CVE-2020-11208: Integer Underflow

Published Nov 12, 2020
·
Updated

Out of Bound issue in DSP services while processing received arguments due to improper validation of length received as an argument' in SD820, SD821, SD820, QCS603, QCS605, SDA855, SA6155P, SA6145P, SA6155, SA6155P, SD855, SD 675, SD660, SD429, SD439

Affected Software

26 affected components
QUALCOMM Sd820 Firmware
QUALCOMM Sd820
QUALCOMM Sd821 Firmware
QUALCOMM Sd821
QUALCOMM Qcs603 Firmware
QUALCOMM Qcs603
QUALCOMM Qcs605 Firmware
QUALCOMM QCS605
QUALCOMM Sda855 Firmware
QUALCOMM Sda855
QUALCOMM Sa6155p Firmware
QUALCOMM Sa6155p
QUALCOMM Sa6145p Firmware
QUALCOMM Sa6145p
QUALCOMM Sa6155 Firmware
QUALCOMM Sa6155
Qualcomm Sd855 Firmware
QUALCOMM Sd855
QUALCOMM Sd675 Firmware
QUALCOMM Sd675
QUALCOMM Sd660 Firmware
QUALCOMM Sd660
QUALCOMM Sd429 Firmware
QUALCOMM Sd429
QUALCOMM Sd439 Firmware
QUALCOMM Sd439

Event History

Nov 12, 2020
CVE Published
via MITRE·10:00 AM
Data Sourced
via MITRE·10:00 AM
DescriptionWeakness
Free Weekly Intel

Don't miss critical vulnerabilities

Join thousands of security professionals who receive our weekly digest of trending CVEs, zero-days, and exploited vulnerabilities.

No spam. Unsubscribe anytime.

Frequently Asked Questions

1

What is the severity of CVE-2020-11208?

CVE-2020-11208 has been classified as a critical severity vulnerability due to the potential for exploitation via out-of-bounds memory access.

2

How do I fix CVE-2020-11208?

To fix CVE-2020-11208, update your Qualcomm firmware to the latest version that addresses this vulnerability.

3

Which Qualcomm devices are affected by CVE-2020-11208?

CVE-2020-11208 affects several Qualcomm devices including SD820, SD821, QCS603, and others listed in the vulnerability report.

4

What type of vulnerability is CVE-2020-11208?

CVE-2020-11208 is an out-of-bounds vulnerability that arises from improper validation of argument lengths in DSP services.

5

What are the potential impacts of CVE-2020-11208?

The potential impacts of CVE-2020-11208 include unauthorized access to sensitive data and the possibility of executing arbitrary code on the affected device.

Contact

SecAlerts Pty Ltd.
132 Wickham Terrace
Fortitude Valley,
QLD 4006, Australia
info@secalerts.co
By using SecAlerts services, you agree to our services end-user license agreement. This website is safeguarded by reCAPTCHA and governed by the Google Privacy Policy and Terms of Service. All names, logos, and brands of products are owned by their respective owners, and any usage of these names, logos, and brands for identification purposes only does not imply endorsement. If you possess any content that requires removal, please get in touch with us.
© 2026 SecAlerts Pty Ltd.
ABN: 70 645 966 203, ACN: 645 966 203