CVE-2020-11206
Possible buffer overflow in Fastrpc while handling received parameters due to lack of validation on input parameters' in Snapdragon Auto, Snapdragon Compute, S…
Impact
Possible buffer overflow in Fastrpc while handling received parameters due to lack of validation on input parameters' in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile in APQ8098, MSM8998, QCM4290, QCM6125, QCS410, QCS4290, QCS610, QCS6125, QSM8250, QSM8350, SA6145P, SA6150P, SA6155, SA6155P, SA8150P, SA8155, SA8155P, SA8195P, SC7180, SDA640, SDA660, SDA845, SDA855, SDM640, SDM660, SDM830, SDM845, SDM850, SDX50M, SDX55, SDX55M, SM4250, SM4250P, SM6115, SM6115P, SM6125, SM6150, SM6150P, SM6250, SM6250P, SM6350, SM7125, SM7150, SM7150P, SM7225, SM7250, SM7250P, SM8150, SM8150P, SM8250, SM8350, SM8350P, SXR2130, SXR2130P
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Qualcomm | Apq8098 Firmware | All versions |
| Qualcomm | Msm8998 Firmware | All versions |
| Qualcomm | Qcm4290 Firmware | All versions |
| Qualcomm | Qcm6125 Firmware | All versions |
| Qualcomm | Qcs410 Firmware | All versions |
| Qualcomm | Qcs4290 Firmware | All versions |
| Qualcomm | Qcs610 Firmware | All versions |
| Qualcomm | Qcs6125 Firmware | All versions |
| Qualcomm | Qsm8250 Firmware | All versions |
| Qualcomm | Qsm8350 Firmware | All versions |
| Qualcomm | Sa6145p Firmware | All versions |
| Qualcomm | Sa6150p Firmware | All versions |
References
- NVD record
- CVE.org record
- https://blog.checkpoint.com/2020/08/06/achilles-small-chip-big-peril/
- https://research.checkpoint.com/2021/pwn2own-qualcomm-dsp/
- https://www.qualcomm.com/company/product-security/bulletins/november-2020-bulletin
- https://blog.checkpoint.com/2020/08/06/achilles-small-chip-big-peril/
- https://research.checkpoint.com/2021/pwn2own-qualcomm-dsp/
- https://www.qualcomm.com/company/product-security/bulletins/november-2020-bulletin