CVEvulnerability
CVE-2020-11202
7.8 HIGH
Official page ↗
- Status
- Modified
- Published
- 2020-11-12
- Last modified
- 2026-06-17
- Assigner
- [email protected]
- CVSS 3.1 ([email protected])
- 7.8 HIGH — CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
- CVSS 2.0 ([email protected])
- 7.2 HIGH — AV:L/AC:L/Au:N/C:C/I:C/A:C
- Weaknesses
- CWE-787
Description
Buffer overflow/underflow occurs when typecasting the buffer passed by CPU internally in the library which is not aligned with the actual size of the structure' in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile in QCM6125, QCS410, QCS603, QCS605, QCS610, QCS6125, SA6145P, SA6155, SA6155P, SA8155, SA8155P, SDA640, SDA670, SDA845, SDM640, SDM670, SDM710, SDM830, SDM845, SDX50M, SDX55, SDX55M, SM6125, SM6150, SM6150P, SM6250, SM6250P, SM7125, SM7150, SM7150P, SM8150, SM8150P
Affected configurations
• qualcomm qcm6125 firmware
• qualcomm qcs410 firmware
• qualcomm qcs603 firmware
• qualcomm qcs605 firmware
• qualcomm qcs610 firmware
• qualcomm qcs6125 firmware
• qualcomm sa6145p firmware
• qualcomm sa6155 firmware
• qualcomm sa6155p firmware
• qualcomm sa8155 firmware
• qualcomm sa8155p firmware
• qualcomm sda640 firmware
• qualcomm sda670 firmware
• qualcomm sda845 firmware
• qualcomm sdm640 firmware
• qualcomm sdm670 firmware
• qualcomm sdm710 firmware
• qualcomm sdm830 firmware
• qualcomm sdm845 firmware
• qualcomm sdx50m firmware
• qualcomm sdx55 firmware
• qualcomm sdx55m firmware
• qualcomm sm6125 firmware
• qualcomm sm6150 firmware
• qualcomm sm6150p firmware
• qualcomm sm6250 firmware
• qualcomm sm6250p firmware
• qualcomm sm7125 firmware
• qualcomm sm7150 firmware
• qualcomm sm7150p firmware
• qualcomm sm8150 firmware
• qualcomm sm8150p firmware
Related
Weakness · CWE (1)
- CWE-787 Out-of-bounds Write weakness
References
- https://blog.checkpoint.com/2020/08/06/achilles-small-chip-big-peril/ Third Party Advisory
- https://research.checkpoint.com/2021/pwn2own-qualcomm-dsp/ Exploit, Third Party Advisory
- https://www.qualcomm.com/company/product-security/bulletins/november-2020-bulletin Broken Link, Vendor Advisory
- https://blog.checkpoint.com/2020/08/06/achilles-small-chip-big-peril/ Third Party Advisory
- https://research.checkpoint.com/2021/pwn2own-qualcomm-dsp/ Exploit, Third Party Advisory
- https://www.qualcomm.com/company/product-security/bulletins/november-2020-bulletin Broken Link, Vendor Advisory