VULNERABILITY INTELLIGENCE
CVE-2020-3629
CVSS score7.8 HIGH
EPSS probability0.21%
CISA KEVNot currently listed
Published2020-09-08
Last modified2026-06-17
CVSS vectorCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Description
u'Stack out of bound issue occurs when making query to DSP capabilities due to wrong assumption was made on determining the buffer size for the DSP attributes' in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables in Bitra, Kamorta, Rennell, SC7180, SDM845, SM6150, SM7150, SM8150, SM8250, SXR2130
Weakness classification
- nvd@nist.gov: CWE-120
Primary references
- product-security@qualcomm.com — Broken Link
- nvd@nist.gov — Vendor Advisory
- af854a3a-2127-422b-91ae-364da2661108 — Broken Link