CVE-2020-3680 PUBLISHED CVSS 7 HIGH

A race condition can occur when using the fastrpc memory mapping API. in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Wearables in APQ8009, APQ8053, MSM8909W, MSM8917, MSM8953, QCS605, QM215, SA415M, SDM429, SDM429W, SDM439, SDM450, SDM632, SDM670, SDM710, SDM845, SDX24, SXR1130

EPSS 0.15% · 35.4th percentile

Risk Scores

CVSS v3.1
7
CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H
EPSS Score
0.15%
35.4th percentile

Affected Products

VendorProductVersions
qualcommsdm429_firmware
qualcommmsm8953_firmware
qualcommsdm429w_firmware
qualcommqcs605_firmware
qualcommsdm670_firmware
qualcommsdm632_firmware
qualcommmsm8917_firmware
qualcommqm215_firmware
qualcommsdm450_firmware
qualcommsa415m_firmware
qualcommapq8053_firmware
qualcommmsm8909w_firmware
qualcommsdx24_firmware
qualcommsdm710_firmware
qualcommapq8009_firmware
qualcommsxr1130_firmware
qualcommsdm439_firmware
Qualcomm, Inc.Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon WearablesAPQ8009, APQ8053, MSM8909W, MSM8917, MSM8953, QCS605, QM215, SA415M, SDM429, SDM429W, SDM439, SDM450, SDM632, SDM670, SDM710, SDM845, SDX24, SXR1130
qualcommsdm845_firmware

Timeline

References

Open in Interactive Console →