{"id":"CVE-2020-11208","state":"PUBLISHED","title":"Out of Bound issue in DSP services while processing received arguments due to improper validation of length received as an argument' in SD820, SD821, SD820, QCS603, QCS605, SDA855,","description":"Out of Bound issue in DSP services while processing received arguments due to improper validation of length received as an argument' in SD820, SD821, SD820, QCS603, QCS605, SDA855, SA6155P, SA6145P, SA6155, SA6155P, SD855, SD 675, SD660, SD429, SD439","publishedAt":"2020-11-12T10:00:58.000Z","updatedAt":"2024-08-04T11:28:13.818Z","severity":null,"assigner":"qualcomm","products":["Qualcomm, Inc. Snapdragon Auto, Snapdragon Consumer IOT, Snapdragon Mobile"],"affected":[{"vendor":"Qualcomm, Inc.","product":"Snapdragon Auto, Snapdragon Consumer IOT, Snapdragon Mobile","versions":[{"version":"SD820, SD821, SD820, QCS603, QCS605, SDA855, SA6155P, SA6145P, SA6155, SA6155P, SD855, SD 675, SD660, SD429, SD439","status":"affected"}]}],"references":["https://www.qualcomm.com/company/product-security/bulletins/november-2020-bulletin","https://blog.checkpoint.com/2020/08/06/achilles-small-chip-big-peril/","https://research.checkpoint.com/2021/pwn2own-qualcomm-dsp/"],"weaknesses":[],"ingestedAt":"2026-10-29T19:46:24.834Z","source":{"repository":"CVEProject/cvelistV5","path":"cves/2020/11xxx/CVE-2020-11208.json","commit":"556c9d3a8cd17e218bb8e452ba7cd619a384ff47"},"raw":{"dataType":"CVE_RECORD","dataVersion":"5.1","cveMetadata":{"cveId":"CVE-2020-11208","state":"PUBLISHED","datePublished":"2020-11-12T10:00:58.000Z","dateUpdated":"2024-08-04T11:28:13.818Z","assignerShortName":"qualcomm","assignerOrgId":"2cfc7d3e-20d3-47ac-8db7-1b7285aff15f","dateReserved":"2020-03-31T00:00:00.000Z"},"containers":{"cna":{"descriptions":[{"lang":"en","value":"Out of Bound issue in DSP services while processing received arguments due to improper validation of length received as an argument' in SD820, SD821, SD820, QCS603, QCS605, SDA855, SA6155P, SA6145P, SA6155, SA6155P, SD855, SD 675, SD660, SD429, SD439"}],"affected":[{"vendor":"Qualcomm, Inc.","product":"Snapdragon Auto, Snapdragon Consumer IOT, Snapdragon Mobile","versions":[{"version":"SD820, SD821, SD820, QCS603, QCS605, SDA855, SA6155P, SA6145P, SA6155, SA6155P, SD855, SD 675, SD660, SD429, SD439","status":"affected"}]}],"references":[{"url":"https://www.qualcomm.com/company/product-security/bulletins/november-2020-bulletin","tags":["x_refsource_CONFIRM"]},{"url":"https://blog.checkpoint.com/2020/08/06/achilles-small-chip-big-peril/","tags":["x_refsource_MISC"]},{"url":"https://research.checkpoint.com/2021/pwn2own-qualcomm-dsp/","tags":["x_refsource_MISC"]}],"problemTypes":[{"descriptions":[{"description":"Buffer Overflow in DSP Process","lang":"en","type":"text"}]}],"providerMetadata":{"shortName":"qualcomm","dateUpdated":"2022-03-15T10:50:10.000Z","orgId":"2cfc7d3e-20d3-47ac-8db7-1b7285aff15f"},"x_legacyV4Record":{"CVE_data_meta":{"ASSIGNER":"product-security@qualcomm.com","ID":"CVE-2020-11208","STATE":"PUBLIC"},"affects":{"vendor":{"vendor_data":[{"product":{"product_data":[{"product_name":"Snapdragon Auto, Snapdragon Consumer IOT, Snapdragon Mobile","version":{"version_data":[{"version_value":"SD820, SD821, SD820, QCS603, QCS605, SDA855, SA6155P, SA6145P, SA6155, SA6155P, SD855, SD 675, SD660, SD429, SD439"}]}}]},"vendor_name":"Qualcomm, Inc."}]}},"data_format":"MITRE","data_type":"CVE","data_version":"4.0","description":{"description_data":[{"lang":"eng","value":"Out of Bound issue in DSP services while processing received arguments due to improper validation of length received as an argument' in SD820, SD821, SD820, QCS603, QCS605, SDA855, SA6155P, SA6145P, SA6155, SA6155P, SD855, SD 675, SD660, SD429, SD439"}]},"problemtype":{"problemtype_data":[{"description":[{"lang":"eng","value":"Buffer Overflow in DSP Process"}]}]},"references":{"reference_data":[{"name":"https://www.qualcomm.com/company/product-security/bulletins/november-2020-bulletin","refsource":"CONFIRM","url":"https://www.qualcomm.com/company/product-security/bulletins/november-2020-bulletin"},{"name":"https://blog.checkpoint.com/2020/08/06/achilles-small-chip-big-peril/","refsource":"MISC","url":"https://blog.checkpoint.com/2020/08/06/achilles-small-chip-big-peril/"},{"name":"https://research.checkpoint.com/2021/pwn2own-qualcomm-dsp/","refsource":"MISC","url":"https://research.checkpoint.com/2021/pwn2own-qualcomm-dsp/"}]}}},"adp":[{"title":"CVE Program Container","references":[{"url":"https://www.qualcomm.com/company/product-security/bulletins/november-2020-bulletin","tags":["x_refsource_CONFIRM","x_transferred"]},{"url":"https://blog.checkpoint.com/2020/08/06/achilles-small-chip-big-peril/","tags":["x_refsource_MISC","x_transferred"]},{"url":"https://research.checkpoint.com/2021/pwn2own-qualcomm-dsp/","tags":["x_refsource_MISC","x_transferred"]}],"providerMetadata":{"shortName":"CVE","orgId":"af854a3a-2127-422b-91ae-364da2661108","dateUpdated":"2024-08-04T11:28:13.818Z"}}]}}}