Lucene search

K
cvelistQualcommCVELIST:CVE-2020-3673
HistoryNov 02, 2020 - 6:21 a.m.

CVE-2020-3673

2020-11-0206:21:29
qualcomm
www.cve.org
5
buffer overflow
sip message
snapdragon auto
snapdragon compute
snapdragon connectivity
snapdragon consumer iot
snapdragon industrial iot
snapdragon mobile
snapdragon wearables
agatti
apq8053
apq8096au
apq8098
bitra
kamorta
msm8905
msm8909w
msm8917
msm8940
msm8953
msm8996au
nicobar
qca6390
qca6574au
qcm2150
qcs605
qm215
rennell
sa6155p
sa8155p
saipan
sda660
sdm429
sdm429w
sdm439
sdm450
sdm630
sdm632
sdm636
sdm660
sdm670
sdm710
sdm845
sm6150
sm7150
sm8150
sm8250
sxr1130
sxr2130

AI Score

9.6

Confidence

High

EPSS

0.003

Percentile

71.2%

u’Buffer overflow can happen as part of SIP message packet processing while storing values in array due to lack of check to validate the index length’ in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Wearables in Agatti, APQ8053, APQ8096AU, APQ8098, Bitra, Kamorta, MSM8905, MSM8909W, MSM8917, MSM8940, MSM8953, MSM8996AU, Nicobar, QCA6390, QCA6574AU, QCM2150, QCS605, QM215, Rennell, SA6155P, SA8155P, Saipan, SDA660, SDM429, SDM429W, SDM439, SDM450, SDM630, SDM632, SDM636, SDM660, SDM670, SDM710, SDM845, SM6150, SM7150, SM8150, SM8250, SXR1130, SXR2130

CNA Affected

[
  {
    "product": "Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Wearables",
    "vendor": "Qualcomm, Inc.",
    "versions": [
      {
        "status": "affected",
        "version": "Agatti, APQ8053, APQ8096AU, APQ8098, Bitra, Kamorta, MSM8905, MSM8909W, MSM8917, MSM8940, MSM8953, MSM8996AU, Nicobar, QCA6390, QCA6574AU, QCM2150, QCS605, QM215, Rennell, SA6155P, SA8155P, Saipan, SDA660, SDM429, SDM429W, SDM439, SDM450, SDM630, SDM632, SDM636, SDM660, SDM670, SDM710, SDM845, SM6150, SM7150, SM8150, SM8250, SXR1130, SXR2130"
      }
    ]
  }
]

AI Score

9.6

Confidence

High

EPSS

0.003

Percentile

71.2%

Related for CVELIST:CVE-2020-3673