VulnerabilityModified
CVE-2020-11147
Use after free issue in audio modules while removing and freeing objects during list iteration due to incorrect usage of macro in Snapdragon Compute, Snapdragon Industrial IOT, Snapdragon Mobile
MEDIUM 6.7EPSS 0.15%
Does this matter?
Lower severity and a low EPSS score (0.15%). Track it; it rarely justifies an emergency change on its own.
Description
Use after free issue in audio modules while removing and freeing objects during list iteration due to incorrect usage of macro in Snapdragon Compute, Snapdragon Industrial IOT, Snapdragon Mobile
- CVSS 3.1
- 6.7 MEDIUMCVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H
- EPSS
- 0.15% probability · 5th percentile
- CISA KEV
- Not listed
- Weakness
- CWE-416
- Affected
- qualcomm/aqt1000 firmware · qualcomm/pm3003a firmware · qualcomm/pm456 firmware · qualcomm/pm6125 firmware · qualcomm/pm6150 firmware · qualcomm/pm6150a firmware · qualcomm/pm6150l firmware · qualcomm/pm6250 firmware · qualcomm/pm6350 firmware · qualcomm/pm660 firmware · qualcomm/pm660a firmware · qualcomm/pm660l firmware · qualcomm/pm7150a firmware · qualcomm/pm7150l firmware · qualcomm/pm7250 firmware · qualcomm/pm7250b firmware · qualcomm/pm7350c firmware · qualcomm/pm8004 firmware · qualcomm/pm8008 firmware · qualcomm/pm8009 firmware · +40 more
- Source
- product-security@qualcomm.com
References
Source: NVD record, EPSS from FIRST.org, KEV from CISA. Refreshed daily.