high7.8
CVE-2020-11208
Out of Bound issue in DSP services while processing received arguments due to improper validation of length received as an argument' in SD820, SD821, SD820, QC…
Impact
Out of Bound issue in DSP services while processing received arguments due to improper validation of length received as an argument' in SD820, SD821, SD820, QCS603, QCS605, SDA855, SA6155P, SA6145P, SA6155, SA6155P, SD855, SD 675, SD660, SD429, SD439
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Qualcomm | Sd820 Firmware | All versions |
| Qualcomm | Sd821 Firmware | All versions |
| Qualcomm | Qcs603 Firmware | All versions |
| Qualcomm | Qcs605 Firmware | All versions |
| Qualcomm | Sda855 Firmware | All versions |
| Qualcomm | Sa6155p Firmware | All versions |
| Qualcomm | Sa6145p Firmware | All versions |
| Qualcomm | Sa6155 Firmware | All versions |
| Qualcomm | Sd855 Firmware | All versions |
| Qualcomm | Sd675 Firmware | All versions |
| Qualcomm | Sd660 Firmware | All versions |
| Qualcomm | Sd429 Firmware | All versions |
Weakness classification
References
- NVD record
- CVE.org record
- https://blog.checkpoint.com/2020/08/06/achilles-small-chip-big-peril/
- https://research.checkpoint.com/2021/pwn2own-qualcomm-dsp/
- https://www.qualcomm.com/company/product-security/bulletins/november-2020-bulletin
- https://blog.checkpoint.com/2020/08/06/achilles-small-chip-big-peril/
- https://research.checkpoint.com/2021/pwn2own-qualcomm-dsp/
- https://www.qualcomm.com/company/product-security/bulletins/november-2020-bulletin