What is CVE-2020-11124?

CVE-2020-11124 is a high-severity vulnerability in Qualcomm Mdm9607, classified under Use After Free. CVSS score: 7.8/10. Published 2020-09-09.

How severe is CVE-2020-11124?

High severity. CVSS v3 base score is 7.8 out of 10.

Is CVE-2020-11124 known to be exploited?

1 public proof-of-concept repositories are indexed. Not currently listed in the CISA KEV catalog.

Use After Free in Qualcomm Mdm9607

CVE-2020-11124

u'Possible use-after-free while accessing diag client map table since list can be reallocated due to exceeding max client limit.' in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music in MDM9607, Nicobar, QCS404, QCS405, QCS610, Rennell, SA6155P, SA8155P, Saipan, SC8180X, SDM660, SDX55, SM6150, SM7150, SM8150, SM8250, SXR2130

Vulnerability class: Use-After-Free

EPSS: 0.002 (13.6th percentile) — read the EPSS interpretation.

CVSS v3 metric

CVSS v3 base score 7.8 (High). Vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H.

Affected products

Weakness classification (CWE)

CWE-416 — Use After Free

Public proof-of-concept exploits

404notf0und/CVE-Flow

References

product-security@qualcomm.com (x_refsource_CONFIRM, Patch, Vendor Advisory)

Frequently asked questions

What is CVE-2020-11124?: CVE-2020-11124 is a high-severity vulnerability in Qualcomm Mdm9607, classified under Use After Free. CVSS score: 7.8/10. Published 2020-09-09.
How severe is CVE-2020-11124?: High severity. CVSS v3 base score is 7.8 out of 10.
Is CVE-2020-11124 known to be exploited?: 1 public proof-of-concept repositories are indexed. Not currently listed in the CISA KEV catalog.