PT-2020-17663 · Qualcomm · Qcm2150+33
Published
2020-09-09
·
Updated
2020-09-14
·
CVE-2020-3656
CVSS v2.0
7.2
High
| Vector | AV:L/AC:L/Au:N/C:C/I:C/A:C |
Name of the Vulnerable Software and Affected Versions
Qualcomm Snapdragon Auto versions (affected versions not specified)
Qualcomm Snapdragon Compute versions (affected versions not specified)
Qualcomm Snapdragon Consumer IOT versions (affected versions not specified)
Qualcomm Snapdragon Industrial IOT versions (affected versions not specified)
Qualcomm Snapdragon Mobile versions (affected versions not specified)
Qualcomm Snapdragon Voice & Music versions (affected versions not specified)
Qualcomm Snapdragon Wearables versions (affected versions not specified)
APQ8009 (affected versions not specified)
Kamorta (affected versions not specified)
MDM9607 (affected versions not specified)
MSM8917 (affected versions not specified)
MSM8953 (affected versions not specified)
Nicobar (affected versions not specified)
QCM2150 (affected versions not specified)
QCS405 (affected versions not specified)
QCS605 (affected versions not specified)
QM215 (affected versions not specified)
Rennell (affected versions not specified)
SA6155P (affected versions not specified)
SA8155P (affected versions not specified)
Saipan (affected versions not specified)
SC8180X (affected versions not specified)
SDM429 (affected versions not specified)
SDM429W (affected versions not specified)
SDM439 (affected versions not specified)
SDM450 (affected versions not specified)
SDM632 (affected versions not specified)
SDM710 (affected versions not specified)
SDM845 (affected versions not specified)
SDX55 (affected versions not specified)
SM6150 (affected versions not specified)
SM7150 (affected versions not specified)
SM8150 (affected versions not specified)
SM8250 (affected versions not specified)
SXR2130 (affected versions not specified)
Description
The issue is related to out of bound access in the MHI command process due to a lack of check of the command channel id value received from MHI devices. This affects various Qualcomm Snapdragon products and specific device models.
Recommendations
At the moment, there is no information about a newer version that contains a fix for this vulnerability.
Buffer Overflow
Found an issue in the description? Have something to add? Feel free to write us 👾
Weakness Enumeration
Related Identifiers
Affected Products
Apq8009
Kamorta
Mdm9607
Msm8917
Msm8953
Nicobar
Qcm2150
Qcs405
Qcs605
Qm215
Qualcomm Snapdragon Auto
Qualcomm Snapdragon Compute
Qualcomm Snapdragon Consumer Iot
Qualcomm Snapdragon Industrial Iot
Qualcomm Snapdragon Mobile
Qualcomm Snapdragon Voice & Music
Qualcomm Snapdragon Wearables
Rennell
Sa6155P
Sa8155P
Sc8180X
Sdm429
Sdm439
Sdm450
Sdm632
Sdm710
Sdm845
Sdx55
Sm6150
Sm7150
Sm8150
Sm8250
Sxr2130
Saipan