7.8

CVE-2020-3632

u'Incorrect validation of ring context fetched from host memory can lead to memory overflow' in Snapdragon Compute, Snapdragon Mobile in QSM8350, SC7180, SDX55, SDX55M, SM6150, SM6250, SM6250P, SM7125, SM7150, SM7150P, SM7250, SM7250P, SM8150, SM8150P, SM8250, SM8350, SM8350P, SXR2130, SXR2130P
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Qualcomm ≫ Qsm8350 Firmware Version -
   Qualcomm ≫ Qsm8350 Version -
Qualcomm ≫ Sc7180 Firmware Version -
   Qualcomm ≫ Sc7180 Version -
Qualcomm ≫ Sdx55 Firmware Version -
   Qualcomm ≫ Sdx55 Version -
Qualcomm ≫ Sdx55m Firmware Version -
   Qualcomm ≫ Sdx55m Version -
Qualcomm ≫ Sm6150 Firmware Version -
   Qualcomm ≫ Sm6150 Version -
Qualcomm ≫ Sm6250 Firmware Version -
   Qualcomm ≫ Sm6250 Version -
Qualcomm ≫ Sm6250p Firmware Version -
   Qualcomm ≫ Sm6250p Version -
Qualcomm ≫ Sm7125 Firmware Version -
   Qualcomm ≫ Sm7125 Version -
Qualcomm ≫ Sm7150 Firmware Version -
   Qualcomm ≫ Sm7150 Version -
Qualcomm ≫ Sm7150p Firmware Version -
   Qualcomm ≫ Sm7150p Version -
Qualcomm ≫ Sm7250 Firmware Version -
   Qualcomm ≫ Sm7250 Version -
Qualcomm ≫ Sm7250p Firmware Version -
   Qualcomm ≫ Sm7250p Version -
Qualcomm ≫ Sm8150 Firmware Version -
   Qualcomm ≫ Sm8150 Version -
Qualcomm ≫ Sm8150p Firmware Version -
   Qualcomm ≫ Sm8150p Version -
Qualcomm ≫ Sm8250 Firmware Version -
   Qualcomm ≫ Sm8250 Version -
Qualcomm ≫ Sm8350 Firmware Version -
   Qualcomm ≫ Sm8350 Version -
Qualcomm ≫ Sm8350p Firmware Version -
   Qualcomm ≫ Sm8350p Version -
Qualcomm ≫ Sxr2130 Firmware Version -
   Qualcomm ≫ Sxr2130 Version -
Qualcomm ≫ Sxr2130p Firmware Version -
   Qualcomm ≫ Sxr2130p Version -
Zu dieser CVE wurde keine Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 0.2% 0.104
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
NIST 7.8 1.8 5.9
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
NIST 7.2 3.9 10
AV:L/AC:L/Au:N/C:C/I:C/A:C
CWE-129 Improper Validation of Array Index

The product uses untrusted input when calculating or using an array index, but the product does not validate or incorrectly validates the index to ensure the index references a valid position within the array.

https://www.qualcomm.com/company/product-security/bulletins/november-2020-bulletin
Vendor Advisory