CVE-2020-3629

u'Stack out of bound issue occurs when making query to DSP capabilities due to wrong assumption was made on determining the buffer size for the DSP attributes' in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables in Bitra, Kamorta, Rennell, SC7180, SDM845, SM6150, SM7150, SM8150, SM8250, SXR2130
Configurations

Configuration 1 (hide)

AND
cpe:2.3:o:qualcomm:bitra_firmware:-:*:*:*:*:*:*:*
cpe:2.3:h:qualcomm:bitra:-:*:*:*:*:*:*:*

Configuration 2 (hide)

AND
cpe:2.3:o:qualcomm:kamorta_firmware:-:*:*:*:*:*:*:*
cpe:2.3:h:qualcomm:kamorta:-:*:*:*:*:*:*:*

Configuration 3 (hide)

AND
cpe:2.3:o:qualcomm:rennell_firmware:-:*:*:*:*:*:*:*
cpe:2.3:h:qualcomm:rennell:-:*:*:*:*:*:*:*

Configuration 4 (hide)

AND
cpe:2.3:o:qualcomm:sc7180_firmware:-:*:*:*:*:*:*:*
cpe:2.3:h:qualcomm:sc7180:-:*:*:*:*:*:*:*

Configuration 5 (hide)

AND
cpe:2.3:o:qualcomm:sdm845_firmware:-:*:*:*:*:*:*:*
cpe:2.3:h:qualcomm:sdm845:-:*:*:*:*:*:*:*

Configuration 6 (hide)

AND
cpe:2.3:o:qualcomm:sm6150_firmware:-:*:*:*:*:*:*:*
cpe:2.3:h:qualcomm:sm6150:-:*:*:*:*:*:*:*

Configuration 7 (hide)

AND
cpe:2.3:o:qualcomm:sm7150_firmware:-:*:*:*:*:*:*:*
cpe:2.3:h:qualcomm:sm7150:-:*:*:*:*:*:*:*

Configuration 8 (hide)

AND
cpe:2.3:o:qualcomm:sm8150_firmware:-:*:*:*:*:*:*:*
cpe:2.3:h:qualcomm:sm8150:-:*:*:*:*:*:*:*

Configuration 9 (hide)

AND
cpe:2.3:o:qualcomm:sm8250_firmware:-:*:*:*:*:*:*:*
cpe:2.3:h:qualcomm:sm8250:-:*:*:*:*:*:*:*

Configuration 10 (hide)

AND
cpe:2.3:o:qualcomm:sxr2130_firmware:-:*:*:*:*:*:*:*
cpe:2.3:h:qualcomm:sxr2130:-:*:*:*:*:*:*:*

History

No history.

Information

Published : 2020-09-08 10:15

Updated : 2024-02-28 17:47


NVD link : CVE-2020-3629

Mitre link : CVE-2020-3629

CVE.ORG link : CVE-2020-3629


JSON object : View

Products Affected

qualcomm

  • sdm845_firmware
  • sm8250_firmware
  • sxr2130
  • sm7150_firmware
  • kamorta
  • sm7150
  • sc7180_firmware
  • sxr2130_firmware
  • sm8150
  • sm8250
  • sm6150_firmware
  • sc7180
  • sdm845
  • bitra
  • sm8150_firmware
  • kamorta_firmware
  • rennell
  • sm6150
  • bitra_firmware
  • rennell_firmware
CWE
CWE-120

Buffer Copy without Checking Size of Input ('Classic Buffer Overflow')