PT-2020-17679 · Qualcomm · Snapdragon Wearables+14

Published 2020-09-09 · Updated 2021-07-21 · CVE-2020-3674

Positive Technologies (AI Summary)

CVSS v2.0

2.1

Low

Base vector

AV:L/AC:L/Au:N/C:P/I:N/A:N

Name of the Vulnerable Software and Affected Versions Qualcomm Snapdragon versions (affected versions not specified)

Description Information can leak into userspace due to improper transfer of data from kernel to userspace. This issue affects various Qualcomm Snapdragon products, including Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, and Snapdragon Wearables, in specific chipsets such as Nicobar, QCS405, Saipan, SC8180X, SDX55, SM8150, SM8250, and SXR2130.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Out of bounds Read

Weakness Enumeration

CWE-125

Related Identifiers

CVE-2020-3674

Affected Products

Nicobar

Qcs405

Sc8180X

Sdx55

Sm8150

Sm8250

Sxr2130

Saipan

Snapdragon Auto

Snapdragon Compute

Snapdragon Consumer Iot

Snapdragon Industrial Iot

Snapdragon Mobile

Snapdragon Voice & Music

Snapdragon Wearables

References · 2

• https://nvd.nist.gov/vuln/detail/CVE-2020-3674 · Security Note
• https://qualcomm.com/company/product-security/bulletins/september-2020-bulletin · Vendor Advisory