CVE-2020-11201

7.8 highEPSS 1.8%

Arbitrary access to DSP memory due to improper check in loaded library for data received from CPU side' in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile in QCM6125, QCS410, QCS603, QCS605, QCS610, QCS6125, SA6145P, SA6155, SA6155P, SA8155, SA8155P, SDA640, SDA845, SDM640, SDM830, SDM845, SDX50M, SDX55, SDX55M, SM6125, SM6150, SM6250, SM6250P, SM7125, SM7150, SM7150P, SM8150, SM8150P

Severity

CVSS 3.1

7.8 high

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

EPSS: 1.8% chance of exploitation in the next 30 days; higher than 78% of CVEs (scores of 2026-10-31)
CWE: CWE-20
Published: 2020-11-12
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19

Affected

qualcomm:qcm6125_firmware
qualcomm:qcs410_firmware
qualcomm:qcs603_firmware
qualcomm:qcs605_firmware
qualcomm:qcs610_firmware
qualcomm:qcs6125_firmware
qualcomm:sa6145p_firmware
qualcomm:sa6155_firmware
qualcomm:sa6155p_firmware
qualcomm:sa8155_firmware
qualcomm:sa8155p_firmware
qualcomm:sda640_firmware
qualcomm:sda845_firmware
qualcomm:sdm640_firmware
qualcomm:sdm830_firmware
qualcomm:sdm845_firmware
qualcomm:sdx50m_firmware
qualcomm:sdx55_firmware
qualcomm:sdx55m_firmware
qualcomm:sm6125_firmware
qualcomm:sm6150_firmware
qualcomm:sm6250_firmware
qualcomm:sm6250p_firmware
qualcomm:sm7125_firmware
qualcomm:sm7150_firmware
qualcomm:sm7150p_firmware
qualcomm:sm8150_firmware
qualcomm:sm8150p_firmware

References

Check your stack JSON