ZeroHour

CVE-2020-11201

PoC
CVSS 3.1
7.8 high
EPSS
2%p77
Published
()
Modified
Description

Arbitrary access to DSP memory due to improper check in loaded library for data received from CPU side' in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile in QCM6125, QCS410, QCS603, QCS605, QCS610, QCS6125, SA6145P, SA6155, SA6155P, SA8155, SA8155P, SDA640, SDA845, SDM640, SDM830, SDM845, SDX50M, SDX55, SDX55M, SM6125, SM6150, SM6250, SM6250P, SM7125, SM7150, SM7150P, SM8150, SM8150P

Vendors
qualcomm
Products
qcm6125 firmware, qcs410 firmware, qcs603 firmware, qcs605 firmware, qcs610 firmware, qcs6125 firmware, sa6145p firmware, sa6155 firmware, sa6155p firmware, sa8155 firmware, sa8155p firmware, sda640 firmware
Weakness
CWE-20
Vector
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

In the news