CVE-2020-3617

🗓️ 09 Sep 2020 06:25:20Reported by qualcommType

Buffer over-read in Q6 testbus framework due to incomplete validation of diag packet length in Snapdrago

Reporter	Title	Published	Views	Family All 7
Cvelist	CVE-2020-3617	9 Sep 202006:25	–	cvelist
EUVD	EUVD-2020-24888	7 Oct 202500:30	–	euvd
NCSC	Vulnerabilities fixed in Android	10 Sep 202000:00	–	ncsc
NCSC	Vulnerabilities fixed in Samsung Mobile	7 Oct 202000:00	–	ncsc
NVD	CVE-2020-3617	9 Sep 202007:15	–	nvd
Prion	Information disclosure	9 Sep 202007:15	–	prion
RedhatCVE	CVE-2020-3617	22 May 202515:33	–	redhatcve

NVD

Node

qualcomm kamorta_firmwareMatch-

AND

qualcomm kamortaMatch-

Node

qualcomm nicobar_firmwareMatch-

AND

qualcomm nicobarMatch-

Node

qualcomm qcs605_firmwareMatch-

AND

qualcomm qcs605Match-

Node

qualcomm qcs610_firmwareMatch-

AND

qualcomm qcs610Match-

Node

qualcomm rennell_firmwareMatch-

AND

qualcomm rennellMatch-

Node

qualcomm sc7180_firmwareMatch-

AND

qualcomm sc7180Match-

Node

qualcomm sda660_firmwareMatch-

AND

qualcomm sda660Match-

Node

qualcomm sdm630_firmwareMatch-

AND

qualcomm sdm630Match-

Node

qualcomm sdm636_firmwareMatch-

AND

qualcomm sdm636Match-

Node

qualcomm sdm660_firmwareMatch-

AND

qualcomm sdm660Match-

Node

qualcomm sdm670_firmwareMatch-

AND

qualcomm sdm670Match-

Node

qualcomm sdm710_firmwareMatch-

AND

qualcomm sdm710Match-

Node

qualcomm sm6150_firmwareMatch-

AND

qualcomm sm6150Match-

Node

qualcomm sm7150_firmwareMatch-

AND

qualcomm sm7150Match-

Node

qualcomm sm8150_firmwareMatch-

AND

qualcomm sm8150Match-

Node

qualcomm sxr1130_firmwareMatch-

AND

qualcomm sxr1130Match-

[
  {
    "product": "Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile",
    "vendor": "Qualcomm, Inc.",
    "versions": [
      {
        "status": "affected",
        "version": "Kamorta, Nicobar, QCS605, QCS610, Rennell, SC7180, SDA660, SDM630, SDM636, SDM660, SDM670, SDM710, SM6150, SM7150, SM8150, SXR1130"
      }
    ]
  }
]

Source	Link
qualcomm	www.qualcomm.com/company/product-security/bulletins/september-2020-bulletin

21 Nov 2024 05:31Current

7High risk

Vulners AI Score7

CVSS 26.6

CVSS 3.17.1

EPSS0.00033