VulnerabilityModified
CVE-2020-11160
Resource leakage issue during dci client registration due to reference count is not decremented if dci client registration fails in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon…
MEDIUM 6.7EPSS 0.15%
Does this matter?
Lower severity and a low EPSS score (0.15%). Track it; it rarely justifies an emergency change on its own.
Description
Resource leakage issue during dci client registration due to reference count is not decremented if dci client registration fails in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables
- CVSS 3.1
- 6.7 MEDIUMCVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H
- EPSS
- 0.15% probability · 4th percentile
- CISA KEV
- Not listed
- Weakness
- CWE-190
- Affected
- qualcomm/apq8096au firmware · qualcomm/aqt1000 firmware · qualcomm/ar8031 firmware · qualcomm/ar8035 firmware · qualcomm/csra6620 firmware · qualcomm/csra6640 firmware · qualcomm/mdm9650 firmware · qualcomm/pm215 firmware · qualcomm/pm3003a firmware · qualcomm/pm6125 firmware · qualcomm/pm6150 firmware · qualcomm/pm6150l firmware · qualcomm/pm640a firmware · qualcomm/pm640l firmware · qualcomm/pm640p firmware · qualcomm/pm8008 firmware · qualcomm/pm8009 firmware · qualcomm/pm8150 firmware · qualcomm/pm8150a firmware · qualcomm/pm8150b firmware · +40 more
- Source
- product-security@qualcomm.com
References
- https://www.qualcomm.com/company/product-security/bulletins/january-2021-bulletinPatch, Vendor Advisory
- https://www.qualcomm.com/company/product-security/bulletins/january-2021-bulletinPatch, Vendor Advisory
Source: NVD record, EPSS from FIRST.org, KEV from CISA. Refreshed daily.