CVEvulnerability

CVE-2020-3648

7.8 HIGH Published 2020-09-08 Modified 2026-06-17 Official page ↗
Status
Modified
Published
2020-09-08
Last modified
2026-06-17
Assigner
[email protected]
CVSS 3.1 ([email protected])
7.8 HIGH — CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
CVSS 2.0 ([email protected])
4.6 MEDIUM — AV:L/AC:L/Au:N/C:P/I:P/A:P
Weaknesses
CWE-20, CWE-787

Description

u'Possible out of bound write in DSP driver code due to lack of check of data received from user' in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables in MSM8909W

Affected configurations

• qualcomm msm8909w firmware

Related

Weakness · CWE (2)

  • CWE-20 Improper Input Validation weakness
  • CWE-787 Out-of-bounds Write weakness

References