CVE-2020-3667

EUVD-2020-24938
u'Buffer Overflow in mic calculation for WPA due to copying data into buffer without validating the length of buffer' in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wired Infrastructure and Networking in APQ8098, IPQ5018, IPQ6018, IPQ8074, Kamorta, MSM8998, Nicobar, QCA6390, QCA8081, QCS404, QCS405, QCS605, Rennell, SA415M, Saipan, SC7180, SC8180X, SDA845, SDM630, SDM636, SDM660, SDM670, SDM710, SDM845, SDM850, SM6150, SM7150, SM8150, SM8250, SXR1130
Classic Buffer Overflow
ProviderTypeBase ScoreAtk. VectorAtk. ComplexityPriv. RequiredVector
NISTPrimary
9.8 CRITICAL
NETWORK
LOW
NONE
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Base Score
CVSS 3.x
EPSS Score
Percentile: 43%
Affected Products (NVD)
VendorProductVersion
qualcommapq8098_firmware
-
qualcommipq5018_firmware
-
qualcommipq6018_firmware
-
qualcommipq8074_firmware
-
qualcommkamorta_firmware
-
qualcommmsm8998_firmware
-
qualcommnicobar_firmware
-
qualcommqca6390_firmware
-
qualcommqca8081_firmware
-
qualcommqcs404_firmware
-
qualcommqcs405_firmware
-
qualcommqcs605_firmware
-
qualcommrennell_firmware
-
qualcommsa415m_firmware
-
qualcommsaipan_firmware
-
qualcommsc7180_firmware
-
qualcommsc8180x_firmware
-
qualcommsda845_firmware
-
qualcommsdm630_firmware
-
qualcommsdm636_firmware
-
qualcommsdm660_firmware
-
qualcommsdm670_firmware
-
qualcommsdm710_firmware
-
qualcommsdm845_firmware
-
qualcommsdm850_firmware
-
qualcommsm6150_firmware
-
qualcommsm7150_firmware
-
qualcommsm8150_firmware
-
qualcommsm8250_firmware
-
qualcommsxr1130_firmware
-
𝑥
= Vulnerable software versions