7.8
CVE-2020-3640
- EPSS 0.2%
- Veröffentlicht 08.09.2020 10:15:15
- Zuletzt bearbeitet 21.11.2024 05:31:27
- Erkennungen
Loginu'Resizing the usage table header before passing all the checks leads to the function exiting with a usage table in invalid state when a HLOS adversary calls the function with wrong input' in Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon Mobile, Snapdragon Wired Infrastructure and Networking in Bitra, Kamorta, QCS404, QCS610, Rennell, Saipan, SC7180, SDX55, SM6150, SM7150, SM8250, SXR2130
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Qualcomm ≫ Bitra Firmware Version -
Qualcomm ≫ Kamorta Firmware Version -
Qualcomm ≫ Qcs404 Firmware Version -
Qualcomm ≫ Qcs610 Firmware Version -
Qualcomm ≫ Rennell Firmware Version -
Qualcomm ≫ Saipan Firmware Version -
Qualcomm ≫ Sc7180 Firmware Version -
Qualcomm ≫ Sdx55 Firmware Version -
Qualcomm ≫ Sm6150 Firmware Version -
Qualcomm ≫ Sm7150 Firmware Version -
Qualcomm ≫ Sm8250 Firmware Version -
Qualcomm ≫ Sxr2130 Firmware Version -
| Typ | Quelle | Score | Percentile |
|---|---|---|---|
| EPSS | FIRST.org | 0.2% | 0.103 |
| Quelle | Base Score | Exploit Score | Impact Score | Vector String |
|---|---|---|---|---|
| NIST | 7.8 | 1.8 | 5.9 |
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
|
| NIST | 7.2 | 3.9 | 10 |
AV:L/AC:L/Au:N/C:C/I:C/A:C
|
CWE-131 Incorrect Calculation of Buffer Size
The product does not correctly calculate the size to be used when allocating a buffer, which could lead to a buffer overflow.
https://www.qualcomm.com/company/product-security/bulletins/august-2020-bulletin
https://www.qualcomm.com/company/product-security/bulletins/august-2020-security-bulletin