CVE-2020-3632

u'Incorrect validation of ring context fetched from host memory can lead to memory overflow' in Snapdragon Compute, Snapdragon Mobile in QSM8350, SC7180, SDX55, SDX55M, SM6150, SM6250, SM6250P, SM7125, SM7150, SM7150P, SM7250, SM7250P, SM8150, SM8150P, SM8250, SM8350, SM8350P, SXR2130, SXR2130P

Score

CVSS 3.1 7.8 High

Status

Modified - product-security@qualcomm.com

Published

2020-11-12

Last modified

2024-08-04

Weaknesses

CWE-129

Affected products

• Qsm8350 Firmware (Qualcomm)
• Sc7180 Firmware (Qualcomm)
• Sdx55 Firmware (Qualcomm)
• Sdx55m Firmware (Qualcomm)
• Sm6150 Firmware (Qualcomm)
• Sm6250 Firmware (Qualcomm)
• Sm6250p Firmware (Qualcomm)
• Sm7125 Firmware (Qualcomm)
• Sm7150 Firmware (Qualcomm)
• Sm7150p Firmware (Qualcomm)
• Sm7250 Firmware (Qualcomm)
• Sm7250p Firmware (Qualcomm)
• Sm8150 Firmware (Qualcomm)
• Sm8150p Firmware (Qualcomm)
• Sm8250 Firmware (Qualcomm)
• Sm8350 Firmware (Qualcomm)
• Sm8350p Firmware (Qualcomm)
• Sxr2130 Firmware (Qualcomm)
• Sxr2130p Firmware (Qualcomm)
• Snapdragon Compute (Qualcomm Inc.)
• Snapdragon Mobile (Qualcomm Inc.)

References

• https://www.qualcomm.com/company/product-security/bulletins/november-2020-bulletin