CVE-2020-11160

Resource leakage issue during dci client registration due to reference count is not decremented...

6.7 Medium

Resource leakage issue during dci client registration due to reference count is not decremented if dci client registration fails in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables

Attack profile

How easy it is to exploit

Attack vector: Local
Complexity: Low
Privileges needed: High
User interaction: None

What an attacker can affect

Confidentiality: High
Integrity: High
Availability: High

Exploit likelihood

0.15%Down 0.3 points since Jun 9, 2021

What each source reports

NVD Score used 6.7

Record: CVE-2020-11160
CVSS 3.1: 6.7 MediumCVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H
CVSS 2.0: 4.6 MediumAV:L/AC:L/Au:N/C:P/I:P/A:P
Weakness: CWE-190
Updated: 2026-11-02

CVE List No score

Record: CVE-2020-11160
Updated: 2026-11-02

EUVDEUVD-2020-3514 No score

Record: EUVD-2020-3514
Updated: 2026-11-03

GitHub AdvisoriesGHSA-37g9-8cjr-x358 No score

Resource leakage issue during dci client registration due to reference count is not decremented...

Record: GHSA-37g9-8cjr-x358
Weakness: CWE-190
Updated: 2026-11-02

Affected products

Show 134 moreShow less

History

History
Recorded	Changed	Sources
Nov 3, 2026	aliases	EUVD
Nov 2, 2026	first indexed	CVE List, GitHub Advisories, NVD

Dates are when Every CVE recorded each change. Upstream dates may differ.

In short

CVE-2020-11160 is a medium vulnerability (CVSS 6.7) in Qualcomm, Inc. Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer Iot, Snapdragon Industrial Iot, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables, published June 9, 2021. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 0.15%, the 4th percentile. No source names a fixed version.