PT-2020-17695 · Qualcomm · Snapdragon Mobile

Published 2020-07-30 · Updated 2020-07-31 · CVE-2020-3701

Positive Technologies (AI Summary)

CVSS v2.0

4.6

Medium

Base vector

AV:L/AC:L/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions Snapdragon Mobile in Saipan, SM8250, SXR2130 (affected versions not specified)

Description The issue is related to a use after free problem that occurs while processing an error notification from the camx driver. This happens because the sequence data is not properly released.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Use After Free

Weakness Enumeration

CWE-416

Related Identifiers

CVE-2020-3701

Affected Products

Snapdragon Mobile

References · 3

• https://qualcomm.com/company/product-security/bulletins/july-2020-security-bulletin · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2020-3701 · Security Note
• https://qualcomm.com/company/product-security/bulletins/july-2020-bulletin · Note