CVEvulnerability
CVE-2020-11201
7.8 HIGH
Official page ↗
- Status
- Modified
- Published
- 2020-11-12
- Last modified
- 2026-06-17
- Assigner
- [email protected]
- CVSS 3.1 ([email protected])
- 7.8 HIGH — CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
- CVSS 2.0 ([email protected])
- 7.2 HIGH — AV:L/AC:L/Au:N/C:C/I:C/A:C
- Weaknesses
- CWE-20
Description
Arbitrary access to DSP memory due to improper check in loaded library for data received from CPU side' in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile in QCM6125, QCS410, QCS603, QCS605, QCS610, QCS6125, SA6145P, SA6155, SA6155P, SA8155, SA8155P, SDA640, SDA845, SDM640, SDM830, SDM845, SDX50M, SDX55, SDX55M, SM6125, SM6150, SM6250, SM6250P, SM7125, SM7150, SM7150P, SM8150, SM8150P
Affected configurations
• qualcomm qcm6125 firmware
• qualcomm qcs410 firmware
• qualcomm qcs603 firmware
• qualcomm qcs605 firmware
• qualcomm qcs610 firmware
• qualcomm qcs6125 firmware
• qualcomm sa6145p firmware
• qualcomm sa6155 firmware
• qualcomm sa6155p firmware
• qualcomm sa8155 firmware
• qualcomm sa8155p firmware
• qualcomm sda640 firmware
• qualcomm sda845 firmware
• qualcomm sdm640 firmware
• qualcomm sdm830 firmware
• qualcomm sdm845 firmware
• qualcomm sdx50m firmware
• qualcomm sdx55 firmware
• qualcomm sdx55m firmware
• qualcomm sm6125 firmware
• qualcomm sm6150 firmware
• qualcomm sm6250 firmware
• qualcomm sm6250p firmware
• qualcomm sm7125 firmware
• qualcomm sm7150 firmware
• qualcomm sm7150p firmware
• qualcomm sm8150 firmware
• qualcomm sm8150p firmware
Related
Weakness · CWE (1)
- CWE-20 Improper Input Validation weakness
References
- https://blog.checkpoint.com/2020/08/06/achilles-small-chip-big-peril/ Third Party Advisory
- https://research.checkpoint.com/2021/pwn2own-qualcomm-dsp/ Exploit, Third Party Advisory
- https://www.qualcomm.com/company/product-security/bulletins/november-2020-bulletin Broken Link, Vendor Advisory
- https://blog.checkpoint.com/2020/08/06/achilles-small-chip-big-peril/ Third Party Advisory
- https://research.checkpoint.com/2021/pwn2own-qualcomm-dsp/ Exploit, Third Party Advisory
- https://www.qualcomm.com/company/product-security/bulletins/november-2020-bulletin Broken Link, Vendor Advisory