7.5
CVE-2020-3700
- EPSS 1.1%
- Veröffentlicht 30.07.2020 12:15:12
- Zuletzt bearbeitet 21.11.2024 05:31:36
- Erkennungen
LoginPossible out of bounds read due to a missing bounds check and could lead to local information disclosure in the wifi driver with no additional execution privileges needed in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables, Snapdragon Wired Infrastructure and Networking in APQ8053, APQ8096AU, IPQ4019, IPQ8064, IPQ8074, MDM9607, MSM8909W, MSM8996AU, QCA6574AU, QCA9531, QCA9558, QCA9980, SC8180X, SDM439, SDX55, SM8150, SM8250, SXR2130
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Qualcomm ≫ Apq8053 Firmware Version -
Qualcomm ≫ Apq8096au Firmware Version -
Qualcomm ≫ Ipq4019 Firmware Version -
Qualcomm ≫ Ipq8064 Firmware Version -
Qualcomm ≫ Ipq8074 Firmware Version -
Qualcomm ≫ Mdm9607 Firmware Version -
Qualcomm ≫ Msm8909w Firmware Version -
Qualcomm ≫ Msm8996au Firmware Version -
Qualcomm ≫ Qca6574au Firmware Version -
Qualcomm ≫ Qca9531 Firmware Version -
Qualcomm ≫ Qca9558 Firmware Version -
Qualcomm ≫ Qca9980 Firmware Version -
Qualcomm ≫ Sc8180x Firmware Version -
Qualcomm ≫ Sdm439 Firmware Version -
Qualcomm ≫ Sdx55 Firmware Version -
Qualcomm ≫ Sm8150 Firmware Version -
Qualcomm ≫ Sm8250 Firmware Version -
Qualcomm ≫ Sxr2130 Firmware Version -
| Typ | Quelle | Score | Percentile |
|---|---|---|---|
| EPSS | FIRST.org | 1.1% | 0.612 |
| Quelle | Base Score | Exploit Score | Impact Score | Vector String |
|---|---|---|---|---|
| NIST | 7.5 | 3.9 | 3.6 |
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
|
| NIST | 5 | 10 | 2.9 |
AV:N/AC:L/Au:N/C:P/I:N/A:N
|
CWE-125 Out-of-bounds Read
The product reads data past the end, or before the beginning, of the intended buffer.
https://www.qualcomm.com/company/product-security/bulletins/july-2020-bulletin
https://www.qualcomm.com/company/product-security/bulletins/july-2020-security-bulletin