What’s Vulnerable › Vulnerabilities
CVE-2020-11207
- Severity: high (CVSS 7.8 v3.1)
- Exploited in the wild: not listed in CISA KEV
- EPSS: 1.5% probability of exploitation in the next 30 days
- Public exploit or detection template: yes
- Published: 2020-11-12 · updated 2026-06-17
- Weakness: CWE-120
Description
Buffer overflow in LibFastCV library due to improper size checks with respect to buffer length' in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile in APQ8052, APQ8056, APQ8076, APQ8096, APQ8096SG, APQ8098, MDM9655, MSM8952, MSM8956, MSM8976, MSM8976SG, MSM8996, MSM8996SG, MSM8998, QCM4290, QCM6125, QCS410, QCS4290, QCS610, QCS6125, QSM8250, SA6145P, SA6150P, SA6155, SA6155P, SA8150P, SA8155, SA8155P, SA8195P, SC7180, SDA640, SDA660, SDA845, SDA855, SDM640, SDM660, SDM830, SDM845, SDM850, SDX50M, SDX55, SDX55M, SM4250, SM4250P, SM6115, SM6115P, SM6125, SM6150, SM6150P, SM6250, SM6250P, SM6350, SM7125, SM7150, SM7150P, SM7225, SM7250, SM7250P, SM8150, SM8150P, SM8250, SXR2130, SXR2130P
Affected products
- Qualcomm Apq8052 Firmware: all versions
- Qualcomm Apq8056 Firmware: all versions
- Qualcomm Apq8076 Firmware: all versions
- Qualcomm Apq8096 Firmware: all versions
- Qualcomm Apq8098 Firmware: all versions
- Qualcomm Mdm9655 Firmware: all versions
- Qualcomm Msm8952 Firmware: all versions
- Qualcomm Msm8956 Firmware: all versions
- Qualcomm Msm8976 Firmware: all versions
- Qualcomm Msm8976Sg Firmware: all versions
- Qualcomm Msm8996 Firmware: all versions
- Qualcomm Msm8996Sg Firmware: all versions
- Qualcomm Msm8998 Firmware: all versions
- Qualcomm Qcm4290 Firmware: all versions
- Qualcomm Qcm6125 Firmware: all versions
- Qualcomm Qcs410 Firmware: all versions
- Qualcomm Qcs4290 Firmware: all versions
- Qualcomm Qcs610 Firmware: all versions
- Qualcomm Qcs6125 Firmware: all versions
- Qualcomm Qsm8250 Firmware: all versions
- Qualcomm Sa6145P Firmware: all versions
- Qualcomm Sa6150P Firmware: all versions
- Qualcomm Sa6155 Firmware: all versions
- Qualcomm Sa6155P Firmware: all versions
- Qualcomm Sa8150P Firmware: all versions
- Qualcomm Sa8155 Firmware: all versions
- Qualcomm Sa8155P Firmware: all versions
- Qualcomm Sa8195P Firmware: all versions
- Qualcomm Sc7180 Firmware: all versions
- Qualcomm Sda640 Firmware: all versions
References
- https://blog.checkpoint.com/2020/08/06/achilles-small-chip-big-peril/
- https://research.checkpoint.com/2021/pwn2own-qualcomm-dsp/
- https://www.qualcomm.com/company/product-security/bulletins/november-2020-bulletin
- https://blog.checkpoint.com/2020/08/06/achilles-small-chip-big-peril/
- https://research.checkpoint.com/2021/pwn2own-qualcomm-dsp/
- https://www.qualcomm.com/company/product-security/bulletins/november-2020-bulletin
Get alerted when CVE-2020-11207 or the next vulnerability affects your stack