CVE-2020-3645

HIGH

Qualcomm Snapdragon Firmware - Reachable Assertion via FILS IE Encrypted Data Length

Title source: llm
STIX 2.1

Description

Firmware will hit assert in WLAN firmware If encrypted data length in FILS IE of reassoc response is more than 528 bytes in Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wired Infrastructure and Networking in IPQ6018, IPQ8074, Kamorta, Nicobar, QCA6390, QCA8081, QCN7605, QCS404, QCS405, QCS605, Rennell, SC7180, SC8180X, SDA845, SDM670, SDM710, SDM845, SDM850, SM6150, SM7150, SM8150, SXR1130, SXR2130

References (1)

Core 1
Core References

Scores

CVSS v3 7.5
EPSS 0.0037
EPSS Percentile 58.9%
Attack Vector NETWORK
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Details

CWE
CWE-617
Status published
Products (23)
qualcomm/ipq6018_firmware
qualcomm/ipq8074_firmware
qualcomm/kamorta_firmware
qualcomm/nicobar_firmware
qualcomm/qca6390_firmware
qualcomm/qca8081_firmware
qualcomm/qcn7605_firmware
qualcomm/qcs404_firmware
qualcomm/qcs405_firmware
qualcomm/qcs605_firmware
... and 13 more
Published Jun 02, 2020
Tracked Since Feb 18, 2026