CVE-2020-11234

HighCVSS 7.8/10Last modified Jun 17, 2026

Description

When sending a socket event message to a user application, invalid information will be passed if socket is freed by other thread resulting in a Use After Free condition in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables

Metrics

CVSS 3.1 7.8/10CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Weakness enumeration

CWE-416

Affected software

No affected versions have been published.

Timeline

Published
Apr 7, 2021
Last modified
Jun 17, 2026
NVD status
Modified

Related CVEs from 2020

CVE-2020-112357.8Buffer overflow might occur while parsing unified command due to lack of check of input data received in Snapdragon Auto, Snapdragon ComputeCVE-2020-112365.5Memory corruption due to invalid value of total dimension in the non-histogram type KPI could lead to a denial of service in Snapdragon AutoCVE-2020-112377.8Memory crash when accessing histogram type KPI input received due to lack of check of histogram definition before accessing it in SnapdragonCVE-2020-112387.5Possible Buffer over-read in ARP/NS parsing due to lack of check of packet length received in Snapdragon Auto, Snapdragon Compute, SnapdragoCVE-2020-112397.8Use after free issue when importing a DMA buffer by using the CPU address of the buffer due to attachment is not cleaned up properly in SnapCVE-2020-11247.8An elevation of privilege vulnerability exists when the Windows State Repository Service improperly handles objects in memory. An attacker wCVE-2020-112407.8Memory corruption due to ioctl command size was incorrectly set to the size of a pointer and not enough storage is allocated for the copy ofCVE-2020-112417.5Out of bound read will happen if EAPOL Key length is less than expected while processing NAN shared key descriptor attribute in Snapdragon ACVE-2020-112427.8User could gain access to secure memory due to incorrect argument into address range validation api used in SDI to capture requested contentCVE-2020-112437.5RRC sends a connection establishment success to NAS even though connection setup validation returns failure and leads to denial of service iCVE-2020-112457.8Unintended reads and writes by NS EL2 in access control driver due to lack of check of input validation in Snapdragon Auto, Snapdragon CompuCVE-2020-112467.8A double free condition can occur when the device moves to suspend mode during secure playback in Snapdragon Auto, Snapdragon Compute, Snapd