Use After Free in Qualcomm products - CVE-2020-11175
Published: July 7, 2025
Vulnerability identifier: #VU112419
CSH Severity: Low
CVSS v4: 8.5 [CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N]
CVE-ID: CVE-2020-11175
CWE-ID: CWE-416
Exploitation vector: Local access
Exploit availability:
No public exploit available
Vulnerability details
The vulnerability allows a local application to execute arbitrary code.
The vulnerability exists due to improper input validation in Bluetooth Host. A local application can execute arbitrary code.
Affected software
SDM845
SXR2130
SXR1130
SM8250
SM8150
SDX55
SDM710
SDM670
SA6155P
QM215
QCS605
MSM8909W
SXR2130P
SXR1120
SM8150P
SM7250P
SM7250
SM7225
SM6350
SM6125
SDX55M
SDX50M
APQ8009W
SDM640
SDM1000
SDA855
SDA670
SDA640
SA8155P
SA8155
SA6155
SXR2130
SXR1130
SM8250
SM8150
SDX55
SDM710
SDM670
SA6155P
QM215
QCS605
MSM8909W
SXR2130P
SXR1120
SM8150P
SM7250P
SM7250
SM7225
SM6350
SM6125
SDX55M
SDX50M
APQ8009W
SDM640
SDM1000
SDA855
SDA670
SDA640
SA8155P
SA8155
SA6155
How to mitigate CVE-2020-11175
Install security update from vendor's website.