High severity7.8NVD Advisory· Published Nov 12, 2020· Updated Jun 17, 2026
CVE-2020-11208
CVE-2020-11208
Description
Out of Bound issue in DSP services while processing received arguments due to improper validation of length received as an argument' in SD820, SD821, SD820, QCS603, QCS605, SDA855, SA6155P, SA6145P, SA6155, SA6155P, SD855, SD 675, SD660, SD429, SD439
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
17- cpe:2.3:o:qualcomm:qcs603_firmware:-:*:*:*:*:*:*:*
- cpe:2.3:o:qualcomm:qcs605_firmware:-:*:*:*:*:*:*:*
cpe:2.3:o:qualcomm:sa6145p_firmware:-:*:*:*:*:*:*:*+ 2 more
- cpe:2.3:o:qualcomm:sa6145p_firmware:-:*:*:*:*:*:*:*
- cpe:2.3:o:qualcomm:sa6155_firmware:-:*:*:*:*:*:*:*
- cpe:2.3:o:qualcomm:sa6155p_firmware:-:*:*:*:*:*:*:*
- cpe:2.3:o:qualcomm:sd429_firmware:-:*:*:*:*:*:*:*
- cpe:2.3:o:qualcomm:sd439_firmware:-:*:*:*:*:*:*:*
- cpe:2.3:o:qualcomm:sd660_firmware:-:*:*:*:*:*:*:*
- cpe:2.3:o:qualcomm:sd675_firmware:-:*:*:*:*:*:*:*
- cpe:2.3:o:qualcomm:sd820_firmware:-:*:*:*:*:*:*:*
- cpe:2.3:o:qualcomm:sd821_firmware:-:*:*:*:*:*:*:*
- cpe:2.3:o:qualcomm:sd855_firmware:-:*:*:*:*:*:*:*
- cpe:2.3:o:qualcomm:sda855_firmware:-:*:*:*:*:*:*:*
- Qualcomm, Inc./Snapdragon Auto, Snapdragon Consumer IOT, Snapdragon Mobilev5Range: SD820, SD821, SD820, QCS603, QCS605, SDA855, SA6155P, SA6145P, SA6155, SA6155P, SD855, SD 675, SD660, SD429, SD439
Patches
Vulnerability mechanics
References
3- research.checkpoint.com/2021/pwn2own-qualcomm-dsp/nvdExploitThird Party Advisory
- blog.checkpoint.com/2020/08/06/achilles-small-chip-big-peril/nvdThird Party Advisory
- www.qualcomm.com/company/product-security/bulletins/november-2020-bulletinnvdVendor Advisory
News mentions
0No linked articles in our index yet.