CVE-2020-11201

🗓️ 12 Nov 2020 10:00:56Reported by qualcommType

CVE-2020-11201: Improper check in loaded library for data received from CPU side in Snapdrago

Reporter	Title	Published	Views	Family All 6
Cvelist	CVE-2020-11201	12 Nov 202010:00	–	cvelist
EUVD	EUVD-2020-3555	7 Oct 202500:30	–	euvd
NVD	CVE-2020-11201	12 Nov 202010:15	–	nvd
Prion	Input validation	12 Nov 202010:15	–	prion
RedhatCVE	CVE-2020-11201	22 May 202517:24	–	redhatcve
ThreatPost	Qualcomm Bugs Open 40 Percent of Android Handsets to Attack	7 Aug 202022:11	–	threatpost

NVD

Node

qualcomm qcm6125_firmwareMatch-

AND

qualcomm qcm6125Match-

Node

qualcomm qcs410_firmwareMatch-

AND

qualcomm qcs410Match-

Node

qualcomm qcs603_firmwareMatch-

AND

qualcomm qcs603Match-

Node

qualcomm qcs605_firmwareMatch-

AND

qualcomm qcs605Match-

Node

qualcomm qcs610_firmwareMatch-

AND

qualcomm qcs610Match-

Node

qualcomm qcs6125_firmwareMatch-

AND

qualcomm qcs6125Match-

Node

qualcomm sa6145p_firmwareMatch-

AND

qualcomm sa6145pMatch-

Node

qualcomm sa6155_firmwareMatch-

AND

qualcomm sa6155Match-

Node

qualcomm sa6155p_firmwareMatch-

AND

qualcomm sa6155pMatch-

Node

qualcomm sa8155_firmwareMatch-

AND

qualcomm sa8155Match-

Node

qualcomm sa8155p_firmwareMatch-

AND

qualcomm sa8155pMatch-

Node

qualcomm sda640_firmwareMatch-

AND

qualcomm sda640Match-

Node

qualcomm sda845_firmwareMatch-

AND

qualcomm sda845Match-

Node

qualcomm sdm640_firmwareMatch-

AND

qualcomm sdm640Match-

Node

qualcomm sdm830_firmwareMatch-

AND

qualcomm sdm830Match-

Node

qualcomm sdm845_firmwareMatch-

AND

qualcomm sdm845Match-

Node

qualcomm sdx50m_firmwareMatch-

AND

qualcomm sdx50mMatch-

Node

qualcomm sdx55_firmwareMatch-

AND

qualcomm sdx55Match-

Node

qualcomm sdx55m_firmwareMatch-

AND

qualcomm sdx55mMatch-

Node

qualcomm sm6125_firmwareMatch-

AND

qualcomm sm6125Match-

Node

qualcomm sm6150_firmwareMatch-

AND

qualcomm sm6150Match-

Node

qualcomm sm6250_firmwareMatch-

AND

qualcomm sm6250Match-

Node

qualcomm sm6250p_firmwareMatch-

AND

qualcomm sm6250pMatch-

Node

qualcomm sm7125_firmwareMatch-

AND

qualcomm sm7125Match-

Node

qualcomm sm7150_firmwareMatch-

AND

qualcomm sm7150Match-

Node

qualcomm sm7150p_firmwareMatch-

AND

qualcomm sm7150pMatch-

Node

qualcomm sm8150_firmwareMatch-

AND

qualcomm sm8150Match-

Node

qualcomm sm8150p_firmwareMatch-

AND

qualcomm sm8150pMatch-

[
  {
    "product": "Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile",
    "vendor": "Qualcomm, Inc.",
    "versions": [
      {
        "status": "affected",
        "version": "QCM6125, QCS410, QCS603, QCS605, QCS610, QCS6125, SA6145P, SA6155, SA6155P, SA8155, SA8155P, SDA640, SDA845, SDM640, SDM830, SDM845, SDX50M, SDX55, SDX55M, SM6125, SM6150, SM6250, SM6250P, SM7125, SM7150, SM7150P, SM8150, SM8150P"
      }
    ]
  }
]

Source	Link
blog	www.blog.checkpoint.com/2020/08/06/achilles-small-chip-big-peril/
qualcomm	www.qualcomm.com/company/product-security/bulletins/november-2020-bulletin
research	www.research.checkpoint.com/2021/pwn2own-qualcomm-dsp/

21 Nov 2024 04:57Current

7.6High risk

Vulners AI Score7.6

CVSS 27.2

CVSS 3.17.8

EPSS0.00052

CWE-20