CVE-2020-11208

🗓️ 12 Nov 2020 10:00:58Reported by qualcommType

Out of Bound issue in DSP services due to improper length validation in multiple Qualcomm Snapdragon platform

Reporter	Title	Published	Views	Family All 7
Cvelist	CVE-2020-11208	12 Nov 202010:00	–	cvelist
EUVD	EUVD-2020-3562	7 Oct 202500:30	–	euvd
NVD	CVE-2020-11208	12 Nov 202010:15	–	nvd
Prion	Input validation	12 Nov 202010:15	–	prion
Positive Technologies	PT-2020-12597 · Qualcomm · Qualcomm Snapdragon	12 Nov 202000:00	–	ptsecurity
RedhatCVE	CVE-2020-11208	22 May 202515:50	–	redhatcve
ThreatPost	Qualcomm Bugs Open 40 Percent of Android Handsets to Attack	7 Aug 202022:11	–	threatpost

NVD

Node

qualcomm sd820_firmwareMatch-

AND

qualcomm sd820Match-

Node

qualcomm sd821_firmwareMatch-

AND

qualcomm sd821Match-

Node

qualcomm qcs603_firmwareMatch-

AND

qualcomm qcs603Match-

Node

qualcomm qcs605_firmwareMatch-

AND

qualcomm qcs605Match-

Node

qualcomm sda855_firmwareMatch-

AND

qualcomm sda855Match-

Node

qualcomm sa6155p_firmwareMatch-

AND

qualcomm sa6155pMatch-

Node

qualcomm sa6145p_firmwareMatch-

AND

qualcomm sa6145pMatch-

Node

qualcomm sa6155_firmwareMatch-

AND

qualcomm sa6155Match-

Node

qualcomm sa6155p_firmwareMatch-

AND

qualcomm sa6155pMatch-

Node

qualcomm sd855_firmwareMatch-

AND

qualcomm sd855Match-

Node

qualcomm sd675_firmwareMatch-

AND

qualcomm sd675Match-

Node

qualcomm sd660_firmwareMatch-

AND

qualcomm sd660Match-

Node

qualcomm sd429_firmwareMatch-

AND

qualcomm sd429Match-

Node

qualcomm sd439_firmwareMatch-

AND

qualcomm sd439Match-

[
  {
    "product": "Snapdragon Auto, Snapdragon Consumer IOT, Snapdragon Mobile",
    "vendor": "Qualcomm, Inc.",
    "versions": [
      {
        "status": "affected",
        "version": "SD820, SD821, SD820, QCS603, QCS605, SDA855, SA6155P, SA6145P, SA6155, SA6155P, SD855, SD 675, SD660, SD429, SD439"
      }
    ]
  }
]

Source	Link
blog	www.blog.checkpoint.com/2020/08/06/achilles-small-chip-big-peril/
qualcomm	www.qualcomm.com/company/product-security/bulletins/november-2020-bulletin
research	www.research.checkpoint.com/2021/pwn2own-qualcomm-dsp/

21 Nov 2024 04:57Current

7.5High risk

Vulners AI Score7.5

CVSS 27.2

CVSS 3.17.8

EPSS0.00052

CWE-191