Vulnerability · Published Apr 16, 2020 · Assigned by qualcomm
CVE-2020-3653
Critical 9.1
In plain English
A critical-severity security flaw in Snapdragon Compute, Snapdragon Connectivity from Qualcomm, Inc.. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 0.9% (higher than 60% of all known vulnerabilities).
Severity (CVSS NVD)9.1Critical
Exploit odds (30 days)0.9%top 39.7% of all CVEs
Exploited in the wildNo reportsnot in CISA KEV
Attack toolingNoneno public tooling known
Official description
Possible buffer over-read in windows wlan driver function due to lack of check of length of variable received from userspace in Snapdragon Compute, Snapdragon Connectivity in MSM8998, QCA6390, SC7180, SC8180X, SDM850
Affected products (as reported)
| Vendor | Product | Versions |
|---|---|---|
| Qualcomm, Inc. | Snapdragon Compute, Snapdragon Connectivity | MSM8998, QCA6390, SC7180, SC8180X, SDM850 |
References
- https://www.qualcomm.com/company/product-security/bulletins/april-2020-bulletin x_refsource_CONFIRM