CVE-2020-3688

CVE-2020-3688: vulnerability in Qualcomm, Inc. Snapdragon Auto, Snapdragon…

Published · Updated

Follow this CVE+ Monitor Snapdragon Mobile+ Monitor Snapdragon Industrial IOT

E-mail alert when it lands in KEV, gets a public PoC or its score goes up.

3Vexday Risk Score

No sign of exploitation. No public exploitation artifact known so far.

ssvc Trackepss 0.9%
Possible buffer overflow while parsing mp4 clip with corrupted sample atoms due to improper validation of index in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables in APQ8009, APQ8017, APQ8053, APQ8096AU, APQ8098, Kamorta, MDM9206, MDM9207C, MDM9607, MSM8905, MSM8909W, MSM8917, MSM8920, MSM8937, MSM8940, MSM8953, MSM8996, MSM8996AU, MSM8998, Nicobar, QCA6574AU, QCM2150, QCS405, QCS605, QM215, Rennell, SA6155P, Saipan, SDA660, SDA845, SDM429, SDM429W, SDM439, SDM450, SDM630, SDM632, SDM636, SDM660, SDM670, SDM710, SDM845, SDX20, SM6150, SM7150, SM8150, SM8250, SXR1130, SXR2130
Affected products
Qualcomm, Inc. · Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables
Related CVEs — Qualcomm, Inc. Snapdragon Auto, Snapdragon…

In the same product, most dangerous first.

CVE-2021-1905HIGHCVE-2021-1905EPSS 1.5%KEVCVE-2020-11261HIGHCVE-2020-11261EPSS 1.5%KEVCVE-2021-1906MEDIUMCVE-2021-1906EPSS 0.5%KEVCVE-2019-2255—CVE-2019-2255EPSS 1.5%CVE-2019-2256—CVE-2019-2256EPSS 1.5%CVE-2020-11167—CVE-2020-11167EPSS 1.2%