CVE-2020-11208: Integer Underflow
First published: Thu Nov 12 2020(Updated: )
Out of Bound issue in DSP services while processing received arguments due to improper validation of length received as an argument' in SD820, SD821, SD820, QCS603, QCS605, SDA855, SA6155P, SA6145P, SA6155, SA6155P, SD855, SD 675, SD660, SD429, SD439
Credit: product-security@qualcomm.com
| Affected Software | Affected Version | How to fix |
|---|---|---|
| Qualcomm SD 820 Firmware | ||
| Qualcomm Snapdragon 820 | ||
| Qualcomm SD821 Firmware | ||
| Qualcomm SD821 Firmware | ||
| Qualcomm QCS603 | ||
| Qualcomm QCS603 Firmware | ||
| Qualcomm QCS605 | ||
| Qualcomm QCS605 Firmware | ||
| Qualcomm SDA855 Firmware | ||
| Qualcomm SDA855 Firmware | ||
| Qualcomm SA6155 | ||
| Qualcomm SA6155P | ||
| Qualcomm SA6145P Firmware | ||
| Qualcomm SA6145P Firmware | ||
| Qualcomm SA6155 | ||
| Qualcomm SA6155 Firmware | ||
| Qualcomm Snapdragon 855 | ||
| Qualcomm Snapdragon 855 | ||
| Qualcomm SD 675 Firmware | ||
| Qualcomm Snapdragon 675 | ||
| Qualcomm Snapdragon 660 Firmware | ||
| Qualcomm Snapdragon 660 | ||
| Qualcomm SD429 | ||
| Qualcomm SD429 Firmware | ||
| Qualcomm SDM439 Firmware | ||
| Qualcomm Snapdragon 439 |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
Frequently Asked Questions
What is the severity of CVE-2020-11208?
CVE-2020-11208 has been classified as a critical severity vulnerability due to the potential for exploitation via out-of-bounds memory access.
How do I fix CVE-2020-11208?
To fix CVE-2020-11208, update your Qualcomm firmware to the latest version that addresses this vulnerability.
Which Qualcomm devices are affected by CVE-2020-11208?
CVE-2020-11208 affects several Qualcomm devices including SD820, SD821, QCS603, and others listed in the vulnerability report.
What type of vulnerability is CVE-2020-11208?
CVE-2020-11208 is an out-of-bounds vulnerability that arises from improper validation of argument lengths in DSP services.
What are the potential impacts of CVE-2020-11208?
The potential impacts of CVE-2020-11208 include unauthorized access to sensitive data and the possibility of executing arbitrary code on the affected device.
- agent/type
- agent/references
- agent/severity
- agent/author
- agent/description
- collector/mitre-cve
- source/MITRE
- agent/weakness
- agent/last-modified-date
- agent/first-publish-date
- agent/event
- agent/source
- agent/softwarecombine
- agent/tags
- collector/nvd-index
- agent/software-canonical-lookup
- agent/software-canonical-lookup-request
- vendor/qualcomm
- canonical/qualcomm sd 820 firmware
- canonical/qualcomm snapdragon 820
- canonical/qualcomm sd821 firmware
- canonical/qualcomm qcs603
- canonical/qualcomm qcs603 firmware
- canonical/qualcomm qcs605
- canonical/qualcomm qcs605 firmware
- canonical/qualcomm sda855 firmware
- canonical/qualcomm sa6155
- canonical/qualcomm sa6155p
- canonical/qualcomm sa6145p firmware
- canonical/qualcomm sa6155 firmware
- canonical/qualcomm snapdragon 855
- canonical/qualcomm sd 675 firmware
- canonical/qualcomm snapdragon 675
- canonical/qualcomm snapdragon 660 firmware
- canonical/qualcomm snapdragon 660
- canonical/qualcomm sd429
- canonical/qualcomm sd429 firmware
- canonical/qualcomm sdm439 firmware
- canonical/qualcomm snapdragon 439