CVE-2020-3656
09.09.2020, 07:15
Out of bound access can happen in MHI command process due to lack of check of command channel id value received from MHI devices in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables in APQ8009, Kamorta, MDM9607, MSM8917, MSM8953, Nicobar, QCM2150, QCS405, QCS605, QM215, Rennell, SA6155P, SA8155P, Saipan, SC8180X, SDM429, SDM429W, SDM439, SDM450, SDM632, SDM710, SDM845, SDX55, SM6150, SM7150, SM8150, SM8250, SXR2130
| Vendor | Product | Version |
|---|---|---|
| qualcomm | apq8009_firmware | - |
| qualcomm | kamorta_firmware | - |
| qualcomm | mdm9607_firmware | - |
| qualcomm | msm8917_firmware | - |
| qualcomm | msm8953_firmware | - |
| qualcomm | nicobar_firmware | - |
| qualcomm | qcm2150_firmware | - |
| qualcomm | qcs405_firmware | - |
| qualcomm | qcs605_firmware | - |
| qualcomm | qm215_firmware | - |
| qualcomm | rennell_firmware | - |
| qualcomm | sa6155p_firmware | - |
| qualcomm | sa8155p_firmware | - |
| qualcomm | saipan_firmware | - |
| qualcomm | sc8180x_firmware | - |
| qualcomm | sdm429_firmware | - |
| qualcomm | sdm429w_firmware | - |
| qualcomm | sdm439_firmware | - |
| qualcomm | sdm450_firmware | - |
| qualcomm | sdm632_firmware | - |
| qualcomm | sdm710_firmware | - |
| qualcomm | sdm845_firmware | - |
| qualcomm | sdx55_firmware | - |
| qualcomm | sm6150_firmware | - |
| qualcomm | sm7150_firmware | - |
| qualcomm | sm8150_firmware | - |
| qualcomm | sm8250_firmware | - |
| qualcomm | sxr2130_firmware | - |
𝑥
= Vulnerable software versions