CVE-2020-3661

Name of the Vulnerable Software and Affected Versions Qualcomm Snapdragon versions APQ8009 through SM8250

Description A buffer overflow issue occurs when parsing an mp4 clip with corrupted sample atoms values that exceed the MAX UINT32 range due to a lack of validation checks in various Qualcomm Snapdragon products, including Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, and Snapdragon Wearables.

Recommendations For Qualcomm Snapdragon versions APQ8009 through SM8250, update to a version that includes the necessary validation checks to prevent buffer overflow when parsing mp4 clips. At the moment, there is no information about a newer version that contains a fix for this vulnerability.