CVE-2020-11201

Arbitrary access to DSP memory due to improper check in loaded library for data received from CPU side' in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile in QCM6125, QCS410, QCS603, QCS605, QCS610, QCS6125, SA6145P, SA6155, SA6155P, SA8155, SA8155P, SDA640, SDA845, SDM640, SDM830, SDM845, SDX50M, SDX55, SDX55M, SM6125, SM6150, SM6250, SM6250P, SM7125, SM7150, SM7150P, SM8150, SM8150P

• CWE-20

• https://blog.checkpoint.com/2020/08/06/achilles-small-chip-big-peril/Third Party Advisory
• https://research.checkpoint.com/2021/pwn2own-qualcomm-dsp/Exploit, Third Party Advisory
• https://www.qualcomm.com/company/product-security/bulletins/november-2020-bulletinBroken Link, Vendor Advisory
• https://blog.checkpoint.com/2020/08/06/achilles-small-chip-big-peril/Third Party Advisory
• https://research.checkpoint.com/2021/pwn2own-qualcomm-dsp/Exploit, Third Party Advisory
• https://www.qualcomm.com/company/product-security/bulletins/november-2020-bulletinBroken Link, Vendor Advisory

Published

Nov 12, 2020

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2020-11196u'Integer overflow to buffer overflow occurs while playback …9.8
• CVE-2020-11197Possible integer overflow can occur when stream info update …9.8
• CVE-2020-11198Key material used for TZ diag buffer encryption and other da…6.7
• CVE-2020-11199HLOS to access EL3 stack canary by just mapping imem region …5.5
• CVE-2020-1120A denial of service vulnerability exists when Connected User…5.5
• CVE-2020-11200Buffer over-read while parsing RPS due to lack of check of i…7.5
• CVE-2020-11202Buffer overflow/underflow occurs when typecasting the buffer…7.8
• CVE-2020-11203Stack overflow may occur if GSM/WCDMA broadcast config size …7.1
• CVE-2020-11204Possible memory corruption and information leakage in sub-sy…7.8
• CVE-2020-11205u'Possible integer overflow to heap overflow while processin…7.8
• CVE-2020-11206Possible buffer overflow in Fastrpc while handling received …7.8
• CVE-2020-11207Buffer overflow in LibFastCV library due to improper size ch…7.8