CVEvulnerability
CVE-2020-11207
7.8 HIGH
Official page ↗
- Status
- Modified
- Published
- 2020-11-12
- Last modified
- 2026-06-17
- Assigner
- [email protected]
- CVSS 3.1 ([email protected])
- 7.8 HIGH — CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
- CVSS 2.0 ([email protected])
- 7.2 HIGH — AV:L/AC:L/Au:N/C:C/I:C/A:C
- Weaknesses
- CWE-120
Description
Buffer overflow in LibFastCV library due to improper size checks with respect to buffer length' in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile in APQ8052, APQ8056, APQ8076, APQ8096, APQ8096SG, APQ8098, MDM9655, MSM8952, MSM8956, MSM8976, MSM8976SG, MSM8996, MSM8996SG, MSM8998, QCM4290, QCM6125, QCS410, QCS4290, QCS610, QCS6125, QSM8250, SA6145P, SA6150P, SA6155, SA6155P, SA8150P, SA8155, SA8155P, SA8195P, SC7180, SDA640, SDA660, SDA845, SDA855, SDM640, SDM660, SDM830, SDM845, SDM850, SDX50M, SDX55, SDX55M, SM4250, SM4250P, SM6115, SM6115P, SM6125, SM6150, SM6150P, SM6250, SM6250P, SM6350, SM7125, SM7150, SM7150P, SM7225, SM7250, SM7250P, SM8150, SM8150P, SM8250, SXR2130, SXR2130P
Affected configurations
• qualcomm apq8052 firmware
• qualcomm apq8056 firmware
• qualcomm apq8076 firmware
• qualcomm apq8096 firmware
• qualcomm apq8098 firmware
• qualcomm mdm9655 firmware
• qualcomm msm8952 firmware
• qualcomm msm8956 firmware
• qualcomm msm8976 firmware
• qualcomm msm8976sg firmware
• qualcomm msm8996 firmware
• qualcomm msm8996sg firmware
• qualcomm msm8998 firmware
• qualcomm qcm4290 firmware
• qualcomm qcm6125 firmware
• qualcomm qcs410 firmware
• qualcomm qcs4290 firmware
• qualcomm qcs610 firmware
• qualcomm qcs6125 firmware
• qualcomm qsm8250 firmware
• qualcomm sa6145p firmware
• qualcomm sa6150p firmware
• qualcomm sa6155 firmware
• qualcomm sa6155p firmware
• qualcomm sa8150p firmware
• qualcomm sa8155 firmware
• qualcomm sa8155p firmware
• qualcomm sa8195p firmware
• qualcomm sc7180 firmware
• qualcomm sda640 firmware
• qualcomm sda660 firmware
• qualcomm sda845 firmware
• qualcomm sda855 firmware
• qualcomm sdm640 firmware
• qualcomm sdm660 firmware
• qualcomm sdm830 firmware
• qualcomm sdm845 firmware
• qualcomm sdm850 firmware
• qualcomm sdx50m firmware
• qualcomm sdx55 firmware
• qualcomm sdx55m firmware
• qualcomm sm4250 firmware
• qualcomm sm4250p firmware
• qualcomm sm6115 firmware
• qualcomm sm6115p firmware
• qualcomm sm6125 firmware
• qualcomm sm6150 firmware
• qualcomm sm6150p firmware
• qualcomm sm6250 firmware
• qualcomm sm6250p firmware
• qualcomm sm6350 firmware
• qualcomm sm7125 firmware
• qualcomm sm7150 firmware
• qualcomm sm7150p firmware
• qualcomm sm7225 firmware
• qualcomm sm7250 firmware
• qualcomm sm7250p firmware
• qualcomm sm8150 firmware
• qualcomm sm8150p firmware
• qualcomm sm8250 firmware
… and 2 more
Related
Weakness · CWE (1)
- CWE-120 Buffer Copy without Checking Size of Input weakness
References
- https://blog.checkpoint.com/2020/08/06/achilles-small-chip-big-peril/ Third Party Advisory
- https://research.checkpoint.com/2021/pwn2own-qualcomm-dsp/ Exploit, Third Party Advisory
- https://www.qualcomm.com/company/product-security/bulletins/november-2020-bulletin Vendor Advisory
- https://blog.checkpoint.com/2020/08/06/achilles-small-chip-big-peril/ Third Party Advisory
- https://research.checkpoint.com/2021/pwn2own-qualcomm-dsp/ Exploit, Third Party Advisory
- https://www.qualcomm.com/company/product-security/bulletins/november-2020-bulletin Vendor Advisory