CVE-2020-11260

HIGH

Qualcomm APQ8017 Firmware - Use-After-Free in DIAG Services

Title source: llm

An improper free of uninitialized memory can occur in DIAG services in Snapdragon Compute, Snapdragon Industrial IOT, Snapdragon Mobile

Core 1

Core References

Vendor Advisory x_refsource_confirm

CVSS v3 8.4

EPSS 0.0004

EPSS Percentile 10.9%

Attack Vector LOCAL

CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

CWE

CWE-908

Status published

Products (50)

qualcomm/apq8017_firmware

qualcomm/apq8053_firmware

qualcomm/aqt1000_firmware

qualcomm/msm8917_firmware

qualcomm/msm8953_firmware

qualcomm/pm215_firmware

qualcomm/pm3003a_firmware

qualcomm/pm4125_firmware

qualcomm/pm439_firmware

qualcomm/pm456_firmware

... and 40 more

Published Jun 09, 2021

Tracked Since Feb 18, 2026