CVE-2020-3678

HIGH

Snapdragon - Buffer Overflow

Title source: llm
STIX 2.1

Description

u'A buffer overflow could occur if the API is improperly used due to UIE init does not contain a buffer size a param' in Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Wired Infrastructure and Networking in Agatti, Kamorta, QCS404, QCS605, SDA845, SDM670, SDM710, SDM845, SXR1130

Scores

CVSS v3 7.8
EPSS 0.0013
EPSS Percentile 31.6%
Attack Vector LOCAL
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Details

CWE
CWE-120
Status published
Products (9)
qualcomm/agatti_firmware
qualcomm/kamorta_firmware
qualcomm/qcs404_firmware
qualcomm/qcs605_firmware
qualcomm/sda845_firmware
qualcomm/sdm670_firmware
qualcomm/sdm710_firmware
qualcomm/sdm845_firmware
qualcomm/sxr1130_firmware
Published Nov 02, 2020
Tracked Since Feb 18, 2026