5.5

CVE-2020-3644

u'Information disclosure issue occurs as in current logic Secure Touch session is released without terminating display session' in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wired Infrastructure and Networking in APQ8009, APQ8096AU, APQ8098, Kamorta, MDM9150, MDM9205, MDM9206, MDM9607, MDM9650, MSM8905, MSM8909, MSM8996, MSM8996AU, MSM8998, Nicobar, QCS404, QCS405, QCS605, QCS610, Rennell, SA415M, SA515M, SA6155P, SC7180, SC8180X, SDA660, SDA845, SDM630, SDM636, SDM660, SDM670, SDM710, SDM845, SDM850, SDX24, SDX55, SM6150, SM7150, SM8150, SM8250, SXR1130, SXR2130

Data is provided by the National Vulnerability Database (NVD)
Qualcomm ≫ Apq8009 Firmware Version-
   Qualcomm ≫ Apq8009 Version-
Qualcomm ≫ Apq8096au Firmware Version-
   Qualcomm ≫ Apq8096au Version-
Qualcomm ≫ Apq8098 Firmware Version-
   Qualcomm ≫ Apq8098 Version-
Qualcomm ≫ Kamorta Firmware Version-
   Qualcomm ≫ Kamorta Version-
Qualcomm ≫ Mdm9150 Firmware Version-
   Qualcomm ≫ Mdm9150 Version-
Qualcomm ≫ Mdm9205 Firmware Version-
   Qualcomm ≫ Mdm9205 Version-
Qualcomm ≫ Mdm9206 Firmware Version-
   Qualcomm ≫ Mdm9206 Version-
Qualcomm ≫ Mdm9607 Firmware Version-
   Qualcomm ≫ Mdm9607 Version-
Qualcomm ≫ Mdm9650 Firmware Version-
   Qualcomm ≫ Mdm9650 Version-
Qualcomm ≫ Msm8905 Firmware Version-
   Qualcomm ≫ Msm8905 Version-
Qualcomm ≫ Msm8909 Firmware Version-
   Qualcomm ≫ Msm8909 Version-
Qualcomm ≫ Msm8996 Firmware Version-
   Qualcomm ≫ Msm8996 Version-
Qualcomm ≫ Msm8996au Firmware Version-
   Qualcomm ≫ Msm8996au Version-
Qualcomm ≫ Msm8998 Firmware Version-
   Qualcomm ≫ Msm8998 Version-
Qualcomm ≫ Nicobar Firmware Version-
   Qualcomm ≫ Nicobar Version-
Qualcomm ≫ Qcs404 Firmware Version-
   Qualcomm ≫ Qcs404 Version-
Qualcomm ≫ Qcs405 Firmware Version-
   Qualcomm ≫ Qcs405 Version-
Qualcomm ≫ Qcs605 Firmware Version-
   Qualcomm ≫ Qcs605 Version-
Qualcomm ≫ Qcs610 Firmware Version-
   Qualcomm ≫ Qcs610 Version-
Qualcomm ≫ Rennell Firmware Version-
   Qualcomm ≫ Rennell Version-
Qualcomm ≫ Sa415m Firmware Version-
   Qualcomm ≫ Sa415m Version-
Qualcomm ≫ Sa515m Firmware Version-
   Qualcomm ≫ Sa515m Version-
Qualcomm ≫ Sa6155p Firmware Version-
   Qualcomm ≫ Sa6155p Version-
Qualcomm ≫ Sc7180 Firmware Version-
   Qualcomm ≫ Sc7180 Version-
Qualcomm ≫ Sc8180x Firmware Version-
   Qualcomm ≫ Sc8180x Version-
Qualcomm ≫ Sda660 Firmware Version-
   Qualcomm ≫ Sda660 Version-
Qualcomm ≫ Sda845 Firmware Version-
   Qualcomm ≫ Sda845 Version-
Qualcomm ≫ Sdm630 Firmware Version-
   Qualcomm ≫ Sdm630 Version-
Qualcomm ≫ Sdm636 Firmware Version-
   Qualcomm ≫ Sdm636 Version-
Qualcomm ≫ Sdm660 Firmware Version-
   Qualcomm ≫ Sdm660 Version-
Qualcomm ≫ Sdm670 Firmware Version-
   Qualcomm ≫ Sdm670 Version-
Qualcomm ≫ Sdm710 Firmware Version-
   Qualcomm ≫ Sdm710 Version-
Qualcomm ≫ Sdm845 Firmware Version-
   Qualcomm ≫ Sdm845 Version-
Qualcomm ≫ Sdm850 Firmware Version-
   Qualcomm ≫ Sdm850 Version-
Qualcomm ≫ Sdx24 Firmware Version-
   Qualcomm ≫ Sdx24 Version-
Qualcomm ≫ Sdx55 Firmware Version-
   Qualcomm ≫ Sdx55 Version-
Qualcomm ≫ Sm6150 Firmware Version-
   Qualcomm ≫ Sm6150 Version-
Qualcomm ≫ Sm7150 Firmware Version-
   Qualcomm ≫ Sm7150 Version-
Qualcomm ≫ Sm8150 Firmware Version-
   Qualcomm ≫ Sm8150 Version-
Qualcomm ≫ Sm8250 Firmware Version-
   Qualcomm ≫ Sm8250 Version-
Qualcomm ≫ Sxr1130 Firmware Version-
   Qualcomm ≫ Sxr1130 Version-
Qualcomm ≫ Sxr2130 Firmware Version-
   Qualcomm ≫ Sxr2130 Version-
Zu dieser CVE wurde keine CISA KEV oder CERT.AT-Warnung gefunden.
EPSS Metriken
Type Source Score Percentile
EPSS FIRST.org 0.05% 0.103
CVSS Metriken
Source Base Score Exploit Score Impact Score Vector string
nvd@nist.gov 5.5 1.8 3.6
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
nvd@nist.gov 2.1 3.9 2.9
AV:L/AC:L/Au:N/C:P/I:N/A:N
CWE-200 Exposure of Sensitive Information to an Unauthorized Actor

The product exposes sensitive information to an actor that is not explicitly authorized to have access to that information.

CWE-404 Improper Resource Shutdown or Release

The product does not release or incorrectly releases a resource before it is made available for re-use.