CVEvulnerability
CVE-2020-11209
5.5 MEDIUM
Official page ↗
- Status
- Modified
- Published
- 2020-11-12
- Last modified
- 2026-06-17
- Assigner
- [email protected]
- CVSS 3.1 ([email protected])
- 5.5 MEDIUM — CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N
- CVSS 2.0 ([email protected])
- 2.1 LOW — AV:L/AC:L/Au:N/C:N/I:P/A:N
- Weaknesses
- CWE-863
Description
Improper authorization in DSP process could allow unauthorized users to downgrade the library versions in SD820, SD821, SD820, QCS603, QCS605, SDA855, SA6155P, SA6145P, SA6155, SA6155P, SD855, SD 675, SD660, SD429, SD439
Affected configurations
• qualcomm sd820 firmware
• qualcomm sd821 firmware
• qualcomm qcs603 firmware
• qualcomm qcs605 firmware
• qualcomm sda855 firmware
• qualcomm sa6155p firmware
• qualcomm sa6145p firmware
• qualcomm sa6155 firmware
• qualcomm sd855 firmware
• qualcomm sd 675 firmware
• qualcomm sd660 firmware
• qualcomm sd429 firmware
• qualcomm sd439 firmware
Related
Weakness · CWE (1)
- CWE-863 Incorrect Authorization weakness
References
- https://blog.checkpoint.com/2020/08/06/achilles-small-chip-big-peril/ Third Party Advisory
- https://research.checkpoint.com/2021/pwn2own-qualcomm-dsp/ Exploit, Third Party Advisory
- https://www.qualcomm.com/company/product-security/bulletins/november-2020-bulletin Broken Link, Vendor Advisory
- https://blog.checkpoint.com/2020/08/06/achilles-small-chip-big-peril/ Third Party Advisory
- https://research.checkpoint.com/2021/pwn2own-qualcomm-dsp/ Exploit, Third Party Advisory
- https://www.qualcomm.com/company/product-security/bulletins/november-2020-bulletin Broken Link, Vendor Advisory