CVE-2020-11201: Input Validation
First published: Thu Nov 12 2020(Updated: )
Arbitrary access to DSP memory due to improper check in loaded library for data received from CPU side' in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile in QCM6125, QCS410, QCS603, QCS605, QCS610, QCS6125, SA6145P, SA6155, SA6155P, SA8155, SA8155P, SDA640, SDA845, SDM640, SDM830, SDM845, SDX50M, SDX55, SDX55M, SM6125, SM6150, SM6250, SM6250P, SM7125, SM7150, SM7150P, SM8150, SM8150P
Credit: product-security@qualcomm.com
| Affected Software | Affected Version | How to fix |
|---|---|---|
| Qualcomm QCM6125 Firmware | ||
| Qualcomm QCM6125 Firmware | ||
| Qualcomm QCS410 Firmware | ||
| Qualcomm QCS410 Firmware | ||
| Qualcomm QCS603 | ||
| Qualcomm QCS603 Firmware | ||
| Qualcomm QCS605 | ||
| Qualcomm QCS605 Firmware | ||
| Qualcomm QCS610 Firmware | ||
| Qualcomm QCS610 Firmware | ||
| Qualcomm QCS6125 Firmware | ||
| Qualcomm QCS6125 Firmware | ||
| Qualcomm SA6145P Firmware | ||
| Qualcomm SA6145P Firmware | ||
| Qualcomm SA6155 | ||
| Qualcomm SA6155 Firmware | ||
| Qualcomm SA6155 | ||
| Qualcomm SA6155P | ||
| Qualcomm SA8155P Firmware | ||
| Qualcomm SA8155 Firmware | ||
| Qualcomm SA8155 | ||
| Qualcomm SA8155P Firmware | ||
| Qualcomm SDA640 | ||
| Qualcomm SDA640 Firmware | ||
| Qualcomm SD 845 Firmware | ||
| Qualcomm Snapdragon 845 | ||
| qualcomm SDM640 firmware | ||
| Qualcomm SDM640 | ||
| Qualcomm SDM830 Firmware | ||
| Qualcomm Snapdragon 830 | ||
| Qualcomm SDA/SDM845 Firmware | ||
| Qualcomm Snapdragon 845 | ||
| Qualcomm SDX50M Firmware | ||
| Qualcomm SDX50M Firmware | ||
| Qualcomm SDX55M Firmware | ||
| Qualcomm SDX55 Firmware | ||
| Qualcomm SDX55M Firmware | ||
| Qualcomm SDX55M Firmware | ||
| Qualcomm SM6125 | ||
| Qualcomm SM6125 Firmware | ||
| Qualcomm SM6150P firmware | ||
| Qualcomm SM6150P | ||
| Qualcomm SM6250P Firmware | ||
| Qualcomm SM6250 Firmware | ||
| Qualcomm SM6250 Firmware | ||
| Qualcomm SM6250P Firmware | ||
| Qualcomm SM7125 | ||
| Qualcomm SM7125 Firmware | ||
| qualcomm SM7150P firmware | ||
| qualcomm SM7150 firmware | ||
| qualcomm SM7150 firmware | ||
| qualcomm SM7150P firmware | ||
| Qualcomm SM8150P Firmware | ||
| Qualcomm SM8150 Fusion | ||
| Qualcomm SM8150 Firmware | ||
| Qualcomm SA8150P |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
Frequently Asked Questions
What is CVE-2020-11201?
CVE-2020-11201 is a vulnerability that allows arbitrary access to DSP memory due to an improper check in a loaded library for data received from the CPU side.
Which software is affected by CVE-2020-11201?
The vulnerability affects Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile in QCM6125, QCS410, QCS603, QCS605, QCS610, QCS6125, SA6145P, SA6155, SA6155P, SA8155, and other models listed in the official bulletin.
What is the severity of CVE-2020-11201?
CVE-2020-11201 has a severity level of 7.8 (high).
How can I fix CVE-2020-11201?
To fix CVE-2020-11201, users are advised to apply the necessary updates and patches provided by Qualcomm as mentioned in the official bulletin.
Where can I find more information about CVE-2020-11201?
More information about CVE-2020-11201 can be found in the official blog post and research report by Check Point, as well as the Qualcomm Product Security bulletins for November 2020.
- agent/type
- agent/author
- agent/severity
- agent/weakness
- agent/references
- agent/description
- collector/mitre-cve
- source/MITRE
- agent/last-modified-date
- agent/first-publish-date
- agent/event
- agent/source
- agent/softwarecombine
- agent/tags
- collector/nvd-index
- agent/software-canonical-lookup
- agent/software-canonical-lookup-request
- vendor/qualcomm
- canonical/qualcomm qcm6125 firmware
- canonical/qualcomm qcs410 firmware
- canonical/qualcomm qcs603
- canonical/qualcomm qcs603 firmware
- canonical/qualcomm qcs605
- canonical/qualcomm qcs605 firmware
- canonical/qualcomm qcs610 firmware
- canonical/qualcomm qcs6125 firmware
- canonical/qualcomm sa6145p firmware
- canonical/qualcomm sa6155
- canonical/qualcomm sa6155 firmware
- canonical/qualcomm sa6155p
- canonical/qualcomm sa8155p firmware
- canonical/qualcomm sa8155 firmware
- canonical/qualcomm sa8155
- canonical/qualcomm sda640
- canonical/qualcomm sda640 firmware
- canonical/qualcomm sd 845 firmware
- canonical/qualcomm snapdragon 845
- canonical/qualcomm sdm640 firmware
- canonical/qualcomm sdm640
- canonical/qualcomm sdm830 firmware
- canonical/qualcomm snapdragon 830
- canonical/qualcomm sda/sdm845 firmware
- canonical/qualcomm sdx50m firmware
- canonical/qualcomm sdx55m firmware
- canonical/qualcomm sdx55 firmware
- canonical/qualcomm sm6125
- canonical/qualcomm sm6125 firmware
- canonical/qualcomm sm6150p firmware
- canonical/qualcomm sm6150p
- canonical/qualcomm sm6250p firmware
- canonical/qualcomm sm6250 firmware
- canonical/qualcomm sm7125
- canonical/qualcomm sm7125 firmware
- canonical/qualcomm sm7150p firmware
- canonical/qualcomm sm7150 firmware
- canonical/qualcomm sm8150p firmware
- canonical/qualcomm sm8150 fusion
- canonical/qualcomm sm8150 firmware
- canonical/qualcomm sa8150p