PT-2020-17683 · Qualcomm · Sdm710+22

Jun Yao · Published 2020-06-02 · Updated 2020-12-25 · CVE-2020-3680

Positive Technologies (AI Summary)

CVSS v2.0

6.9

Medium

Base vector

AV:L/AC:M/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions Qualcomm Snapdragon versions (affected versions not specified)

Description A race condition can occur when using the fastrpc memory mapping API. This issue affects various Qualcomm Snapdragon products, including Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, and Snapdragon Wearables, in multiple chipsets such as APQ8009, APQ8053, MSM8909W, MSM8917, MSM8953, QCS605, QM215, SA415M, SDM429, SDM429W, SDM439, SDM450, SDM632, SDM670, SDM710, SDM845, SDX24, and SXR1130.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Time Of Check To Time Of Use

Weakness Enumeration

CWE-367

Related Identifiers

CVE-2020-3680

Affected Products

Apq8009

Apq8053

Msm8909W

Msm8917

Msm8953

Qcs605

Qm215

Sa415M

Sdm429

Sdm439

Sdm450

Sdm632

Sdm670

Sdm710

Sdm845

Sdx24

Sxr1130

Snapdragon Auto

Snapdragon Compute

Snapdragon Consumer Iot

Snapdragon Industrial Iot

Snapdragon Mobile

Snapdragon Wearables

References · 3

• https://nvd.nist.gov/vuln/detail/CVE-2020-3680 · Security Note
• https://qualcomm.com/company/product-security/bulletins/may-2020-bulletin · Vendor Advisory
• https://t.me/cybersecuritytechnologies/2363 · Telegram Post