9.8
CVSSv3

CVE-2020-3667

Published: 08/09/2020 Updated: 11/09/2020
CVSS v2 Base Score: 10 | Impact Score: 10 | Exploitability Score: 10
CVSS v3 Base Score: 9.8 | Impact Score: 5.9 | Exploitability Score: 3.9
VMScore: 890
Vector: AV:N/AC:L/Au:N/C:C/I:C/A:C

Vulnerability Summary

u'Buffer Overflow in mic calculation for WPA due to copying data into buffer without validating the length of buffer' in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wired Infrastructure and Networking in APQ8098, IPQ5018, IPQ6018, IPQ8074, Kamorta, MSM8998, Nicobar, QCA6390, QCA8081, QCS404, QCS405, QCS605, Rennell, SA415M, Saipan, SC7180, SC8180X, SDA845, SDM630, SDM636, SDM660, SDM670, SDM710, SDM845, SDM850, SM6150, SM7150, SM8150, SM8250, SXR1130

Vulnerability Trend

Vulnerable Product Search on Vulmon Subscribe to Product

qualcomm apq8098 firmware -

qualcomm ipq5018 firmware -

qualcomm ipq6018 firmware -

qualcomm ipq8074 firmware -

qualcomm kamorta firmware -

qualcomm msm8998 firmware -

qualcomm nicobar firmware -

qualcomm qca6390 firmware -

qualcomm qca8081 firmware -

qualcomm qcs404 firmware -

qualcomm qcs405 firmware -

qualcomm qcs605 firmware -

qualcomm rennell firmware -

qualcomm sa415m firmware -

qualcomm saipan firmware -

qualcomm sc7180 firmware -

qualcomm sc8180x firmware -

qualcomm sda845 firmware -

qualcomm sdm630 firmware -

qualcomm sdm636 firmware -

qualcomm sdm660 firmware -

qualcomm sdm670 firmware -

qualcomm sdm710 firmware -

qualcomm sdm845 firmware -

qualcomm sdm850 firmware -

qualcomm sm6150 firmware -

qualcomm sm7150 firmware -

qualcomm sm8150 firmware -

qualcomm sm8250 firmware -

qualcomm sxr1130 firmware -

Recent Articles

As the world descends into madness, it's good to see some things never change: Monthly Android patches
The Register • Shaun Nichols in San Francisco • 04 Aug 2020

Qualcomm bugs among the worst – including a critical hole in wireless networking Is it Patch Blues-day for Outlook? Microsoft's email client breaks worldwide, leaves everyone stumped

Google has emitted the August edition of its Android software security updates. This month's fixes include one remote-code-execution bug (CVE-2020-0240), present in the Android Framework. Google warns that the bug "could enable a remote attacker using a specially crafted file to execute arbitrary code within the context of an unprivileged process," though isn't being exploited... yet. That flaw was the only remote-code-execution bug present in the 01 level of the security patch bundle. This is t...