CVEvulnerability
CVE-2020-3674
5.5 MEDIUM
Official page ↗
- Status
- Modified
- Published
- 2020-09-09
- Last modified
- 2026-06-17
- Assigner
- [email protected]
- CVSS 3.1 ([email protected])
- 5.5 MEDIUM — CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
- CVSS 2.0 ([email protected])
- 2.1 LOW — AV:L/AC:L/Au:N/C:P/I:N/A:N
- Weaknesses
- CWE-125
Description
Information can leak into userspace due to improper transfer of data from kernel to userspace in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables in Nicobar, QCS405, Saipan, SC8180X, SDX55, SM8150, SM8250, SXR2130
Affected configurations
• qualcomm nicobar firmware
• qualcomm qcs405 firmware
• qualcomm saipan firmware
• qualcomm sc8180x firmware
• qualcomm sdx55 firmware
• qualcomm sm8150 firmware
• qualcomm sm8250 firmware
• qualcomm sxr2130 firmware
Related
Weakness · CWE (1)
- CWE-125 Out-of-bounds Read weakness
References
- https://www.qualcomm.com/company/product-security/bulletins/september-2020-bulletin Patch, Vendor Advisory
- https://www.qualcomm.com/company/product-security/bulletins/september-2020-bulletin Patch, Vendor Advisory