← Back

CVE-2020-11208

nvd nist
Published: Nov 12, 2020Modified: Jun 17, 2026

JSON object

Loading...
7.8
Vector
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Exploitability: 1.8 / Impact: 5.9
Source: NVD

Description

Out of Bound issue in DSP services while processing received arguments due to improper validation of length received as an argument' in SD820, SD821, SD820, QCS603, QCS605, SDA855, SA6155P, SA6145P, SA6155, SA6155P, SD855, SD 675, SD660, SD429, SD439

Affected (13)

Qualcomm
13 products
Sd820 Firmware
Sd821 Firmware
Qcs603 Firmware
Qcs605 Firmware
Sda855 Firmware
Sa6145p Firmware
Sa6155 Firmware
Sa6155p Firmware
Sd855 Firmware
Sd675 Firmware
Sd660 Firmware
Sd429 Firmware
Sd439 Firmware
Configuration A
1 vulnerable · 1 platform
Vulnerable SoftwareAffected Versions
Sd820 Firmware
All versions
Running on/withPlatform Versions
Qualcomm
Sd820
All versions
Configuration B
1 vulnerable · 1 platform
Vulnerable SoftwareAffected Versions
Sd821 Firmware
All versions
Running on/withPlatform Versions
Qualcomm
Sd821
All versions
Configuration C
1 vulnerable · 1 platform
Vulnerable SoftwareAffected Versions
Qcs603 Firmware
All versions
Running on/withPlatform Versions
Qualcomm
Qcs603
All versions
Configuration D
1 vulnerable · 1 platform
Vulnerable SoftwareAffected Versions
Qcs605 Firmware
All versions
Running on/withPlatform Versions
Qualcomm
Qcs605
All versions
Configuration E
1 vulnerable · 1 platform
Vulnerable SoftwareAffected Versions
Sda855 Firmware
All versions
Running on/withPlatform Versions
Qualcomm
Sda855
All versions
Configuration G
1 vulnerable · 1 platform
Vulnerable SoftwareAffected Versions
Sa6145p Firmware
All versions
Running on/withPlatform Versions
Qualcomm
Sa6145p
All versions
Configuration H
1 vulnerable · 1 platform
Vulnerable SoftwareAffected Versions
Sa6155 Firmware
All versions
Running on/withPlatform Versions
Qualcomm
Sa6155
All versions
Configuration I
1 vulnerable · 1 platform
Vulnerable SoftwareAffected Versions
Sa6155p Firmware
All versions
Running on/withPlatform Versions
Qualcomm
Sa6155p
All versions
Configuration J
1 vulnerable · 1 platform
Vulnerable SoftwareAffected Versions
Sd855 Firmware
All versions
Running on/withPlatform Versions
Qualcomm
Sd855
All versions
Configuration K
1 vulnerable · 1 platform
Vulnerable SoftwareAffected Versions
Sd675 Firmware
All versions
Running on/withPlatform Versions
Qualcomm
Sd675
All versions
Configuration L
1 vulnerable · 1 platform
Vulnerable SoftwareAffected Versions
Sd660 Firmware
All versions
Running on/withPlatform Versions
Qualcomm
Sd660
All versions
Configuration M
1 vulnerable · 1 platform
Vulnerable SoftwareAffected Versions
Sd429 Firmware
All versions
Running on/withPlatform Versions
Qualcomm
Sd429
All versions
Configuration N
1 vulnerable · 1 platform
Vulnerable SoftwareAffected Versions
Sd439 Firmware
All versions
Running on/withPlatform Versions
Qualcomm
Sd439
All versions

Related CWEs

CWE-191
Integer Underflow (Wrap or Wraparound)
The product subtracts one value from another, such that the result is less than the minimum allowable integer value, which produces a value that is not equal to the correct result.

References (6)

Source: product-security@qualcomm.com
Third Party Advisory
Source: product-security@qualcomm.com
ExploitThird Party Advisory
Source: product-security@qualcomm.com
Vendor Advisory
Source: af854a3a-2127-422b-91ae-364da2661108
Third Party Advisory
Source: af854a3a-2127-422b-91ae-364da2661108
ExploitThird Party Advisory
Source: af854a3a-2127-422b-91ae-364da2661108
Vendor Advisory

Timeline

No history available yet.