CVE-2020-3692
CRITICALSnapdragon Auto Snapdragon Compute Snapdragon Consumer IOT Snapdrag...
Title source: llmDescription
u'Possible buffer overflow while updating output buffer for IMEI and Gateway Address due to lack of check of input validation for parameters received from server' in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile in Agatti, Kamorta, Nicobar, QCM6125, QCS610, Rennell, SA415M, Saipan, SC7180, SC8180X, SDX24, SDX55, SM6150, SM7150, SM8150, SM8250, SXR2130
References (2)
Core 2
Core References
Broken Link x_refsource_confirm
https://www.qualcomm.com/company/product-security/bulletins/october-2020-bulletin
Scores
CVSS v3
9.8
EPSS
0.0036
EPSS Percentile
57.8%
Attack Vector
NETWORK
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Details
CWE
CWE-120
Status
published
Products (17)
qualcomm/agatti_firmware
qualcomm/kamorta_firmware
qualcomm/nicobar_firmware
qualcomm/qcm6125_firmware
qualcomm/qcs610_firmware
qualcomm/rennell_firmware
qualcomm/sa415m_firmware
qualcomm/saipan_firmware
qualcomm/sc7180_firmware
qualcomm/sc8180x_firmware
... and 7 more
Published
Nov 02, 2020
Tracked Since
Feb 18, 2026