CVE-2020-3641
02.06.2020, 15:15
Integer overflow may occur if atom size is less than atom offset as there is improper validation of atom size in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables in APQ8009, APQ8053, APQ8096AU, APQ8098, Kamorta, MDM9206, MDM9207C, MDM9607, MSM8905, MSM8909W, MSM8917, MSM8953, MSM8996AU, MSM8998, QCA6574AU, QCM2150, QCS405, QCS605, QM215, Rennell, SA6155P, Saipan, SDA660, SDM429, SDM429W, SDM439, SDM450, SDM630, SDM632, SDM636, SDM660, SDM845, SDX20, SM6150, SM7150, SM8150, SM8250, SXR2130Enginsight
| Vendor | Product | Version |
|---|---|---|
| qualcomm | apq8009_firmware | - |
| qualcomm | apq8053_firmware | - |
| qualcomm | apq8096au_firmware | - |
| qualcomm | apq8098_firmware | - |
| qualcomm | kamorta_firmware | - |
| qualcomm | mdm9206_firmware | - |
| qualcomm | mdm9207c_firmware | - |
| qualcomm | mdm9607_firmware | - |
| qualcomm | msm8905_firmware | - |
| qualcomm | msm8909w_firmware | - |
| qualcomm | msm8917_firmware | - |
| qualcomm | msm8953_firmware | - |
| qualcomm | msm8996au_firmware | - |
| qualcomm | msm8998_firmware | - |
| qualcomm | qca6574au_firmware | - |
| qualcomm | qcm2150_firmware | - |
| qualcomm | qcs405_firmware | - |
| qualcomm | qcs605_firmware | - |
| qualcomm | qm215_firmware | - |
| qualcomm | rennell_firmware | - |
| qualcomm | sa6155p_firmware | - |
| qualcomm | saipan_firmware | - |
| qualcomm | sda660_firmware | - |
| qualcomm | sdm429_firmware | - |
| qualcomm | sdm429w_firmware | - |
| qualcomm | sdm439_firmware | - |
| qualcomm | sdm450_firmware | - |
| qualcomm | sdm630_firmware | - |
| qualcomm | sdm632_firmware | - |
| qualcomm | sdm636_firmware | - |
| qualcomm | sdm660_firmware | - |
| qualcomm | sdm845_firmware | - |
| qualcomm | sdx20_firmware | - |
| qualcomm | sm6150_firmware | - |
| qualcomm | sm7150_firmware | - |
| qualcomm | sm8150_firmware | - |
| qualcomm | sm8250_firmware | - |
| qualcomm | sxr2130_firmware | - |
𝑥
= Vulnerable software versions