CVE-2020-3648

HIGH

Qualcomm MSM8909W Firmware - Out-of-Bounds Write in DSP Driver

Title source: llm
STIX 2.1

Description

u'Possible out of bound write in DSP driver code due to lack of check of data received from user' in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables in MSM8909W

References (2)

Core 2

Scores

CVSS v3 7.8
EPSS 0.0010
EPSS Percentile 27.5%
Attack Vector LOCAL
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Details

CWE
CWE-20 CWE-787
Status published
Products (1)
qualcomm/msm8909w_firmware
Published Sep 08, 2020
Tracked Since Feb 18, 2026