PT-2020-17604 · Qualcomm · Qcs610+14

Published 2020-09-08 · Updated 2020-09-14 · CVE-2020-3636

Positive Technologies (AI Summary)

CVSS v2.0

4.6

Medium

Base vector

AV:L/AC:L/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions Qualcomm Snapdragon versions (affected versions not specified)

Description The issue occurs due to out of bound writes when accessing the usage table header entry beyond the allocated memory for the header. This affects various Qualcomm Snapdragon products, including Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon Mobile, and Snapdragon Wired Infrastructure and Networking, in specific chipsets such as Kamorta, QCS404, QCS610, Rennell, SC7180, SDX55, SM6150, SM7150, SM8250, and SXR2130.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Related Identifiers

CVE-2020-3636

Affected Products

Kamorta

Qcs404

Qcs610

Rennell

Sc7180

Sdx55

Sm6150

Sm7150

Sm8250

Sxr2130

Snapdragon Auto

Snapdragon Compute

Snapdragon Consumer Iot

Snapdragon Mobile

Snapdragon Wired Infrastructure/Networking

References · 3

• https://nvd.nist.gov/vuln/detail/CVE-2020-3636 · Security Note
• https://qualcomm.com/company/product-security/bulletins/august-2020-security-bulletin · Vendor Advisory
• https://qualcomm.com/company/product-security/bulletins/august-2020-bulletin · Note