Vulnerability Monitor

The vendors, products, and vulnerabilities you care about

CVE-2020-3653

Possible buffer over-read in windows wlan driver function due to lack of check of length of variable received from userspace in Snapdragon Compute, Snapdragon Connectivity in MSM8998, QCA6390, SC7180, SC8180X, SDM850

Published

2020-04-16T11:15:15.793

Last Modified

2024-11-21T05:31:30.017

Status

Modified

Source

[email protected]

Severity

CVSSv3.1: 9.1 (CRITICAL)

CVSSv2 Vector

AV:N/AC:L/Au:N/C:C/I:N/A:C

  • Access Vector: NETWORK
  • Access Complexity: LOW
  • Authentication: NONE
  • Confidentiality Impact: COMPLETE
  • Integrity Impact: NONE
  • Availability Impact: COMPLETE
Exploitability Score

10.0

Impact Score

9.2

Weaknesses
  • Type: Primary
    CWE-20
    CWE-125
Affected Vendors & Products
Type Vendor Product Version/Range Vulnerable?
Operating System qualcomm msm8998_firmware - Yes
Hardware qualcomm msm8998 - No
Operating System qualcomm qca6390_firmware - Yes
Hardware qualcomm qca6390 - No
Operating System qualcomm sc7180_firmware - Yes
Hardware qualcomm sc7180 - No
Operating System qualcomm sc8180x_firmware - Yes
Hardware qualcomm sc8180x - No
Operating System qualcomm sdm850_firmware - Yes
Hardware qualcomm sdm850 - No
References