CVE-2020-3678

2020-11-0206:21:29

qualcomm

www.cve.org

buffer overflow

snapdragon

api

uie init

agatti

kamorta

qcs404

qcs605

sda845

sdm670

sdm710

sdm845

sxr1130

EPSS

Percentile

12.6%

JSON

u’A buffer overflow could occur if the API is improperly used due to UIE init does not contain a buffer size a param’ in Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Wired Infrastructure and Networking in Agatti, Kamorta, QCS404, QCS605, SDA845, SDM670, SDM710, SDM845, SXR1130

CNA Affected

[
  {
    "product": "Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Wired Infrastructure and Networking",
    "vendor": "Qualcomm, Inc.",
    "versions": [
      {
        "status": "affected",
        "version": "Agatti, Kamorta, QCS404, QCS605, SDA845, SDM670, SDM710, SDM845, SXR1130"
      }
    ]
  }
]

References

www.qualcomm.com/company/product-security/bulletins/october-2020-bulletin

EPSS

Percentile

12.6%

JSON

Related for CVELIST:CVE-2020-3678