{"id":"CVE-2020-11209","url":"https://www.cyber-defence.io/tools/cve/CVE-2020-11209","generatedAt":"2026-10-27T23:26:34.511Z","title":"Improper authorization in DSP process could allow unauthorized users to downgrade the library versions in SD820, SD821, SD820, QCS603, QCS605, SDA855, SA6155P, SA6145P, SA6155, SA6155P, SD855, SD 675, SD660, SD429, SD439","description":"Improper authorization in DSP process could allow unauthorized users to downgrade the library versions in SD820, SD821, SD820, QCS603, QCS605, SDA855, SA6155P, SA6145P, SA6155, SA6155P, SD855, SD 675, SD660, SD429, SD439","published":"2020-11-12T10:15:13.000Z","lastModified":"2026-06-17T02:49:34.000Z","status":"Modified","sourceIdentifier":"product-security@qualcomm.com","cvss":{"version":"3.1","score":5.5,"severity":"MEDIUM","vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N"},"cwe":["CWE-863"],"affected":["qualcomm/sd820 firmware","qualcomm/sd821 firmware","qualcomm/qcs603 firmware","qualcomm/qcs605 firmware","qualcomm/sda855 firmware","qualcomm/sa6155p firmware","qualcomm/sa6145p firmware","qualcomm/sa6155 firmware","qualcomm/sd855 firmware","qualcomm/sd 675 firmware","qualcomm/sd660 firmware","qualcomm/sd429 firmware","qualcomm/sd439 firmware"],"epss":{"score":0.01568,"percentile":0.75162,"date":"2026-10-26","history":[]},"kev":{"listed":false},"exploits":{"count":0,"verified":false,"firstPublished":null,"source":"Exploit-DB (https://gitlab.com/exploit-database/exploitdb)","entries":[]},"verdict":{"level":"low","text":"Lower severity and a low EPSS score (1.57%). Track it; it rarely justifies an emergency change on its own."},"changes":[],"references":[{"url":"https://blog.checkpoint.com/2020/08/06/achilles-small-chip-big-peril/","tags":["Third Party Advisory"],"source":"product-security@qualcomm.com"},{"url":"https://research.checkpoint.com/2021/pwn2own-qualcomm-dsp/","tags":["Exploit","Third Party Advisory"],"source":"product-security@qualcomm.com"},{"url":"https://www.qualcomm.com/company/product-security/bulletins/november-2020-bulletin","tags":["Broken Link","Vendor Advisory"],"source":"product-security@qualcomm.com"},{"url":"https://blog.checkpoint.com/2020/08/06/achilles-small-chip-big-peril/","tags":["Third Party Advisory"],"source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://research.checkpoint.com/2021/pwn2own-qualcomm-dsp/","tags":["Exploit","Third Party Advisory"],"source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.qualcomm.com/company/product-security/bulletins/november-2020-bulletin","tags":["Broken Link","Vendor Advisory"],"source":"af854a3a-2127-422b-91ae-364da2661108"}],"sources":{"nvd":"https://nvd.nist.gov/vuln/detail/CVE-2020-11209","epss":"https://www.first.org/epss/","kev":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog","exploitdb":"https://www.exploit-db.com/"},"licence":"CC BY 4.0 — link back to the CVE Explorer if you publish the results; upstream data remains subject to its own terms."}