Description
Kernel memory error in debug module due to improper check of user data length before copying into memory in Snapdragon Auto, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile in APQ8096AU, APQ8098, MSM8996AU, QCN7605, SDM439, SDX24, SM8150
References (1)
Core 1
Core References
Patch, Vendor Advisory x_refsource_confirm
https://www.qualcomm.com/company/product-security/bulletins/april-2020-bulletin
Scores
CVSS v3
7.8
EPSS
0.0004
EPSS Percentile
13.0%
Attack Vector
LOCAL
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Details
CWE
CWE-120
Status
published
Products (7)
qualcomm/apq8096au_firmware
qualcomm/apq8098_firmware
qualcomm/msm8996au_firmware
qualcomm/qcn7605_firmware
qualcomm/sdm439_firmware
qualcomm/sdx24_firmware
qualcomm/sm8150_firmware
Published
Apr 16, 2020
Tracked Since
Feb 18, 2026