CVE-2020-11202
Buffer overflow/underflow occurs when typecasting the buffer passed by CPU internally in the library which is not aligned with the actual size of the structure' in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile in QCM6125, QCS410, QCS603, QCS605, QCS610, QCS6125, SA6145P, SA6155, SA6155P, SA8155, SA8155P, SDA640, SDA670, SDA845, SDM640, SDM670, SDM710, SDM830, SDM845, SDX50M, SDX55, SDX55M, SM6125, SM6150, SM6150P, SM6250, SM6250P, SM7125, SM7150, SM7150P, SM8150, SM8150P
- Score
- CVSS 3.1 7.8 High
- Status
- Modified - product-security@qualcomm.com
- Published
- 2020-11-12
- Last modified
- 2024-08-04
- Weaknesses
- CWE-787
Affected products
- Qcm6125 Firmware (Qualcomm)
- Qcs410 Firmware (Qualcomm)
- Qcs603 Firmware (Qualcomm)
- Qcs605 Firmware (Qualcomm)
- Qcs610 Firmware (Qualcomm)
- Qcs6125 Firmware (Qualcomm)
- Sa6145p Firmware (Qualcomm)
- Sa6155 Firmware (Qualcomm)
- Sa6155p Firmware (Qualcomm)
- Sa8155 Firmware (Qualcomm)
- Sa8155p Firmware (Qualcomm)
- Sda640 Firmware (Qualcomm)
- Sda670 Firmware (Qualcomm)
- Sda845 Firmware (Qualcomm)
- Sdm640 Firmware (Qualcomm)
- Sdm670 Firmware (Qualcomm)
- Sdm710 Firmware (Qualcomm)
- Sdm830 Firmware (Qualcomm)
- Sdm845 Firmware (Qualcomm)
- Sdx50m Firmware (Qualcomm)
- Sdx55 Firmware (Qualcomm)
- Sdx55m Firmware (Qualcomm)
- Sm6125 Firmware (Qualcomm)
- Sm6150 Firmware (Qualcomm)
- Sm6150p Firmware (Qualcomm)
- Sm6250 Firmware (Qualcomm)
- Sm6250p Firmware (Qualcomm)
- Sm7125 Firmware (Qualcomm)
- Sm7150 Firmware (Qualcomm)
- Sm7150p Firmware (Qualcomm)
- Sm8150 Firmware (Qualcomm)
- Sm8150p Firmware (Qualcomm)
- Snapdragon Auto (Qualcomm Inc.)
- Snapdragon Compute (Qualcomm Inc.)
- Snapdragon Consumer Iot (Qualcomm Inc.)
- Snapdragon Industrial Iot (Qualcomm Inc.)
- Snapdragon Mobile (Qualcomm Inc.)
References
- https://blog.checkpoint.com/2020/08/06/achilles-small-chip-big-peril/
- https://research.checkpoint.com/2021/pwn2own-qualcomm-dsp/
- https://www.qualcomm.com/company/product-security/bulletins/november-2020-bulletin