CVE-2020-3656
09.09.2020, 07:15
Out of bound access can happen in MHI command process due to lack of check of command channel id value received from MHI devices in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables in APQ8009, Kamorta, MDM9607, MSM8917, MSM8953, Nicobar, QCM2150, QCS405, QCS605, QM215, Rennell, SA6155P, SA8155P, Saipan, SC8180X, SDM429, SDM429W, SDM439, SDM450, SDM632, SDM710, SDM845, SDX55, SM6150, SM7150, SM8150, SM8250, SXR2130
Affected Products (NVD)
| Vendor | Product | Version |
|---|---|---|
| qualcomm | apq8009_firmware | - |
| qualcomm | kamorta_firmware | - |
| qualcomm | mdm9607_firmware | - |
| qualcomm | msm8917_firmware | - |
| qualcomm | msm8953_firmware | - |
| qualcomm | nicobar_firmware | - |
| qualcomm | qcm2150_firmware | - |
| qualcomm | qcs405_firmware | - |
| qualcomm | qcs605_firmware | - |
| qualcomm | qm215_firmware | - |
| qualcomm | rennell_firmware | - |
| qualcomm | sa6155p_firmware | - |
| qualcomm | sa8155p_firmware | - |
| qualcomm | saipan_firmware | - |
| qualcomm | sc8180x_firmware | - |
| qualcomm | sdm429_firmware | - |
| qualcomm | sdm429w_firmware | - |
| qualcomm | sdm439_firmware | - |
| qualcomm | sdm450_firmware | - |
| qualcomm | sdm632_firmware | - |
| qualcomm | sdm710_firmware | - |
| qualcomm | sdm845_firmware | - |
| qualcomm | sdx55_firmware | - |
| qualcomm | sm6150_firmware | - |
| qualcomm | sm7150_firmware | - |
| qualcomm | sm8150_firmware | - |
| qualcomm | sm8250_firmware | - |
| qualcomm | sxr2130_firmware | - |
𝑥
= Vulnerable software versions