PT-2020-17677 · Qualcomm · Snapdragon

Published 2020-07-30 · Updated 2020-07-30 · CVE-2020-3671

Positive Technologies (AI Summary)

CVSS v2.0

7.5

High

Base vector

AV:N/AC:L/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions Qualcomm Snapdragon versions (affected versions not specified)

Description A use-after-free issue could occur due to a dangling pointer when generating a frame buffer in OpenGL ES. This issue affects various Qualcomm Snapdragon products, including Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, and Snapdragon Voice & Music, in several chipsets such as APQ8009, Nicobar, QCM2150, QCS405, Saipan, SDM845, SM8150, SM8250, and SXR2130.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Use After Free

Weakness Enumeration

CWE-416

Related Identifiers

CVE-2020-3671

Affected Products

Snapdragon

References · 3

• https://qualcomm.com/company/product-security/bulletins/july-2020-security-bulletin · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2020-3671 · Security Note
• https://qualcomm.com/company/product-security/bulletins/july-2020-bulletin · Note