CVE-2020-3703

🗓️ 02 Nov 2020 06:21:32Reported by qualcommType

Buffer over-read in Bluetooth peripheral firmware due to lack of check for invalid opcode and length of opcode received from central devic

Reporter	Title	Published	Views	Family All 6
Cvelist	CVE-2020-3703	2 Nov 202006:21	–	cvelist
EUVD	EUVD-2020-24974	7 Oct 202500:30	–	euvd
NCSC	Vulnerabilities fixed in Android	6 Oct 202000:00	–	ncsc
NVD	CVE-2020-3703	2 Nov 202007:15	–	nvd
Prion	Design/Logic Flaw	2 Nov 202007:15	–	prion
RedhatCVE	CVE-2020-3703	22 May 202517:48	–	redhatcve

NVD

Node

qualcomm apq8053_firmwareMatch-

AND

qualcomm apq8053Match-

Node

qualcomm apq8076_firmwareMatch-

AND

qualcomm apq8076Match-

Node

qualcomm ar9344_firmwareMatch-

AND

qualcomm ar9344Match-

Node

qualcomm bitra_firmwareMatch-

AND

qualcomm bitraMatch-

Node

qualcomm kamorta_firmwareMatch-

AND

qualcomm kamortaMatch-

Node

qualcomm mdm9206_firmwareMatch-

AND

qualcomm mdm9206Match-

Node

qualcomm mdm9207c_firmwareMatch-

AND

qualcomm mdm9207cMatch-

Node

qualcomm mdm9607_firmwareMatch-

AND

qualcomm mdm9607Match-

Node

qualcomm msm8905_firmwareMatch-

AND

qualcomm msm8905Match-

Node

qualcomm msm8917_firmwareMatch-

AND

qualcomm msm8917Match-

Node

qualcomm msm8937_firmwareMatch-

AND

qualcomm msm8937Match-

Node

qualcomm msm8940_firmwareMatch-

AND

qualcomm msm8940Match-

Node

qualcomm msm8953_firmwareMatch-

AND

qualcomm msm8953Match-

Node

qualcomm nicobar_firmwareMatch-

AND

qualcomm nicobarMatch-

Node

qualcomm qca6174a_firmwareMatch-

AND

qualcomm qca6174aMatch-

Node

qualcomm qca9377_firmwareMatch-

AND

qualcomm qca9377Match-

Node

qualcomm qcm2150_firmwareMatch-

AND

qualcomm qcm2150Match-

Node

qualcomm qcm6125_firmwareMatch-

AND

qualcomm qcm6125Match-

Node

qualcomm qcs404_firmwareMatch-

AND

qualcomm qcs404Match-

Node

qualcomm qcs405_firmwareMatch-

AND

qualcomm qcs405Match-

Node

qualcomm qcs605_firmwareMatch-

AND

qualcomm qcs605Match-

Node

qualcomm qcs610_firmwareMatch-

AND

qualcomm qcs610Match-

Node

qualcomm qm215_firmwareMatch-

AND

qualcomm qm215Match-

Node

qualcomm rennell_firmwareMatch-

AND

qualcomm rennellMatch-

Node

qualcomm sc8180x_firmwareMatch-

AND

qualcomm sc8180xMatch-

Node

qualcomm sdm429_firmwareMatch-

AND

qualcomm sdm429Match-

Node

qualcomm sdm439_firmwareMatch-

AND

qualcomm sdm439Match-

Node

qualcomm sdm450_firmwareMatch-

AND

qualcomm sdm450Match-

Node

qualcomm sdm630_firmwareMatch-

AND

qualcomm sdm630Match-

Node

qualcomm sdm632_firmwareMatch-

AND

qualcomm sdm632Match-

Node

qualcomm sdm636_firmwareMatch-

AND

qualcomm sdm636Match-

Node

qualcomm sdm660_firmwareMatch-

AND

qualcomm sdm660Match-

Node

qualcomm sdm670_firmwareMatch-

AND

qualcomm sdm670Match-

Node

qualcomm sdm710_firmwareMatch-

AND

qualcomm sdm710Match-

Node

qualcomm sdm845_firmwareMatch-

AND

qualcomm sdm845Match-

Node

qualcomm sdx20_firmwareMatch-

AND

qualcomm sdx20Match-

Node

qualcomm sdx24_firmwareMatch-

AND

qualcomm sdx24Match-

Node

qualcomm sm6150_firmwareMatch-

AND

qualcomm sm6150Match-

Node

qualcomm sm7150_firmwareMatch-

AND

qualcomm sm7150Match-

Node

qualcomm sm8150_firmwareMatch-

AND

qualcomm sm8150Match-

Node

qualcomm sxr1130_firmwareMatch-

AND

qualcomm sxr1130Match-

[
  {
    "product": "Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon IoT, Snapdragon Mobile, Snapdragon Voice & Music",
    "vendor": "Qualcomm, Inc.",
    "versions": [
      {
        "status": "affected",
        "version": "APQ8053, APQ8076, AR9344, Bitra, Kamorta, MDM9206, MDM9207C, MDM9607, MSM8905, MSM8917, MSM8937, MSM8940, MSM8953, Nicobar, QCA6174A, QCA9377, QCM2150, QCM6125, QCS404, QCS405, QCS605, QCS610, QM215, Rennell, SC8180X, SDM429, SDM439, SDM450, SDM630, SDM632, SDM636, SDM660, SDM670, SDM710, SDM845, SDX20, SDX24, SM6150, SM7150, SM8150, SXR1130"
      }
    ]
  }
]

Source	Link
qualcomm	www.qualcomm.com/company/product-security/bulletins/october-2020-bulletin
qualcomm	www.qualcomm.com/company/product-security/bulletins/october-2020-security-bulletin

21 Nov 2024 05:31Current

7.4High risk

Vulners AI Score7.4

CVSS 27.5

CVSS 3.19.8

EPSS0.00294