CVE-2020-11239 – Use after free issue when importing a DMA buffer by using the CPU address

5 years ago

Use after free issue when importing a DMA buffer by using the CPU address of the buffer due to attachment is not cleaned up properly in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables

Source: https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-11239

Reference (s):

https://www.qualcomm.com/company/product-security/bulletins/january-2021-bulletin
URL: https://www.qualcomm.com/company/product-security/bulletins/january-2021-bulletin