VULNERABILITY INTELLIGENCE

CVE-2020-11148

CVSS score6.7 MEDIUM
EPSS probability0.21%
CISA KEVNot currently listed
Published2021-01-21
Last modified2026-06-17
CVSS vectorCVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H

Description

Use after free issue in HIDL while using callback to post event in Rx thread when internal mutex is not acquired and meantime close is triggered and callback instance is deleted in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Wearables

Weakness classification

  • nvd@nist.gov: CWE-416

Primary references