CVE-2020-3679

u'During execution after Address Space Layout Randomization is turned on for QTEE, part of code is still mapped at known address including code segments' in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wired Infrastructure and Networking in Bitra, Kamorta, Nicobar, QCS404, QCS610, Rennell, SA6155P, SA8155P, Saipan, SC7180, SC8180X, SDX55, SM6150, SM7150, SM8150, SM8250, SXR2130

Score

CVSS 3.1 5.5 Medium

Status

Modified - product-security@qualcomm.com

Published

2020-09-09

Last modified

2024-08-04

Affected products

• Bitra Firmware (Qualcomm)
• Kamorta Firmware (Qualcomm)
• Nicobar Firmware (Qualcomm)
• Qcs404 Firmware (Qualcomm)
• Qcs610 Firmware (Qualcomm)
• Rennell Firmware (Qualcomm)
• Sa6155p Firmware (Qualcomm)
• Sa8155p Firmware (Qualcomm)
• Saipan Firmware (Qualcomm)
• Sc7180 Firmware (Qualcomm)
• Sc8180x Firmware (Qualcomm)
• Sdx55 Firmware (Qualcomm)
• Sm6150 Firmware (Qualcomm)
• Sm7150 Firmware (Qualcomm)
• Sm8150 Firmware (Qualcomm)
• Sm8250 Firmware (Qualcomm)
• Sxr2130 Firmware (Qualcomm)
• Snapdragon Auto (Qualcomm Inc.)
• Snapdragon Compute (Qualcomm Inc.)
• Snapdragon Consumer Iot (Qualcomm Inc.)
• Snapdragon Industrial Iot (Qualcomm Inc.)
• Snapdragon Mobile (Qualcomm Inc.)
• Snapdragon Voice Music (Qualcomm Inc.)
• Snapdragon Wired Infrastructure And Networking (Qualcomm Inc.)

References

• https://www.qualcomm.com/company/product-security/bulletins/september-2020-bulletin