VULNERABILITY INTELLIGENCE
CVE-2020-3679
CVSS score5.5 MEDIUM
EPSS probability0.27%
CISA KEVNot currently listed
Published2020-09-09
Last modified2026-06-17
CVSS vectorCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
Description
u'During execution after Address Space Layout Randomization is turned on for QTEE, part of code is still mapped at known address including code segments' in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wired Infrastructure and Networking in Bitra, Kamorta, Nicobar, QCS404, QCS610, Rennell, SA6155P, SA8155P, Saipan, SC7180, SC8180X, SDX55, SM6150, SM7150, SM8150, SM8250, SXR2130
Weakness classification
- nvd@nist.gov: NVD-CWE-noinfo
Primary references
- product-security@qualcomm.com — Vendor Advisory
- af854a3a-2127-422b-91ae-364da2661108 — Vendor Advisory