PT-2020-17610 · Qualcomm · Qualcomm Snapdragon

Published 2020-09-08 · Updated 2021-07-21 · CVE-2020-3643

Positive Technologies (AI Summary)

CVSS v2.0

2.1

Low

Base vector

AV:L/AC:L/Au:N/C:P/I:N/A:N

Name of the Vulnerable Software and Affected Versions Qualcomm Snapdragon versions (multiple, including Auto, Compute, Connectivity, Consumer IOT, Industrial IOT, Mobile, Voice & Music, Wearables, Wired Infrastructure and Networking) in various chipsets (APQ8009, APQ8017, APQ8053, APQ8076, APQ8096AU, APQ8098, IPQ6018, Kamorta, MDM9150, MDM9205, MDM9206, MDM9607, MDM9650, MSM8905, MSM8909, MSM8917, MSM8920, MSM8937, MSM8940, MSM8953, MSM8996, MSM8996AU, MSM8998, Nicobar, QCM2150, QCS404, QCS405, QCS605, QCS610, QM215, Rennell, SA415M, SA515M, SA6155P, SC7180, SC8180X, SDA660, SDA845, SDM429, SDM429W, SDM439, SDM450, SDM630, SDM632, SDM636, SDM660, SDM670, SDM710, SDM845, SDM850, SDX24, SDX55, SM6150, SM7150, SM8150, SM8250, SXR1130, SXR2130)

Description An information disclosure issue can occur due to partial secure display-touch session tear-down in various Qualcomm Snapdragon chipsets.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Information Disclosure

Improper Resource Release

Weakness Enumeration

CWE-200

CWE-404

Related Identifiers

CVE-2020-3643

Affected Products

Qualcomm Snapdragon

References · 3

• https://nvd.nist.gov/vuln/detail/CVE-2020-3643 · Security Note
• https://qualcomm.com/company/product-security/bulletins/august-2020-security-bulletin · Vendor Advisory
• https://qualcomm.com/company/product-security/bulletins/august-2020-bulletin · Note