CVE-2020-11206

Published: Nov 12, 2020Modified: Jun 17, 2026

7.8

Vector

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Exploitability: 1.8 / Impact: 5.9

Source: NVD

Description

Possible buffer overflow in Fastrpc while handling received parameters due to lack of validation on input parameters' in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile in APQ8098, MSM8998, QCM4290, QCM6125, QCS410, QCS4290, QCS610, QCS6125, QSM8250, QSM8350, SA6145P, SA6150P, SA6155, SA6155P, SA8150P, SA8155, SA8155P, SA8195P, SC7180, SDA640, SDA660, SDA845, SDA855, SDM640, SDM660, SDM830, SDM845, SDM850, SDX50M, SDX55, SDX55M, SM4250, SM4250P, SM6115, SM6115P, SM6125, SM6150, SM6150P, SM6250, SM6250P, SM6350, SM7125, SM7150, SM7150P, SM7225, SM7250, SM7250P, SM8150, SM8150P, SM8250, SM8350, SM8350P, SXR2130, SXR2130P

Affected (54)

Products: Qualcomm: Apq8098 Firmware, Msm8998 Firmware, Qcm4290 Firmware, Qcm6125 Firmware, Qcs410 Firmware, Qcs4290 Firmware, Qcs610 Firmware, Qcs6125 Firmware, Qsm8250 Firmware, Qsm8350 Firmware, Sa6145p Firmware, Sa6150p Firmware, Sa6155 Firmware, Sa6155p Firmware, Sa8150p Firmware, Sa8155 Firmware, Sa8155p Firmware, Sa8195p Firmware, Sc7180 Firmware, Sda640 Firmware, Sda660 Firmware, Sda845 Firmware, Sda855 Firmware, Sdm640 Firmware, Sdm660 Firmware, Sdm830 Firmware, Sdm845 Firmware, Sdm850 Firmware, Sdx50m Firmware, Sdx55 Firmware, Sdx55m Firmware, Sm4250 Firmware, Sm4250p Firmware, Sm6115 Firmware, Sm6115p Firmware, Sm6125 Firmware, Sm6150 Firmware, Sm6150p Firmware, Sm6250 Firmware, Sm6250p Firmware, Sm6350 Firmware, Sm7125 Firmware, Sm7150 Firmware, Sm7150p Firmware, Sm7225 Firmware, Sm7250 Firmware, Sm7250p Firmware, Sm8150 Firmware, Sm8150p Firmware, Sm8250 Firmware, Sm8350 Firmware, Sm8350p Firmware, Sxr2130 Firmware, Sxr2130p Firmware

54 products

Configuration A

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Qualcomm Apq8098 Firmware	All versions

Running on/with	Platform Versions
Qualcomm Apq8098	All versions

Configuration B

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Qualcomm Msm8998 Firmware	All versions

Running on/with	Platform Versions
Qualcomm Msm8998	All versions

Configuration C

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Qualcomm Qcm4290 Firmware	All versions

Running on/with	Platform Versions
Qualcomm Qcm4290	All versions

Configuration D

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Qualcomm Qcm6125 Firmware	All versions

Running on/with	Platform Versions
Qualcomm Qcm6125	All versions

Configuration E

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Qualcomm Qcs410 Firmware	All versions

Running on/with	Platform Versions
Qualcomm Qcs410	All versions

Configuration F

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Qualcomm Qcs4290 Firmware	All versions

Running on/with	Platform Versions
Qualcomm Qcs4290	All versions

Configuration G

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Qualcomm Qcs610 Firmware	All versions

Running on/with	Platform Versions
Qualcomm Qcs610	All versions

Configuration H

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Qualcomm Qcs6125 Firmware	All versions

Running on/with	Platform Versions
Qualcomm Qcs6125	All versions

Configuration I

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Qualcomm Qsm8250 Firmware	All versions

Running on/with	Platform Versions
Qualcomm Qsm8250	All versions

Configuration J

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Qualcomm Qsm8350 Firmware	All versions

Running on/with	Platform Versions
Qualcomm Qsm8350	All versions

Configuration K

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Qualcomm Sa6145p Firmware	All versions

Running on/with	Platform Versions
Qualcomm Sa6145p	All versions

Configuration L

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Qualcomm Sa6150p Firmware	All versions

Running on/with	Platform Versions
Qualcomm Sa6150p	All versions

Configuration M

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Qualcomm Sa6155 Firmware	All versions

Running on/with	Platform Versions
Qualcomm Sa6155	All versions

Configuration N

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Qualcomm Sa6155p Firmware	All versions

Running on/with	Platform Versions
Qualcomm Sa6155p	All versions

Configuration O

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Qualcomm Sa8150p Firmware	All versions

Running on/with	Platform Versions
Qualcomm Sa8150p	All versions

Configuration P

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Qualcomm Sa8155 Firmware	All versions

Running on/with	Platform Versions
Qualcomm Sa8155	All versions

Configuration Q

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Qualcomm Sa8155p Firmware	All versions

Running on/with	Platform Versions
Qualcomm Sa8155p	All versions

Configuration R

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Qualcomm Sa8195p Firmware	All versions

Running on/with	Platform Versions
Qualcomm Sa8195p	All versions

Configuration S

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Qualcomm Sc7180 Firmware	All versions

Running on/with	Platform Versions
Qualcomm Sc7180	All versions

Configuration T

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Qualcomm Sda640 Firmware	All versions

Running on/with	Platform Versions
Qualcomm Sda640	All versions

Configuration U

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Qualcomm Sda660 Firmware	All versions

Running on/with	Platform Versions
Qualcomm Sda660	All versions

Configuration V

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Qualcomm Sda845 Firmware	All versions

