HIGH · 7.8

CVE-2020-3638

u'An Unaligned address or size can propagate to the database due to improper page permissions and can lead to improper access control' in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, ...

Vulnerability Description

u'An Unaligned address or size can propagate to the database due to improper page permissions and can lead to improper access control' in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Wired Infrastructure and Networking in Agatti, Bitra, Kamorta, QCA6390, QCS404, QCS610, Rennell, SA515M, SC7180, SC8180X, SDX55, SM6150, SM7150, SM8150, SM8250, SXR2130

CVSS Score

7.8

HIGH

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Attack Vector
LOCAL
Attack Complexity
LOW
Privileges Required
LOW
User Interaction
NONE
Scope
UNCHANGED
Confidentiality
HIGH
Integrity
HIGH
Availability
HIGH

Affected Products

VendorProductVersions
QualcommAgatti Firmware-
QualcommAgatti-
QualcommBitra Firmware-
QualcommBitra-
QualcommKamorta Firmware-
QualcommKamorta-
QualcommQca6390 Firmware-
QualcommQca6390-
QualcommQcs404 Firmware-
QualcommQcs404-
QualcommQcs610 Firmware-
QualcommQcs610-
QualcommRennell Firmware-
QualcommRennell-
QualcommSa515M Firmware-
QualcommSa515M-
QualcommSc7180 Firmware-
QualcommSc7180-
QualcommSc8180X Firmware-
QualcommSc8180X-

References

FAQ

What is CVE-2020-3638?

CVE-2020-3638 is a vulnerability with a CVSS score of 7.8 (HIGH). u'An Unaligned address or size can propagate to the database due to improper page permissions and can lead to improper access control' in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, ...

How severe is CVE-2020-3638?

CVE-2020-3638 has been rated HIGH with a CVSS base score of 7.8/10. Review the CVSS metrics above for detailed severity breakdown.

Is there a patch for CVE-2020-3638?

Check the references section above for vendor advisories and patch information. Affected products include: Qualcomm Agatti Firmware, Qualcomm Agatti, Qualcomm Bitra Firmware, Qualcomm Bitra, Qualcomm Kamorta Firmware.