{"id":"CVE-2020-11201","aliases":["EUVD-2020-3555","GHSA-xq63-95vc-335w"],"status":"published","title":"u'Arbitrary access to DSP memory due to improper check in loaded library for data received from...","description":"Arbitrary access to DSP memory due to improper check in loaded library for data received from CPU side' in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile in QCM6125, QCS410, QCS603, QCS605, QCS610, QCS6125, SA6145P, SA6155, SA6155P, SA8155, SA8155P, SDA640, SDA845, SDM640, SDM830, SDM845, SDX50M, SDX55, SDX55M, SM6125, SM6150, SM6250, SM6250P, SM7125, SM7150, SM7150P, SM8150, SM8150P","severity":{"version":"3.1","score":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","level":"high","assessor":"primary","from":"nvd"},"epss":{"day":"2026-11-09","score":0.01804,"percentile":0.78698,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":false},"cwes":["CWE-20"],"published":"2020-11-12T10:00:56Z","modified":"2026-06-17T02:49:32Z","products":[{"vendor":"qualcomm","product":"qcm6125_firmware"},{"vendor":"qualcomm","product":"qcs410_firmware"},{"vendor":"qualcomm","product":"qcs603_firmware"},{"vendor":"qualcomm","product":"qcs605_firmware"},{"vendor":"qualcomm","product":"qcs610_firmware"},{"vendor":"qualcomm","product":"qcs6125_firmware"},{"vendor":"qualcomm","product":"sa6145p_firmware"},{"vendor":"qualcomm","product":"sa6155_firmware"},{"vendor":"qualcomm","product":"sa6155p_firmware"},{"vendor":"qualcomm","product":"sa8155_firmware"},{"vendor":"qualcomm","product":"sa8155p_firmware"},{"vendor":"qualcomm","product":"sda640_firmware"},{"vendor":"qualcomm","product":"sda845_firmware"},{"vendor":"qualcomm","product":"sdm640_firmware"},{"vendor":"qualcomm","product":"sdm830_firmware"},{"vendor":"qualcomm","product":"sdm845_firmware"},{"vendor":"qualcomm","product":"sdx50m_firmware"},{"vendor":"qualcomm","product":"sdx55_firmware"},{"vendor":"qualcomm","product":"sdx55m_firmware"},{"vendor":"qualcomm","product":"sm6125_firmware"},{"vendor":"qualcomm","product":"sm6150_firmware"},{"vendor":"qualcomm","product":"sm6250_firmware"},{"vendor":"qualcomm","product":"sm6250p_firmware"},{"vendor":"qualcomm","product":"sm7125_firmware"},{"vendor":"qualcomm","product":"sm7150_firmware"},{"vendor":"qualcomm","product":"sm7150p_firmware"},{"vendor":"qualcomm","product":"sm8150_firmware"},{"vendor":"qualcomm","product":"sm8150p_firmware"},{"vendor":"qualcomm, inc.","product":"snapdragon auto, snapdragon compute, snapdragon consumer iot, snapdragon industrial iot, snapdragon mobile"}],"references":[{"url":"https://blog.checkpoint.com/2020/08/06/achilles-small-chip-big-peril/","tags":["x_refsource_MISC","x_transferred","Third Party Advisory"]},{"url":"https://www.qualcomm.com/company/product-security/bulletins/november-2020-bulletin","tags":["x_refsource_CONFIRM","x_transferred","Broken Link","Vendor Advisory"]},{"url":"https://research.checkpoint.com/2021/pwn2own-qualcomm-dsp/","tags":["x_refsource_MISC","x_transferred","Exploit","Third Party Advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2020-11201"},{"url":"https://github.com/advisories/GHSA-xq63-95vc-335w"}],"sources":{"cve":[{"id":"CVE-2020-11201","description":"Arbitrary access to DSP memory due to improper check in loaded library for data received from CPU side' in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile in QCM6125, QCS410, QCS603, QCS605, QCS610, QCS6125, SA6145P, SA6155, SA6155P, SA8155, SA8155P, SDA640, SDA845, SDM640, SDM830, SDM845, SDX50M, SDX55, SDX55M, SM6125, SM6150, SM6250, SM6250P, SM7125, SM7150, SM7150P, SM8150, SM8150P","status":"published","published":"2020-11-12T10:00:56Z","modified":"2024-08-04T11:28:13.6Z","updated_at":"2026-11-02T14:35:57.67317Z"}],"euvd":[{"id":"EUVD-2020-3555","description":"Arbitrary access to DSP memory due to improper check in loaded library for data received from CPU side' in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile in QCM6125, QCS410, QCS603, QCS605, QCS610, QCS6125, SA6145P, SA6155, SA6155P, SA8155, SA8155P, SDA640, SDA845, SDM640, SDM830, SDM845, SDX50M, SDX55, SDX55M, SM6125, SM6150, SM6250, SM6250P, SM7125, SM7150, SM7150P, SM8150, SM8150P","status":"published","published":"2020-11-12T10:00:56Z","modified":"2024-08-04T11:28:13Z","updated_at":"2026-11-03T03:07:47.591202Z"}],"ghsa":[{"id":"GHSA-xq63-95vc-335w","title":"u'Arbitrary access to DSP memory due to improper check in loaded library for data received from...","description":"u'Arbitrary access to DSP memory due to improper check in loaded library for data received from CPU side' in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile in QCM6125, QCS410, QCS603, QCS605, QCS610, QCS6125, SA6145P, SA6155, SA6155P, SA8155, SA8155P, SDA640, SDA845, SDM640, SDM830, SDM845, SDX50M, SDX55, SDX55M, SM6125, SM6150, SM6250, SM6250P, SM7125, SM7150, SM7150P, SM8150, SM8150P","status":"published","published":"2022-05-24T17:33:31Z","modified":"2023-01-29T05:04:38Z","cwes":["CWE-20"],"updated_at":"2026-11-02T14:45:36.557586Z"}],"nvd":[{"id":"CVE-2020-11201","description":"Arbitrary access to DSP memory due to improper check in loaded library for data received from CPU side' in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile in QCM6125, QCS410, QCS603, QCS605, QCS610, QCS6125, SA6145P, SA6155, SA6155P, SA8155, SA8155P, SDA640, SDA845, SDM640, SDM830, SDM845, SDX50M, SDX55, SDX55M, SM6125, SM6150, SM6250, SM6250P, SM7125, SM7150, SM7150P, SM8150, SM8150P","status":"published","published":"2020-11-12T10:15:12.827Z","modified":"2026-06-17T02:49:32.283Z","cvss":[{"version":"3.1","score":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","level":"high","assessor":"primary"},{"version":"2.0","score":7.2,"vector":"AV:L/AC:L/Au:N/C:C/I:C/A:C","level":"high","assessor":"primary"}],"cwes":["CWE-20"],"updated_at":"2026-11-02T14:06:24.137599Z"}]}}