{"id":"CVE-2020-11295","aliases":["EUVD-2020-3649","GHSA-r9hm-8rh2-3p4q"],"status":"published","title":"Use after free in camera If the threadmanager is being cleaned up while the worker thread is...","description":"Use after free in camera If the threadmanager is being cleaned up while the worker thread is processing objects in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile","severity":{"version":"3.1","score":6.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:L","level":"medium","assessor":"cna","from":"cve"},"epss":{"day":"2026-11-09","score":0.00146,"percentile":0.03864,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":false},"cwes":["CWE-416"],"published":"2021-05-07T09:10:38Z","modified":"2026-06-17T02:50:03Z","products":[{"vendor":"qualcomm","product":"fsm10055_firmware"},{"vendor":"qualcomm","product":"fsm10056_firmware"},{"vendor":"qualcomm","product":"pm3003a_firmware"},{"vendor":"qualcomm","product":"pm6125_firmware"},{"vendor":"qualcomm","product":"pm6150_firmware"},{"vendor":"qualcomm","product":"pm6150a_firmware"},{"vendor":"qualcomm","product":"pm6150l_firmware"},{"vendor":"qualcomm","product":"pm6350_firmware"},{"vendor":"qualcomm","product":"pm660_firmware"},{"vendor":"qualcomm","product":"pm660l_firmware"},{"vendor":"qualcomm","product":"pm7250b_firmware"},{"vendor":"qualcomm","product":"pm8008_firmware"},{"vendor":"qualcomm","product":"pm8009_firmware"},{"vendor":"qualcomm","product":"pm8150a_firmware"},{"vendor":"qualcomm","product":"pm8150b_firmware"},{"vendor":"qualcomm","product":"pm8150c_firmware"},{"vendor":"qualcomm","product":"pm8150l_firmware"},{"vendor":"qualcomm","product":"pm8250_firmware"},{"vendor":"qualcomm","product":"pm8350_firmware"},{"vendor":"qualcomm","product":"pm8350b_firmware"},{"vendor":"qualcomm","product":"pm8350bh_firmware"},{"vendor":"qualcomm","product":"pm8350c_firmware"},{"vendor":"qualcomm","product":"pmi632_firmware"},{"vendor":"qualcomm","product":"pmk8002_firmware"},{"vendor":"qualcomm","product":"pmk8003_firmware"},{"vendor":"qualcomm","product":"pmk8350_firmware"},{"vendor":"qualcomm","product":"pmm6155au_firmware"},{"vendor":"qualcomm","product":"pmm8155au_firmware"},{"vendor":"qualcomm","product":"pmm8195au_firmware"},{"vendor":"qualcomm","product":"pmm855au_firmware"},{"vendor":"qualcomm","product":"pmr525_firmware"},{"vendor":"qualcomm","product":"pmr735a_firmware"},{"vendor":"qualcomm","product":"pmr735b_firmware"},{"vendor":"qualcomm","product":"pmx55_firmware"},{"vendor":"qualcomm","product":"qat3516_firmware"},{"vendor":"qualcomm","product":"qat3518_firmware"},{"vendor":"qualcomm","product":"qat3519_firmware"},{"vendor":"qualcomm","product":"qat3555_firmware"},{"vendor":"qualcomm","product":"qat5515_firmware"},{"vendor":"qualcomm","product":"qat5516_firmware"},{"vendor":"qualcomm","product":"qat5522_firmware"},{"vendor":"qualcomm","product":"qat5568_firmware"},{"vendor":"qualcomm","product":"qbt1500_firmware"},{"vendor":"qualcomm","product":"qbt2000_firmware"},{"vendor":"qualcomm","product":"qca6390_firmware"},{"vendor":"qualcomm","product":"qca6391_firmware"},{"vendor":"qualcomm","product":"qca6421_firmware"},{"vendor":"qualcomm","product":"qca6426_firmware"},{"vendor":"qualcomm","product":"qca6431_firmware"},{"vendor":"qualcomm","product":"qca6436_firmware"},{"vendor":"qualcomm","product":"qca6564a_firmware"},{"vendor":"qualcomm","product":"qca6564au_firmware"},{"vendor":"qualcomm","product":"qca6574_firmware"},{"vendor":"qualcomm","product":"qca6574a_firmware"},{"vendor":"qualcomm","product":"qca6574au_firmware"},{"vendor":"qualcomm","product":"qca6595_firmware"},{"vendor":"qualcomm","product":"qca6595au_firmware"},{"vendor":"qualcomm","product":"qca6696_firmware"},{"vendor":"qualcomm","product":"qcm4290_firmware"},{"vendor":"qualcomm","product":"qcs410_firmware"},{"vendor":"qualcomm","product":"qcs4290_firmware"},{"vendor":"qualcomm","product":"qcs610_firmware"},{"vendor":"qualcomm","product":"qdm3301_firmware"},{"vendor":"qualcomm","product":"qdm4643_firmware"},{"vendor":"qualcomm","product":"qdm4650_firmware"},{"vendor":"qualcomm","product":"qdm5620_firmware"},{"vendor":"qualcomm","product":"qdm5621_firmware"},{"vendor":"qualcomm","product":"qdm5670_firmware"},{"vendor":"qualcomm","product":"qdm5671_firmware"},{"vendor":"qualcomm","product":"qet5100_firmware"},{"vendor":"qualcomm","product":"qet5100m_firmware"},{"vendor":"qualcomm","product":"qet6100_firmware"},{"vendor":"qualcomm","product":"qet6105_firmware"},{"vendor":"qualcomm","product":"qet6110_firmware"},{"vendor":"qualcomm","product":"qfs2530_firmware"},{"vendor":"qualcomm","product":"qfs2580_firmware"},{"vendor":"qualcomm","product":"qfs2608_firmware"},{"vendor":"qualcomm","product":"qfs2630_firmware"},{"vendor":"qualcomm","product":"qln4642_firmware"},{"vendor":"qualcomm","product":"qln4650_firmware"},{"vendor":"qualcomm","product":"qln5020_firmware"},{"vendor":"qualcomm","product":"qln5030_firmware"},{"vendor":"qualcomm","product":"qln5040_firmware"},{"vendor":"qualcomm","product":"qpa2625_firmware"},{"vendor":"qualcomm","product":"qpa5461_firmware"},{"vendor":"qualcomm","product":"qpa5580_firmware"},{"vendor":"qualcomm","product":"qpa5581_firmware"},{"vendor":"qualcomm","product":"qpa8801_firmware"},{"vendor":"qualcomm","product":"qpa8802_firmware"},{"vendor":"qualcomm","product":"qpa8803_firmware"},{"vendor":"qualcomm","product":"qpa8821_firmware"},{"vendor":"qualcomm","product":"qpa8842_firmware"},{"vendor":"qualcomm","product":"qpm4621_firmware"},{"vendor":"qualcomm","product":"qpm4630_firmware"},{"vendor":"qualcomm","product":"qpm4640_firmware"},{"vendor":"qualcomm","product":"qpm4641_firmware"},{"vendor":"qualcomm","product":"qpm4650_firmware"},{"vendor":"qualcomm","product":"qpm5621_firmware"},{"vendor":"qualcomm","product":"qpm5641_firmware"},{"vendor":"qualcomm","product":"qpm5670_firmware"},{"vendor":"qualcomm","product":"qpm5677_firmware"},{"vendor":"qualcomm","product":"qpm5679_firmware"},{"vendor":"qualcomm","product":"qpm5870_firmware"},{"vendor":"qualcomm","product":"qpm5875_firmware"},{"vendor":"qualcomm","product":"qpm6585_firmware"},{"vendor":"qualcomm","product":"qpm6621_firmware"},{"vendor":"qualcomm","product":"qpm6670_firmware"},{"vendor":"qualcomm","product":"qpm8820_firmware"},{"vendor":"qualcomm","product":"qpm8870_firmware"},{"vendor":"qualcomm","product":"qtc800h_firmware"},{"vendor":"qualcomm","product":"qtc800s_firmware"},{"vendor":"qualcomm","product":"qtc801s_firmware"},{"vendor":"qualcomm","product":"qtm525_firmware"},{"vendor":"qualcomm","product":"sa6145p_firmware"},{"vendor":"qualcomm","product":"sa6150p_firmware"},{"vendor":"qualcomm","product":"sa6155_firmware"},{"vendor":"qualcomm","product":"sa6155p_firmware"},{"vendor":"qualcomm","product":"sa8150p_firmware"},{"vendor":"qualcomm","product":"sa8155_firmware"},{"vendor":"qualcomm","product":"sa8155p_firmware"},{"vendor":"qualcomm","product":"sa8195p_firmware"},{"vendor":"qualcomm","product":"sd460_firmware"},{"vendor":"qualcomm","product":"sd480_firmware"},{"vendor":"qualcomm","product":"sd662_firmware"},{"vendor":"qualcomm","product":"sd670_firmware"},{"vendor":"qualcomm","product":"sd710_firmware"},{"vendor":"qualcomm","product":"sd8655g_firmware"},{"vendor":"qualcomm","product":"sd870_firmware"},{"vendor":"qualcomm","product":"sd8885g_firmware"},{"vendor":"qualcomm","product":"sd888_firmware"},{"vendor":"qualcomm","product":"sdr425_firmware"},{"vendor":"qualcomm","product":"sdr660_firmware"},{"vendor":"qualcomm","product":"sdr660g_firmware"},{"vendor":"qualcomm","product":"sdr735_firmware"},{"vendor":"qualcomm","product":"sdr735g_firmware"},{"vendor":"qualcomm","product":"sdr8250_firmware"},{"vendor":"qualcomm","product":"sdr865_firmware"},{"vendor":"qualcomm","product":"sdx55m_firmware"},{"vendor":"qualcomm","product":"sdxr1_firmware"},{"vendor":"qualcomm","product":"sdxr25g_firmware"},{"vendor":"qualcomm","product":"smb1351_firmware"},{"vendor":"qualcomm","product":"smb1354_firmware"},{"vendor":"qualcomm","product":"smb1355_firmware"},{"vendor":"qualcomm","product":"smb1390_firmware"},{"vendor":"qualcomm","product":"smb1396_firmware"},{"vendor":"qualcomm","product":"smb1398_firmware"},{"vendor":"qualcomm","product":"smr525_firmware"},{"vendor":"qualcomm","product":"smr526_firmware"},{"vendor":"qualcomm","product":"smr545_firmware"},{"vendor":"qualcomm","product":"smr546_firmware"},{"vendor":"qualcomm","product":"wcd9326_firmware"},{"vendor":"qualcomm","product":"wcd9341_firmware"},{"vendor":"qualcomm","product":"wcd9370_firmware"},{"vendor":"qualcomm","product":"wcd9375_firmware"},{"vendor":"qualcomm","product":"wcd9380_firmware"},{"vendor":"qualcomm","product":"wcd9385_firmware"},{"vendor":"qualcomm","product":"wcn3950_firmware"},{"vendor":"qualcomm","product":"wcn3980_firmware"},{"vendor":"qualcomm","product":"wcn3988_firmware"},{"vendor":"qualcomm","product":"wcn3990_firmware"},{"vendor":"qualcomm","product":"wcn3991_firmware"},{"vendor":"qualcomm","product":"wcn6750_firmware"},{"vendor":"qualcomm","product":"wcn6850_firmware"},{"vendor":"qualcomm","product":"wcn6851_firmware"},{"vendor":"qualcomm","product":"wcn6855_firmware"},{"vendor":"qualcomm","product":"wcn6856_firmware"},{"vendor":"qualcomm","product":"wgr7640_firmware"},{"vendor":"qualcomm","product":"wsa8810_firmware"},{"vendor":"qualcomm","product":"wsa8815_firmware"},{"vendor":"qualcomm","product":"wsa8830_firmware"},{"vendor":"qualcomm","product":"wsa8835_firmware"},{"vendor":"qualcomm","product":"wtr2965_firmware"},{"vendor":"qualcomm","product":"wtr3925_firmware"},{"vendor":"qualcomm, inc.","product":"snapdragon auto, snapdragon compute, snapdragon connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon mobile"}],"references":[{"url":"https://www.qualcomm.com/company/product-security/bulletins/may-2021-bulletin","tags":["x_refsource_CONFIRM","x_transferred","Vendor Advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2020-11295"},{"url":"https://github.com/advisories/GHSA-r9hm-8rh2-3p4q"}],"sources":{"cve":[{"id":"CVE-2020-11295","description":"Use after free in camera If the threadmanager is being cleaned up while the worker thread is processing objects in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile","status":"published","published":"2021-05-07T09:10:38Z","modified":"2024-08-04T11:28:14.142Z","cvss":[{"version":"3.1","score":6.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:L","level":"medium","assessor":"cna"}],"updated_at":"2026-11-02T14:35:57.67317Z"}],"euvd":[{"id":"EUVD-2020-3649","description":"Use after free in camera If the threadmanager is being cleaned up while the worker thread is processing objects in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile","status":"published","published":"2021-05-07T09:10:38Z","modified":"2024-08-04T11:28:14Z","cvss":[{"version":"3.1","score":6.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:L","level":"medium"}],"updated_at":"2026-11-03T03:07:46.270701Z"}],"ghsa":[{"id":"GHSA-r9hm-8rh2-3p4q","title":"Use after free in camera If the threadmanager is being cleaned up while the worker thread is...","description":"Use after free in camera If the threadmanager is being cleaned up while the worker thread is processing objects in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile","status":"published","published":"2022-05-24T19:01:48Z","modified":"2023-01-29T05:07:34Z","cwes":["CWE-416"],"updated_at":"2026-11-02T14:46:10.663769Z"}],"nvd":[{"id":"CVE-2020-11295","description":"Use after free in camera If the threadmanager is being cleaned up while the worker thread is processing objects in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile","status":"published","published":"2021-05-07T09:15:08.12Z","modified":"2026-06-17T02:50:03.33Z","cvss":[{"version":"3.1","score":6.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:L","level":"medium","assessor":"secondary"},{"version":"3.1","score":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","level":"high","assessor":"primary"},{"version":"2.0","score":4.6,"vector":"AV:L/AC:L/Au:N/C:P/I:P/A:P","level":"medium","assessor":"primary"}],"cwes":["CWE-416"],"updated_at":"2026-11-02T14:06:39.25999Z"}]}}