PT-2020-17692 · Qualcomm · Qcm2150+33
Published
2020-07-30
·
Updated
2021-07-21
·
CVE-2020-3698
CVSS v2.0
7.5
High
| Vector | AV:N/AC:L/Au:N/C:P/I:P/A:P |
Name of the Vulnerable Software and Affected Versions
Qualcomm Snapdragon Auto versions APQ8009, APQ8017, APQ8053, APQ8096AU, APQ8098, MDM9150, MDM9206, MDM9207C, MDM9607, MDM9650, MSM8905, MSM8909W, MSM8917, MSM8920, MSM8937, MSM8940, MSM8953, MSM8996AU
Qualcomm Snapdragon Compute versions APQ8009, APQ8017, APQ8053, APQ8096AU, APQ8098, MDM9150, MDM9206, MDM9207C, MDM9607, MDM9650, MSM8905, MSM8909W, MSM8917, MSM8920, MSM8937, MSM8940, MSM8953, MSM8996AU
Qualcomm Snapdragon Consumer Electronics Connectivity versions APQ8009, APQ8017, APQ8053, APQ8096AU, APQ8098, MDM9150, MDM9206, MDM9207C, MDM9607, MDM9650, MSM8905, MSM8909W, MSM8917, MSM8920, MSM8937, MSM8940, MSM8953, MSM8996AU
Qualcomm Snapdragon Consumer IOT versions APQ8009, APQ8017, APQ8053, APQ8096AU, APQ8098, MDM9150, MDM9206, MDM9207C, MDM9607, MDM9650, MSM8905, MSM8909W, MSM8917, MSM8920, MSM8937, MSM8940, MSM8953, MSM8996AU
Qualcomm Snapdragon Industrial IOT versions APQ8009, APQ8017, APQ8053, APQ8096AU, APQ8098, MDM9150, MDM9206, MDM9207C, MDM9607, MDM9650, MSM8905, MSM8909W, MSM8917, MSM8920, MSM8937, MSM8940, MSM8953, MSM8996AU
Qualcomm Snapdragon Mobile versions APQ8009, APQ8017, APQ8053, APQ8096AU, APQ8098, MDM9150, MDM9206, MDM9207C, MDM9607, MDM9650, MSM8905, MSM8909W, MSM8917, MSM8920, MSM8937, MSM8940, MSM8953, MSM8996AU
Qualcomm Snapdragon Voice & Music versions APQ8009, APQ8017, APQ8053, APQ8096AU, APQ8098, MDM9150, MDM9206, MDM9207C, MDM9607, MDM9650, MSM8905, MSM8909W, MSM8917, MSM8920, MSM8937, MSM8940, MSM8953, MSM8996AU
Qualcomm Snapdragon Wearables versions APQ8009, APQ8017, APQ8053, APQ8096AU, APQ8098, MDM9150, MDM9206, MDM9207C, MDM9607, MDM9650, MSM8905, MSM8909W, MSM8917, MSM8920, MSM8937, MSM8940, MSM8953, MSM8996AU
Qualcomm QCA6174A
Qualcomm QCA6574AU
Qualcomm QCA9377
Qualcomm QCA9379
Qualcomm QCM2150
Qualcomm QCN7605
Qualcomm QCS405
Qualcomm QCS605
Qualcomm QM215
Qualcomm SA6155P
Qualcomm Saipan
Qualcomm SC8180X
Qualcomm SDA845
Qualcomm SDM429
Qualcomm SDM429W
Qualcomm SDM439
Qualcomm SDM450
Qualcomm SDM630
Qualcomm SDM632
Qualcomm SDM636
Qualcomm SDM660
Qualcomm SDM845
Qualcomm SDX20
Qualcomm SDX55
Qualcomm SM8150
Qualcomm SM8250
Qualcomm SXR2130
Description
The issue is caused by an out of bound write while QoS DSCP mapping due to improper input validation for data received from association response frame. This affects various Qualcomm Snapdragon products, including Auto, Compute, Consumer Electronics Connectivity, Consumer IOT, Industrial IOT, Mobile, Voice & Music, and Wearables, as well as other Qualcomm products.
Recommendations
At the moment, there is no information about a newer version that contains a fix for this vulnerability.
Memory Corruption
RCE
Found an issue in the description? Have something to add? Feel free to write us 👾
Related Identifiers
Affected Products
Qca6174A
Qca6574Au
Qca9377
Qca9379
Qcm2150
Qcn7605
Qcs405
Qcs605
Qm215
Qualcomm Snapdragon Auto
Qualcomm Snapdragon Compute
Qualcomm Snapdragon Consumer Electronics Connectivity
Qualcomm Snapdragon Consumer Iot
Qualcomm Snapdragon Industrial Iot
Qualcomm Snapdragon Mobile
Qualcomm Snapdragon Voice & Music
Qualcomm Snapdragon Wearables
Sa6155P
Sc8180X
Sda845
Sdm429
Sdm439
Sdm450
Sdm630
Sdm632
Sdm636
Sdm660
Sdm845
Sdx20
Sdx55
Sm8150
Sm8250
Sxr2130
Saipan