Vulnerability record · CVE-2020-11151 · published 21 January 2021

CVE-2020-11151: Qualcomm pm3003a race condition vulnerability

Qualcomm · Pm3003a

Race condition occurs while calling user space ioctl from two different threads can results to use after free issue in video in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Wearables

6.4 CVSS 3.1 Medium EPSS 0.13% · top 97.7% CWE-362 · Race conditionCWE-416 · Use after free

6.4CVSS 3.1 base score, v2 6.9

0.13%EPSS exploitation probability, 30 days

NoNot in CISA KEV

150Affected product versions listed by NVD

3References

17 Jun 2026Last modified by NVD

Description

CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H

Affected products

150 vulnerable configurations from NVD's CPE data, grouped by vendor and product.

Pm3003a Qualcomm

Pm6125 Qualcomm

Pm6150 Qualcomm

Pm6150a Qualcomm

Pm6150l Qualcomm

Pm6350 Qualcomm

Pm640a Qualcomm

Pm640l Qualcomm

Pm640p Qualcomm

Pm7150a Qualcomm

Pm7150l Qualcomm

Pm7250 Qualcomm

Pm7250b Qualcomm

Pm8008 Qualcomm

Pm8009 Qualcomm

Pm8150a Qualcomm

Pm8150b Qualcomm

Pm8150c Qualcomm

Pm8150l Qualcomm

Pm8250 Qualcomm

Pmi632 Qualcomm

Pmk8002 Qualcomm

Pmk8003 Qualcomm

Pmm8195au Qualcomm

Pmm855au Qualcomm

Pmr525 Qualcomm

Pmr735a Qualcomm

Pmr735b Qualcomm

Pmx55 Qualcomm

Qat3516 Qualcomm

Qat3518 Qualcomm

Qat3519 Qualcomm

Qat3522 Qualcomm

Qat3550 Qualcomm

Qat3555 Qualcomm

Qat5515 Qualcomm

Qat5516 Qualcomm

Qat5522 Qualcomm

Qat5533 Qualcomm

Qbt1500 Qualcomm

Qbt2000 Qualcomm

Qca6390 Qualcomm

Qca6391 Qualcomm

Qca6421 Qualcomm

Qca6426 Qualcomm

Qca6431 Qualcomm

Qca6436 Qualcomm

Qca6574a Qualcomm

Qca6574au Qualcomm

Qca6584au Qualcomm

Qca6595 Qualcomm

Qca6595au Qualcomm

Qca6696 Qualcomm

Qcm4290 Qualcomm

Qcs4290 Qualcomm

Qdm2301 Qualcomm

Qdm2305 Qualcomm

Qdm2307 Qualcomm

Qdm2308 Qualcomm

Qdm2310 Qualcomm

Qdm3301 Qualcomm

Qdm5620 Qualcomm

Qdm5621 Qualcomm

Qdm5650 Qualcomm

Qdm5652 Qualcomm

Qdm5670 Qualcomm

Qdm5671 Qualcomm

Qdm5677 Qualcomm

Qdm5679 Qualcomm

Qet4101 Qualcomm

Qet5100 Qualcomm

Qet6100 Qualcomm

Qet6110 Qualcomm

Qfs2530 Qualcomm

Qfs2580 Qualcomm

Qln4642 Qualcomm

Qln4650 Qualcomm

Qln5020 Qualcomm

Qln5030 Qualcomm

Qln5040 Qualcomm

References

Link	Tags
https://www.qualcomm.com/company/product-security/bulletins/december-2020-bulletin	Broken Link
https://www.qualcomm.com/company/product-security/bulletins/december-2020-security-bulletin	PatchVendor Advisory
https://www.qualcomm.com/company/product-security/bulletins/december-2020-bulletin	Broken Link

Track CVE-2020-11151 inside VULONE

Watch it alongside the ransomware crews, C2 infrastructure and forum chatter that reference it, query it through the API and pull it into your SIEM over TAXII.

Start free Open in platform

Related vulnerabilities

Same products first, then exploited flaws of the same weakness class.

9.8CVE-2020-11283Qualcomm apq8009 out-of-bounds write vulnerabilityA buffer overflow can occur when playing an MKV clip due to lack of input validation in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity,…EPSS 0.71%22 Feb 2021 9.8CVE-2020-3691Qualcomm apq8009 vulnerabilityPossible out of bound memory access in audio due to integer underflow while processing modified contents in Snapdragon Auto, Snapdragon Compute, Snap…EPSS 1.1%21 Jan 2021 9.8CVE-2020-3686Qualcomm apq8009 classic buffer overflow vulnerabilityPossible memory out of bound issue during music playback when an incorrect bit stream content is copied into array without checking the length of arr…EPSS 1.2%21 Jan 2021 9.8CVE-2020-11212Qualcomm apq8009 out-of-bounds read vulnerabilityOut of bounds reads while parsing NAN beacons attributes and OUIs due to improper length of field check in Snapdragon Auto, Snapdragon Compute, Snapd…EPSS 0.87%21 Jan 2021 9.8CVE-2020-11197Qualcomm apq8009 integer overflow vulnerabilityPossible integer overflow can occur when stream info update is called when total number of streams detected are zero while parsing TS clip with inval…EPSS 0.91%21 Jan 2021 9.8CVE-2020-11213Qualcomm apq8009 out-of-bounds read vulnerabilityOut of bound reads might occur in while processing Service descriptor due to improper validation of length of fields in Snapdragon Auto, Snapdragon C…EPSS 0.87%21 Jan 2021 9.8CVE-2020-11225Qualcomm apq8064au classic buffer overflow vulnerabilityOut of bound access in WLAN driver due to lack of validation of array length before copying into array in Snapdragon Auto, Snapdragon Compute, Snapdr…EPSS 1.1%21 Jan 2021 9.8CVE-2020-11167Qualcomm apq8009w integer overflow vulnerabilityMemory corruption while calculating L2CAP packet length in reassembly logic when remote sends more data than expected in Snapdragon Auto, Snapdragon …EPSS 1.2%21 Jan 2021

Source: NIST National Vulnerability Database (record CVE-2020-11151), CISA KEV, FIRST EPSS (scores of 2026-10-05). This page is refreshed as NVD updates the record.