CVE-2020-3700

HIGH

Snapdragon Auto Snapdragon Compute Snapdragon Connectivity Snapdrag...

Title source: llm
STIX 2.1

Description

Possible out of bounds read due to a missing bounds check and could lead to local information disclosure in the wifi driver with no additional execution privileges needed in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables, Snapdragon Wired Infrastructure and Networking in APQ8053, APQ8096AU, IPQ4019, IPQ8064, IPQ8074, MDM9607, MSM8909W, MSM8996AU, QCA6574AU, QCA9531, QCA9558, QCA9980, SC8180X, SDM439, SDX55, SM8150, SM8250, SXR2130

References (2)

Core 2

Scores

CVSS v3 7.5
EPSS 0.0047
EPSS Percentile 64.5%
Attack Vector NETWORK
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

Details

CWE
CWE-125
Status published
Products (18)
qualcomm/apq8053_firmware
qualcomm/apq8096au_firmware
qualcomm/ipq4019_firmware
qualcomm/ipq8064_firmware
qualcomm/ipq8074_firmware
qualcomm/mdm9607_firmware
qualcomm/msm8909w_firmware
qualcomm/msm8996au_firmware
qualcomm/qca6574au_firmware
qualcomm/qca9531_firmware
... and 8 more
Published Jul 30, 2020
Tracked Since Feb 18, 2026