snapdragon Mobile in Bitra, Kamorta, QCS605, Saipan, SDM710, SM8250, SXR2130

Metrics

CVSS 3.1 7.8/10CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Weakness enumeration

CWE-416

Affected software

Vendor	Product	Versions
Qualcomm, Inc.	Snapdragon Consumer IOT, Snapdragon Mobile	Bitra, Kamorta, QCS605, Saipan, SDM710, SM8250, SXR2130

References

https://www.qualcomm.com/company/product-security/bulletins/september-2020-bulletinVendor Advisory
https://www.qualcomm.com/company/product-security/bulletins/september-2020-bulletinVendor Advisory

Timeline

Published: Sep 9, 2020
Last modified: Jun 17, 2026
NVD status: Modified

Related CVEs from 2020

CVE-2020-11135.3A security feature bypass vulnerability exists in Microsoft Windows when the Task Scheduler service fails to properly verify client connecti CVE-2020-111307.8u'Possible buffer overflow in WIFI hal process due to copying data without checking the buffer length' in Snapdragon Auto, Snapdragon Comput CVE-2020-111317.8u'Possible buffer overflow in WMA message processing due to integer overflow occurs when processing command received from user space' in Sna CVE-2020-111327.1u'Buffer over read in boot due to size check ignored before copying GUID attribute from request to response' in Snapdragon Auto, Snapdragon CVE-2020-111337.8u'Possible out of bound array write in rxdco cal utility due to lack of array bound check' in Snapdragon Compute, Snapdragon Consumer IOT, S CVE-2020-111349.8Possible stack out of bound write might happen due to time bitmap length and bit duration fields of the attributes like NAN ranging setup at CVE-2020-111357.5u'Reachable assertion when wrong data size is returned by parser for ape clips' in Snapdragon Auto, Snapdragon Consumer IOT, Snapdragon Indu CVE-2020-111369.8Buffer Over-read in audio driver while using malloc management function due to not returning NULL for zero sized memory requirement in Snapd CVE-2020-111379.8Integer multiplication overflow resulting in lower buffer size allocation than expected causes memory access out of bounds resulting in poss CVE-2020-111389.8Uninitialized pointers accessed during music play back with incorrect bit stream due to an uninitialized heap memory result in instability i CVE-2020-111397.5Out of bound memory access while processing frames due to lack of check of invalid frames received in Snapdragon Auto, Snapdragon Compute, S CVE-2020-11147.8An elevation of privilege vulnerability exists when the Windows kernel fails to properly handle objects in memory. An attacker who successfu