PT-2020-17602
CVE-2020-3634
·
Published
2020-09-09
·
Updated
2020-09-14
Description by
CVSS 2.0
9.4
HighMetricsAV:N/AC:L/Au:N/C:C/I:N/A:C
Name of the Vulnerable Software and Affected Versions
Qualcomm Snapdragon Auto versions prior to the fixed version
Qualcomm Snapdragon Compute versions prior to the fixed version
Qualcomm Snapdragon Consumer IOT versions prior to the fixed version
Qualcomm Snapdragon Industrial IOT versions prior to the fixed version
Qualcomm Snapdragon Mobile versions prior to the fixed version
Qualcomm Snapdragon Wearables versions prior to the fixed version
APQ8053 version not specified
APQ8096AU version not specified
APQ8098 version not specified
Kamorta version not specified
MDM9150 version not specified
MDM9205 version not specified
MDM9206 version not specified
MDM9607 version not specified
MDM9625 version not specified
MDM9635M version not specified
MDM9640 version not specified
MDM9645 version not specified
MDM9650 version not specified
MDM9655 version not specified
MSM8905 version not specified
MSM8909W version not specified
MSM8917 version not specified
MSM8953 version not specified
MSM8996AU version not specified
MSM8998 version not specified
Nicobar version not specified
QCM2150 version not specified
QCS605 version not specified
QCS610 version not specified
QM215 version not specified
Rennell version not specified
SA415M version not specified
Saipan version not specified
SC7180 version not specified
SDA660 version not specified
SDA845 version not specified
SDM429 version not specified
SDM429W version not specified
SDM439 version not specified
SDM450 version not specified
SDM630 version not specified
SDM632 version not specified
SDM636 version not specified
SDM660 version not specified
SDM670 version not specified
SDM710 version not specified
SDM845 version not specified
SDM850 version not specified
SDX20 version not specified
SDX24 version not specified
SDX55 version not specified
SM6150 version not specified
SM7150 version not specified
SM8150 version not specified
SXR1130 version not specified
Description
The issue is related to multiple Read overflows due to improper length checks while decoding Generic NAS transport/EMM info. This affects various Qualcomm Snapdragon products.
Recommendations
At the moment, there is no information about a newer version that contains a fix for this vulnerability.
Found an issue in the description? Have something to add? Feel free to write us 👾