VULNERABILITY INTELLIGENCE

CVE-2020-11209

CVSS score5.5 MEDIUM

EPSS probability1.57%

CISA KEVNot currently listed

Published2020-11-12

Last modified2026-06-17

CVSS vectorCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N

Description

Improper authorization in DSP process could allow unauthorized users to downgrade the library versions in SD820, SD821, SD820, QCS603, QCS605, SDA855, SA6155P, SA6145P, SA6155, SA6155P, SD855, SD 675, SD660, SD429, SD439

Weakness classification

CWE-863: Incorrect Authorization

Primary references

product-security@qualcomm.com — Third Party Advisory
product-security@qualcomm.com — Exploit, Third Party Advisory
product-security@qualcomm.com — Broken Link, Vendor Advisory
af854a3a-2127-422b-91ae-364da2661108 — Third Party Advisory
af854a3a-2127-422b-91ae-364da2661108 — Exploit, Third Party Advisory
af854a3a-2127-422b-91ae-364da2661108 — Broken Link, Vendor Advisory