{"id":"CVE-2020-11208","aliases":["EUVD-2020-3562","GHSA-wgh3-cvvc-wgr6"],"status":"published","title":"u'Out of Bound issue in DSP services while processing received arguments due to improper...","description":"Out of Bound issue in DSP services while processing received arguments due to improper validation of length received as an argument' in SD820, SD821, SD820, QCS603, QCS605, SDA855, SA6155P, SA6145P, SA6155, SA6155P, SD855, SD 675, SD660, SD429, SD439","severity":{"version":"3.1","score":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","level":"high","assessor":"primary","from":"nvd"},"epss":{"day":"2026-11-09","score":0.01725,"percentile":0.77692,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":false},"cwes":["CWE-191"],"published":"2020-11-12T10:00:58Z","modified":"2026-06-17T02:49:34Z","products":[{"vendor":"qualcomm","product":"qcs603_firmware"},{"vendor":"qualcomm","product":"qcs605_firmware"},{"vendor":"qualcomm","product":"sa6145p_firmware"},{"vendor":"qualcomm","product":"sa6155_firmware"},{"vendor":"qualcomm","product":"sa6155p_firmware"},{"vendor":"qualcomm","product":"sd429_firmware"},{"vendor":"qualcomm","product":"sd439_firmware"},{"vendor":"qualcomm","product":"sd660_firmware"},{"vendor":"qualcomm","product":"sd675_firmware"},{"vendor":"qualcomm","product":"sd820_firmware"},{"vendor":"qualcomm","product":"sd821_firmware"},{"vendor":"qualcomm","product":"sd855_firmware"},{"vendor":"qualcomm","product":"sda855_firmware"},{"vendor":"qualcomm, inc.","product":"snapdragon auto, snapdragon consumer iot, snapdragon mobile"}],"references":[{"url":"https://www.qualcomm.com/company/product-security/bulletins/november-2020-bulletin","tags":["x_refsource_CONFIRM","x_transferred","Vendor Advisory"]},{"url":"https://blog.checkpoint.com/2020/08/06/achilles-small-chip-big-peril/","tags":["x_refsource_MISC","x_transferred","Third Party Advisory"]},{"url":"https://research.checkpoint.com/2021/pwn2own-qualcomm-dsp/","tags":["x_refsource_MISC","x_transferred","Exploit","Third Party Advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2020-11208"},{"url":"https://github.com/advisories/GHSA-wgh3-cvvc-wgr6"}],"sources":{"cve":[{"id":"CVE-2020-11208","description":"Out of Bound issue in DSP services while processing received arguments due to improper validation of length received as an argument' in SD820, SD821, SD820, QCS603, QCS605, SDA855, SA6155P, SA6145P, SA6155, SA6155P, SD855, SD 675, SD660, SD429, SD439","status":"published","published":"2020-11-12T10:00:58Z","modified":"2024-08-04T11:28:13.818Z","updated_at":"2026-11-02T14:35:57.67317Z"}],"euvd":[{"id":"EUVD-2020-3562","description":"Out of Bound issue in DSP services while processing received arguments due to improper validation of length received as an argument' in SD820, SD821, SD820, QCS603, QCS605, SDA855, SA6155P, SA6145P, SA6155, SA6155P, SD855, SD 675, SD660, SD429, SD439","status":"published","published":"2020-11-12T10:00:58Z","modified":"2024-08-04T11:28:13Z","updated_at":"2026-11-03T03:07:47.032228Z"}],"ghsa":[{"id":"GHSA-wgh3-cvvc-wgr6","title":"u'Out of Bound issue in DSP services while processing received arguments due to improper...","description":"u'Out of Bound issue in DSP services while processing received arguments due to improper validation of length received as an argument' in SD820, SD821, SD820, QCS603, QCS605, SDA855, SA6155P, SA6145P, SA6155, SA6155P, SD855, SD 675, SD660, SD429, SD439","status":"published","published":"2022-05-24T17:33:31Z","modified":"2023-01-31T05:08:21Z","cvss":[{"version":"3.1","score":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","level":"high"}],"cwes":["CWE-191"],"updated_at":"2026-11-02T14:49:23.285558Z"}],"nvd":[{"id":"CVE-2020-11208","description":"Out of Bound issue in DSP services while processing received arguments due to improper validation of length received as an argument' in SD820, SD821, SD820, QCS603, QCS605, SDA855, SA6155P, SA6145P, SA6155, SA6155P, SD855, SD 675, SD660, SD429, SD439","status":"published","published":"2020-11-12T10:15:13.17Z","modified":"2026-06-17T02:49:34.073Z","cvss":[{"version":"3.1","score":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","level":"high","assessor":"primary"},{"version":"2.0","score":7.2,"vector":"AV:L/AC:L/Au:N/C:C/I:C/A:C","level":"high","assessor":"primary"}],"cwes":["CWE-191"],"updated_at":"2026-11-02T14:06:24.137599Z"}]}}