Description
Possible buffer over-read in windows wlan driver function due to lack of check of length of variable received from userspace in Snapdragon Compute, Snapdragon Connectivity in MSM8998, QCA6390, SC7180, SC8180X, SDM850
References (1)
Core 1
Core References
Vendor Advisory x_refsource_confirm
https://www.qualcomm.com/company/product-security/bulletins/april-2020-bulletin
Scores
CVSS v3
9.1
EPSS
0.0024
EPSS Percentile
46.9%
Attack Vector
NETWORK
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H
Details
CWE
CWE-125
CWE-20
Status
published
Products (5)
qualcomm/msm8998_firmware
qualcomm/qca6390_firmware
qualcomm/sc7180_firmware
qualcomm/sc8180x_firmware
qualcomm/sdm850_firmware
Published
Apr 16, 2020
Tracked Since
Feb 18, 2026