Use after free issue in HIDL while using callback to post event in Rx thread when internal mutex is not acquired and meantime close is triggered and callback instance is deleted in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Wearables

Project Subscriptions

Vendors Products
Qualcomm Subscribe
Apq8017 Subscribe
Apq8053 Subscribe
Msm8917 Subscribe
Msm8953 Subscribe
Pm3003a Subscribe
Pm6150a Subscribe
Pm6150l Subscribe
Pm7150a Subscribe
Pm7150l Subscribe
Pm7250b Subscribe
Pm7350c Subscribe
Pm8150a Subscribe
Pm8150b Subscribe
Pm8150c Subscribe
Pm8150l Subscribe
Pm8350b Subscribe
Pm8350bh Subscribe
Pm8350bhs Subscribe
Pm8350c Subscribe
Pmi8937 Subscribe
Pmi8952 Subscribe
Pmk7350 Subscribe
Pmk8002 Subscribe
Pmk8003 Subscribe
Pmk8350 Subscribe
Pmm8195au Subscribe
Pmm855au Subscribe
Pmr735a Subscribe
Pmr735b Subscribe
Qat3514 Subscribe
Qat3516 Subscribe
Qat3518 Subscribe
Qat3519 Subscribe
Qat3522 Subscribe
Qat3550 Subscribe
Qat3555 Subscribe
Qat5515 Subscribe
Qat5516 Subscribe
Qat5522 Subscribe
Qat5533 Subscribe
Qat5568 Subscribe
Qbt1500 Subscribe
Qbt2000 Subscribe
Qca6390 Subscribe
Qca6391 Subscribe
Qca6421 Subscribe
Qca6426 Subscribe
Qca6431 Subscribe
Qca6436 Subscribe
Qca6574a Subscribe
Qca6574au Subscribe
Qca6595 Subscribe
Qca6595au Subscribe
Qca6696 Subscribe
Qdm2301 Subscribe
Qdm2302 Subscribe
Qdm2305 Subscribe
Qdm2307 Subscribe
Qdm2308 Subscribe
Qdm2310 Subscribe
Qdm3301 Subscribe
Qdm3302 Subscribe
Qdm4643 Subscribe
Qdm4650 Subscribe
Qdm5579 Subscribe
Qdm5620 Subscribe
Qdm5621 Subscribe
Qdm5650 Subscribe
Qdm5652 Subscribe
Qdm5670 Subscribe
Qdm5671 Subscribe
Qdm5677 Subscribe
Qdm5679 Subscribe
Qet4101 Subscribe
Qet5100 Subscribe
Qet5100m Subscribe
Qet6100 Subscribe
Qet6110 Subscribe
Qfe2101 Subscribe
Qfe2520 Subscribe
Qfe2550 Subscribe
Qfe3340 Subscribe
Qfe4301 Subscribe
Qfe4302 Subscribe
Qfe4303 Subscribe
Qfe4305 Subscribe
Qfe4308 Subscribe
Qfe4309 Subscribe
Qfe4320 Subscribe
Qfe4373fc Subscribe
Qfs2530 Subscribe
Qfs2580 Subscribe
Qfs2608 Subscribe
Qfs2630 Subscribe
Qln4642 Subscribe
Qln4650 Subscribe
Qln5020 Subscribe
Qln5030 Subscribe
Qln5040 Subscribe
Qpa2625 Subscribe
Qpa4360 Subscribe
Qpa4361 Subscribe
Qpa5373 Subscribe
Qpa5461 Subscribe
Qpa5580 Subscribe
Qpa5581 Subscribe
Qpa6560 Subscribe
Qpa8673 Subscribe
Qpa8686 Subscribe
Qpa8801 Subscribe
Qpa8802 Subscribe
Qpa8803 Subscribe
Qpa8821 Subscribe
Qpa8842 Subscribe
Qpm4621 Subscribe
Qpm4630 Subscribe
Qpm4640 Subscribe
Qpm4641 Subscribe
Qpm4650 Subscribe
Qpm5621 Subscribe
Qpm5641 Subscribe
Qpm5658 Subscribe
Qpm5670 Subscribe
Qpm5677 Subscribe
Qpm5679 Subscribe
Qpm5870 Subscribe
Qpm5875 Subscribe
Qpm6582 Subscribe
Qpm6585 Subscribe
Qpm6621 Subscribe
Qpm6670 Subscribe
Qpm8820 Subscribe
Qpm8830 Subscribe
Qpm8870 Subscribe
Qpm8895 Subscribe
Qsm7250 Subscribe
Qsw6310 Subscribe
Qsw8573 Subscribe
Qsw8574 Subscribe
Qtc410s Subscribe
Qtc800h Subscribe
Qtc801s Subscribe
Qualcomm215 Subscribe
Sa6155p Subscribe
Sa8150p Subscribe
Sa8195p Subscribe
Sd6905g Subscribe
Sd8655g Subscribe
Sd8885g Subscribe
Sda429w Subscribe
Sdm429w Subscribe
Sdr660g Subscribe
Sdr735g Subscribe
Sdr8250 Subscribe
Sdxr25g Subscribe
Sm7250p Subscribe
Smb1351 Subscribe
Smb1355 Subscribe
Smb1358 Subscribe
Smb1360 Subscribe
Smb1381 Subscribe
Smb1390 Subscribe
Smb1394 Subscribe
Smb1395 Subscribe
Smb1396 Subscribe
Smb1398 Subscribe
Wcd9326 Subscribe
Wcd9341 Subscribe
Wcd9370 Subscribe
Wcd9375 Subscribe
Wcd9380 Subscribe
Wcd9385 Subscribe
Wcn3610 Subscribe
Wcn3615 Subscribe
Wcn3620 Subscribe
Wcn3660b Subscribe
Wcn3680 Subscribe
Wcn3680b Subscribe
Wcn3950 Subscribe
Wcn3980 Subscribe
Wcn3988 Subscribe
Wcn3990 Subscribe
Wcn3991 Subscribe
Wcn3998 Subscribe
Wcn6740 Subscribe
Wcn6850 Subscribe
Wcn6851 Subscribe
Wcn6856 Subscribe
Wgr7640 Subscribe
Wsa8810 Subscribe
Wsa8815 Subscribe
Wsa8830 Subscribe
Wsa8835 Subscribe
Wtr2955 Subscribe
Wtr2965 Subscribe
Wtr3925 Subscribe
Advisories
Source ID Title
EUVD EUVD EUVD-2020-3502 Use after free issue in HIDL while using callback to post event in Rx thread when internal mutex is not acquired and meantime close is triggered and callback instance is deleted in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Wearables
Fixes

Solution

No solution given by the vendor.


Workaround

No workaround given by the vendor.

History

No history.

Projects

Sign in to view the affected projects.

cve-icon MITRE

Status: PUBLISHED

Assigner: qualcomm

Published:

Updated: 2024-08-04T11:28:12.539Z

Reserved: 2020-03-31T00:00:00

Link: CVE-2020-11148

cve-icon Vulnrichment

No data.

cve-icon NVD

Status : Modified

Published: 2021-01-21T10:15:13.683

Modified: 2024-11-21T04:56:56.287

Link: CVE-2020-11148

cve-icon Redhat

No data.

cve-icon OpenCVE Enrichment

No data.

Weaknesses