CVE-2020-3671

CRITICAL

9.8

Description

Use-after-free issue could occur due to dangling pointer when generating a frame buffer in OpenGL ES in Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music in APQ8009, Nicobar, QCM2150, QCS405, Saipan, SDM845, SM8150, SM8250, SXR2130

CVE Details

CVSS v3.1 Score9.8

SeverityCRITICAL

CVSS VectorCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Attack VectorNETWORK

ComplexityLOW

Privileges RequiredNONE

User InteractionNONE

Published7/30/2020

Last Modified11/21/2024

Sourcenvd

Honeypot Sightings0

Affected Products

qualcomm:apq8009qualcomm:apq8009_firmwarequalcomm:nicobarqualcomm:nicobar_firmwarequalcomm:qcm2150qualcomm:qcm2150_firmwarequalcomm:qcs405qualcomm:qcs405_firmwarequalcomm:saipanqualcomm:saipan_firmwarequalcomm:sdm845qualcomm:sdm845_firmwarequalcomm:sm8150qualcomm:sm8150_firmwarequalcomm:sm8250qualcomm:sm8250_firmwarequalcomm:sxr2130qualcomm:sxr2130_firmware

Weaknesses (CWE)

CWE-416

References

https://www.qualcomm.com/company/product-security/bulletins/july-2020-bulletin(product-security@qualcomm.com)

https://www.qualcomm.com/company/product-security/bulletins/july-2020-security-bulletin(nvd@nist.gov)

https://www.qualcomm.com/company/product-security/bulletins/july-2020-bulletin(af854a3a-2127-422b-91ae-364da2661108)

IOC Correlations

No correlations recorded

This product uses data from the NVD API but is not endorsed or certified by the NVD.