CVE-2020-11201
High
Description
Arbitrary access to DSP memory due to improper check in loaded library for data received from CPU side' in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile in QCM6125, QCS410, QCS603, QCS605, QCS610, QCS6125, SA6145P, SA6155, SA6155P, SA8155, SA8155P, SDA640, SDA845, SDM640, SDM830, SDM845, SDX50M, SDX55, SDX55M, SM6125, SM6150, SM6250, SM6250P, SM7125, SM7150, SM7150P, SM8150, SM8150P
SeverityHigh
CVSS7.8
Exploit probability—
Product
Qualcomm Qcm6125 Firmware
PublishedNov 12, 2020
First seenNov 12, 2020
How to fix
Sources list no fixed version or patch link for this vulnerability.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| qualcomm qcm6125_firmware | No range specified | — |
| qualcomm qcs410_firmware | No range specified | — |
| qualcomm qcs603_firmware | No range specified | — |
| qualcomm qcs605_firmware | No range specified | — |
| qualcomm qcs610_firmware | No range specified | — |
| qualcomm qcs6125_firmware | No range specified | — |
| qualcomm sa6145p_firmware | No range specified | — |
| qualcomm sa6155_firmware | No range specified | — |
| qualcomm sa6155p_firmware | No range specified | — |
| qualcomm sa8155_firmware | No range specified | — |
| qualcomm sa8155p_firmware | No range specified | — |
| qualcomm sda640_firmware | No range specified | — |
| qualcomm sda845_firmware | No range specified | — |
| qualcomm sdm640_firmware | No range specified | — |
| qualcomm sdm830_firmware | No range specified | — |
| qualcomm sdm845_firmware | No range specified | — |
| qualcomm sdx50m_firmware | No range specified | — |
| qualcomm sdx55_firmware | No range specified | — |
| qualcomm sdx55m_firmware | No range specified | — |
| qualcomm sm6125_firmware | No range specified | — |
| qualcomm sm6150_firmware | No range specified | — |
| qualcomm sm6250_firmware | No range specified | — |
| qualcomm sm6250p_firmware | No range specified | — |
| qualcomm sm7125_firmware | No range specified | — |
| qualcomm sm7150_firmware | No range specified | — |
| qualcomm sm7150p_firmware | No range specified | — |
| qualcomm sm8150_firmware | No range specified | — |
| qualcomm sm8150p_firmware | No range specified | — |
Check your version
Choose the product and enter the version you run to see whether it falls in the affected range.
In the Intelligence 360 plan
Attack Surface Management
See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.