CVE-2020-3668

CRITICAL

Snapdragon Auto Snapdragon Compute Snapdragon Connectivity Snapdrag...

Title source: llm
STIX 2.1

Description

u'Buffer overflow while parsing PMF enabled MCBC frames due to frame length being lesser than what is expected while parsing' in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wired Infrastructure and Networking in IPQ6018, IPQ8074, Kamorta, Nicobar, QCA6390, QCA8081, QCN7605, QCS404, QCS405, QCS605, Rennell, SA415M, SC7180, SC8180X, SDA845, SDM670, SDM710, SDM845, SDM850, SM6150, SM7150, SM8150, SXR1130

References (1)

Core 1
Core References

Scores

CVSS v3 9.8
EPSS 0.0045
EPSS Percentile 63.8%
Attack Vector NETWORK
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Details

CWE
CWE-120
Status published
Products (23)
qualcomm/ipq6018_firmware
qualcomm/ipq8074_firmware
qualcomm/kamorta_firmware
qualcomm/nicobar_firmware
qualcomm/qca6390_firmware
qualcomm/qca8081_firmware
qualcomm/qcn7605_firmware
qualcomm/qcs404_firmware
qualcomm/qcs405_firmware
qualcomm/qcs605_firmware
... and 13 more
Published Sep 08, 2020
Tracked Since Feb 18, 2026