CVE-2020-3676

Possible memory corruption in perfservice due to improper validation array length taken from user application. in Snapdragon Auto, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile in APQ8096AU, APQ8098, Kamorta, MSM8917, MSM8920, MSM8937, MSM8940, MSM8953, MSM8998, Nicobar, QCM2150, QCS605, QM215, Rennell, Saipan, SDM429, SDM439, SDM450, SDM630, SDM632, SDM636, SDM660, SDM670, SDM710, SM6150, SM7150, SM8150, SM8250, SXR1130, SXR2130

Score

CVSS 3.1 7.8 High

Status

Modified - product-security@qualcomm.com

Published

2020-06-22

Last modified

2024-08-04

Weaknesses

CWE-20, CWE-787

Affected products

• Apq8096au Firmware (Qualcomm)
• Apq8098 Firmware (Qualcomm)
• Kamorta Firmware (Qualcomm)
• Msm8917 Firmware (Qualcomm)
• Msm8920 Firmware (Qualcomm)
• Msm8937 Firmware (Qualcomm)
• Msm8940 Firmware (Qualcomm)
• Msm8953 Firmware (Qualcomm)
• Msm8998 Firmware (Qualcomm)
• Nicobar Firmware (Qualcomm)
• Qcm2150 Firmware (Qualcomm)
• Qcs605 Firmware (Qualcomm)
• Qm215 Firmware (Qualcomm)
• Rennell Firmware (Qualcomm)
• Saipan Firmware (Qualcomm)
• Sdm429 Firmware (Qualcomm)
• Sdm439 Firmware (Qualcomm)
• Sdm450 Firmware (Qualcomm)
• Sdm630 Firmware (Qualcomm)
• Sdm632 Firmware (Qualcomm)
• Sdm636 Firmware (Qualcomm)
• Sdm660 Firmware (Qualcomm)
• Sdm670 Firmware (Qualcomm)
• Sdm710 Firmware (Qualcomm)
• Sm6150 Firmware (Qualcomm)
• Sm7150 Firmware (Qualcomm)
• Sm8150 Firmware (Qualcomm)
• Sm8250 Firmware (Qualcomm)
• Sxr1130 Firmware (Qualcomm)
• Sxr2130 Firmware (Qualcomm)
• Snapdragon Auto (Qualcomm Inc.)
• Snapdragon Consumer Iot (Qualcomm Inc.)
• Snapdragon Industrial Iot (Qualcomm Inc.)
• Snapdragon Mobile (Qualcomm Inc.)

References

• https://www.qualcomm.com/company/product-security/bulletins/june-2020-bulletin
• https://www.qualcomm.com/company/product-security/bulletins/june-2020-security-bulletin