CVE-2020-3679

09.09.2020, 07:15

u'During execution after Address Space Layout Randomization is turned on for QTEE, part of code is still mapped at known address including code segments' in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wired Infrastructure and Networking in Bitra, Kamorta, Nicobar, QCS404, QCS610, Rennell, SA6155P, SA8155P, Saipan, SC7180, SC8180X, SDX55, SM6150, SM7150, SM8150, SM8250, SXR2130

Provider	Type	Base Score	Atk. Vector	Atk. Complexity	Priv. Required	Vector
NIST	NIST	5.5 MEDIUM	LOCAL	LOW	LOW	CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
qualcomm	CNA	---				---
CVE	ADP	---				---

Base Score

CVSS 3.x

EPSS Score

Percentile: 17%

Vendor	Product	Version
qualcomm	bitra_firmware	-
qualcomm	kamorta_firmware	-
qualcomm	nicobar_firmware	-
qualcomm	qcs404_firmware	-
qualcomm	qcs610_firmware	-
qualcomm	rennell_firmware	-
qualcomm	sa6155p_firmware	-
qualcomm	sa8155p_firmware	-
qualcomm	saipan_firmware	-
qualcomm	sc7180_firmware	-
qualcomm	sc8180x_firmware	-
qualcomm	sdx55_firmware	-
qualcomm	sm6150_firmware	-
qualcomm	sm7150_firmware	-
qualcomm	sm8150_firmware	-
qualcomm	sm8250_firmware	-
qualcomm	sxr2130_firmware	-

𝑥

= Vulnerable software versions

References

https://www.qualcomm.com/company/product-security/bulletins/september-2020-bulletin