Vulnerability Monitor

The vendors, products, and vulnerabilities you care about

CVE-2020-3652

Possible buffer over-read issue in windows x86 wlan driver function while processing beacon or request frame due to lack of check of length of variable received. in Snapdragon Compute, Snapdragon Connectivity in MSM8998, QCA6390, SC7180, SC8180X, SDM850

Published

2020-04-16T11:15:15.730

Last Modified

2024-11-21T05:31:29.903

Status

Modified

Source

[email protected]

Severity

CVSSv3.1: 9.1 (CRITICAL)

CVSSv2 Vector

AV:N/AC:L/Au:N/C:C/I:N/A:C

  • Access Vector: NETWORK
  • Access Complexity: LOW
  • Authentication: NONE
  • Confidentiality Impact: COMPLETE
  • Integrity Impact: NONE
  • Availability Impact: COMPLETE
Exploitability Score

10.0

Impact Score

9.2

Weaknesses
  • Type: Primary
    CWE-20
    CWE-125
Affected Vendors & Products
Type Vendor Product Version/Range Vulnerable?
Operating System qualcomm msm8998_firmware - Yes
Hardware qualcomm msm8998 - No
Operating System qualcomm qca6390_firmware - Yes
Hardware qualcomm qca6390 - No
Operating System qualcomm sc7180_firmware - Yes
Hardware qualcomm sc7180 - No
Operating System qualcomm sc8180x_firmware - Yes
Hardware qualcomm sc8180x - No
Operating System qualcomm sdm850_firmware - Yes
Hardware qualcomm sdm850 - No
References