NetSight
high7.8

CVE-2020-11201

Arbitrary access to DSP memory due to improper check in loaded library for data received from CPU side' in Snapdragon Auto, Snapdragon Compute, Snapdragon Cons…

Impact

Arbitrary access to DSP memory due to improper check in loaded library for data received from CPU side' in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile in QCM6125, QCS410, QCS603, QCS605, QCS610, QCS6125, SA6145P, SA6155, SA6155P, SA8155, SA8155P, SDA640, SDA845, SDM640, SDM830, SDM845, SDX50M, SDX55, SDX55M, SM6125, SM6150, SM6250, SM6250P, SM7125, SM7150, SM7150P, SM8150, SM8150P

Affected products

VendorProductAffected versions
QualcommQcm6125 Firmware
All versions
QualcommQcs410 Firmware
All versions
QualcommQcs603 Firmware
All versions
QualcommQcs605 Firmware
All versions
QualcommQcs610 Firmware
All versions
QualcommQcs6125 Firmware
All versions
QualcommSa6145p Firmware
All versions
QualcommSa6155 Firmware
All versions
QualcommSa6155p Firmware
All versions
QualcommSa8155 Firmware
All versions
QualcommSa8155p Firmware
All versions
QualcommSda640 Firmware
All versions

Weakness classification

References