Running on/with	Platform Versions
Qualcomm Sda845	All versions

Configuration W

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Qualcomm Sda855 Firmware	All versions

Running on/with	Platform Versions
Qualcomm Sda855	All versions

Configuration X

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Qualcomm Sdm640 Firmware	All versions

Running on/with	Platform Versions
Qualcomm Sdm640	All versions

Configuration Y

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Qualcomm Sdm660 Firmware	All versions

Running on/with	Platform Versions
Qualcomm Sdm660	All versions

Configuration Z

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Qualcomm Sdm830 Firmware	All versions

Running on/with	Platform Versions
Qualcomm Sdm830	All versions

Configuration A

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Qualcomm Sdm845 Firmware	All versions

Running on/with	Platform Versions
Qualcomm Sdm845	All versions

Configuration B

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Qualcomm Sdm850 Firmware	All versions

Running on/with	Platform Versions
Qualcomm Sdm850	All versions

Configuration C

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Qualcomm Sdx50m Firmware	All versions

Running on/with	Platform Versions
Qualcomm Sdx50m	All versions

Configuration D

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Qualcomm Sdx55 Firmware	All versions

Running on/with	Platform Versions
Qualcomm Sdx55	All versions

Configuration E

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Qualcomm Sdx55m Firmware	All versions

Running on/with	Platform Versions
Qualcomm Sdx55m	All versions

Configuration F

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Qualcomm Sm4250 Firmware	All versions

Running on/with	Platform Versions
Qualcomm Sm4250	All versions

Configuration G

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Qualcomm Sm4250p Firmware	All versions

Running on/with	Platform Versions
Qualcomm Sm4250p	All versions

Configuration H

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Qualcomm Sm6115 Firmware	All versions

Running on/with	Platform Versions
Qualcomm Sm6115	All versions

Configuration I

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Qualcomm Sm6115p Firmware	All versions

Running on/with	Platform Versions
Qualcomm Sm6115p	All versions

Configuration J

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Qualcomm Sm6125 Firmware	All versions

Running on/with	Platform Versions
Qualcomm Sm6125	All versions

Configuration K

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Qualcomm Sm6150 Firmware	All versions

Running on/with	Platform Versions
Qualcomm Sm6150	All versions

Configuration L

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Qualcomm Sm6150p Firmware	All versions

Running on/with	Platform Versions
Qualcomm Sm6150p	All versions

Configuration M

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Qualcomm Sm6250 Firmware	All versions

Running on/with	Platform Versions
Qualcomm Sm6250	All versions

Configuration N

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Qualcomm Sm6250p Firmware	All versions

Running on/with	Platform Versions
Qualcomm Sm6250p	All versions

Configuration O

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Qualcomm Sm6350 Firmware	All versions

Running on/with	Platform Versions
Qualcomm Sm6350	All versions

Configuration P

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Qualcomm Sm7125 Firmware	All versions

Running on/with	Platform Versions
Qualcomm Sm7125	All versions

Configuration Q

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Qualcomm Sm7150 Firmware	All versions

Running on/with	Platform Versions
Qualcomm Sm7150	All versions

Configuration R

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Qualcomm Sm7150p Firmware	All versions

Running on/with	Platform Versions
Qualcomm Sm7150p	All versions

Configuration S

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Qualcomm Sm7225 Firmware	All versions

Running on/with	Platform Versions
Qualcomm Sm7225	All versions

Configuration T

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Qualcomm Sm7250 Firmware	All versions

Running on/with	Platform Versions
Qualcomm Sm7250	All versions

Configuration U

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Qualcomm Sm7250p Firmware	All versions

Running on/with	Platform Versions
Qualcomm Sm7250p	All versions

Configuration V

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Qualcomm Sm8150 Firmware	All versions

Running on/with	Platform Versions
Qualcomm Sm8150	All versions

Configuration W

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Qualcomm Sm8150p Firmware	All versions

Running on/with	Platform Versions
Qualcomm Sm8150p	All versions

Configuration X

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Qualcomm Sm8250 Firmware	All versions

Running on/with	Platform Versions
Qualcomm Sm8250	All versions

Configuration Y

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Qualcomm Sm8350 Firmware	All versions

Running on/with	Platform Versions
Qualcomm Sm8350	All versions

Configuration Z

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Qualcomm Sm8350p Firmware	All versions

Running on/with	Platform Versions
Qualcomm Sm8350p	All versions

Configuration A

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Qualcomm Sxr2130 Firmware	All versions

Running on/with	Platform Versions
Qualcomm Sxr2130	All versions

Configuration B

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Qualcomm Sxr2130p Firmware	All versions

Running on/with	Platform Versions
Qualcomm Sxr2130p	All versions

References (6)

https://blog.checkpoint.com/2020/08/06/achilles-small-chip-big-peril/

Source: product-security@qualcomm.com

Third Party Advisory

https://research.checkpoint.com/2021/pwn2own-qualcomm-dsp/

Source: product-security@qualcomm.com

ExploitThird Party Advisory

https://www.qualcomm.com/company/product-security/bulletins/november-2020-bulletin

Source: product-security@qualcomm.com

Vendor Advisory

https://blog.checkpoint.com/2020/08/06/achilles-small-chip-big-peril/

Source: af854a3a-2127-422b-91ae-364da2661108

Third Party Advisory

https://research.checkpoint.com/2021/pwn2own-qualcomm-dsp/

Source: af854a3a-2127-422b-91ae-364da2661108

ExploitThird Party Advisory

https://www.qualcomm.com/company/product-security/bulletins/november-2020-bulletin

Source: af854a3a-2127-422b-91ae-364da2661108

Vendor Advisory

Timeline

No history available yet.