{"id":"CVE-2020-11206","url":"https://www.cyber-defence.io/tools/cve/CVE-2020-11206","generatedAt":"2026-10-27T22:25:13.138Z","title":"Possible buffer overflow in Fastrpc while handling received parameters due to lack of validation on input parameters' in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile in APQ8098, MSM8998,…","description":"Possible buffer overflow in Fastrpc while handling received parameters due to lack of validation on input parameters' in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile in APQ8098, MSM8998, QCM4290, QCM6125, QCS410, QCS4290, QCS610, QCS6125, QSM8250, QSM8350, SA6145P, SA6150P, SA6155, SA6155P, SA8150P, SA8155, SA8155P, SA8195P, SC7180, SDA640, SDA660, SDA845, SDA855, SDM640, SDM660, SDM830, SDM845, SDM850, SDX50M, SDX55, SDX55M, SM4250, SM4250P, SM6115, SM6115P, SM6125, SM6150, SM6150P, SM6250, SM6250P, SM6350, SM7125, SM7150, SM7150P, SM7225, SM7250, SM7250P, SM8150, SM8150P, SM8250, SM8350, SM8350P, SXR2130, SXR2130P","published":"2020-11-12T10:15:13.000Z","lastModified":"2026-06-17T02:49:34.000Z","status":"Modified","sourceIdentifier":"product-security@qualcomm.com","cvss":{"version":"3.1","score":7.8,"severity":"HIGH","vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H"},"cwe":[],"affected":["qualcomm/apq8098 firmware","qualcomm/msm8998 firmware","qualcomm/qcm4290 firmware","qualcomm/qcm6125 firmware","qualcomm/qcs410 firmware","qualcomm/qcs4290 firmware","qualcomm/qcs610 firmware","qualcomm/qcs6125 firmware","qualcomm/qsm8250 firmware","qualcomm/qsm8350 firmware","qualcomm/sa6145p firmware","qualcomm/sa6150p firmware","qualcomm/sa6155 firmware","qualcomm/sa6155p firmware","qualcomm/sa8150p firmware","qualcomm/sa8155 firmware","qualcomm/sa8155p firmware","qualcomm/sa8195p firmware","qualcomm/sc7180 firmware","qualcomm/sda640 firmware","qualcomm/sda660 firmware","qualcomm/sda845 firmware","qualcomm/sda855 firmware","qualcomm/sdm640 firmware","qualcomm/sdm660 firmware","qualcomm/sdm830 firmware","qualcomm/sdm845 firmware","qualcomm/sdm850 firmware","qualcomm/sdx50m firmware","qualcomm/sdx55 firmware","qualcomm/sdx55m firmware","qualcomm/sm4250 firmware","qualcomm/sm4250p firmware","qualcomm/sm6115 firmware","qualcomm/sm6115p firmware","qualcomm/sm6125 firmware","qualcomm/sm6150 firmware","qualcomm/sm6150p firmware","qualcomm/sm6250 firmware","qualcomm/sm6250p firmware","qualcomm/sm6350 firmware","qualcomm/sm7125 firmware","qualcomm/sm7150 firmware","qualcomm/sm7150p firmware","qualcomm/sm7225 firmware","qualcomm/sm7250 firmware","qualcomm/sm7250p firmware","qualcomm/sm8150 firmware","qualcomm/sm8150p firmware","qualcomm/sm8250 firmware","qualcomm/sm8350 firmware","qualcomm/sm8350p firmware","qualcomm/sxr2130 firmware","qualcomm/sxr2130p firmware"],"epss":{"score":0.01819,"percentile":0.78584,"date":"2026-10-26","history":[]},"kev":{"listed":false},"exploits":{"count":0,"verified":false,"firstPublished":null,"source":"Exploit-DB (https://gitlab.com/exploit-database/exploitdb)","entries":[]},"verdict":{"level":"high","text":"High impact if exploited, but EPSS currently rates exploitation as unlikely (1.82%). Schedule it in the normal patch cycle and watch for a rise in EPSS or a public exploit."},"changes":[],"references":[{"url":"https://blog.checkpoint.com/2020/08/06/achilles-small-chip-big-peril/","tags":["Third Party Advisory"],"source":"product-security@qualcomm.com"},{"url":"https://research.checkpoint.com/2021/pwn2own-qualcomm-dsp/","tags":["Exploit","Third Party Advisory"],"source":"product-security@qualcomm.com"},{"url":"https://www.qualcomm.com/company/product-security/bulletins/november-2020-bulletin","tags":["Vendor Advisory"],"source":"product-security@qualcomm.com"},{"url":"https://blog.checkpoint.com/2020/08/06/achilles-small-chip-big-peril/","tags":["Third Party Advisory"],"source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://research.checkpoint.com/2021/pwn2own-qualcomm-dsp/","tags":["Exploit","Third Party Advisory"],"source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.qualcomm.com/company/product-security/bulletins/november-2020-bulletin","tags":["Vendor Advisory"],"source":"af854a3a-2127-422b-91ae-364da2661108"}],"sources":{"nvd":"https://nvd.nist.gov/vuln/detail/CVE-2020-11206","epss":"https://www.first.org/epss/","kev":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog","exploitdb":"https://www.exploit-db.com/"},"licence":"CC BY 4.0 — link back to the CVE Explorer if you publish the results; upstream data remains subject to its own terms."}