CVE-2020-3654 — CRITICAL (9.8)

Vulnerability Description

u'Buffer overflow occurs while processing SIP message packet due to lack of check of index validation before copying into it' in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Wearables in Agatti, APQ8053, APQ8096AU, APQ8098, Bitra, Kamorta, MSM8905, MSM8909W, MSM8917, MSM8940, MSM8953, MSM8996AU, MSM8998, Nicobar, QCA6390, QCA6574AU, QCM2150, QCS605, QM215, Rennell, SA6155P, SA8155P, Saipan, SDA660, SDM429, SDM429W, SDM439, SDM450, SDM630, SDM632, SDM636, SDM660, SDM670, SDM710, SDM845, SM6150, SM7150, SM8150, SM8250, SXR1130, SXR2130

CVSS Score

9.8

CRITICAL

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality

HIGH

Integrity

HIGH

Availability

HIGH

Affected Products

Vendor	Product	Versions
Qualcomm	Agatti Firmware	-
Qualcomm	Agatti	-
Qualcomm	Apq8053 Firmware	-
Qualcomm	Apq8053	-
Qualcomm	Apq8096Au Firmware	-
Qualcomm	Apq8096Au	-
Qualcomm	Apq8098 Firmware	-
Qualcomm	Apq8098	-
Qualcomm	Bitra Firmware	-
Qualcomm	Bitra	-
Qualcomm	Kamorta Firmware	-
Qualcomm	Kamorta	-
Qualcomm	Msm8905 Firmware	-
Qualcomm	Msm8905	-
Qualcomm	Msm8909W Firmware	-
Qualcomm	Msm8909W	-
Qualcomm	Msm8917 Firmware	-
Qualcomm	Msm8917	-
Qualcomm	Msm8940 Firmware	-
Qualcomm	Msm8940	-

Related Weaknesses (CWE)

CWE-129

References

FAQ

What is CVE-2020-3654?

CVE-2020-3654 is a vulnerability with a CVSS score of 9.8 (CRITICAL). u'Buffer overflow occurs while processing SIP message packet due to lack of check of index validation before copying into it' in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdrago...

How severe is CVE-2020-3654?

CVE-2020-3654 has been rated CRITICAL with a CVSS base score of 9.8/10. This is considered a critical vulnerability requiring immediate attention.

Is there a patch for CVE-2020-3654?

Check the references section above for vendor advisories and patch information. Affected products include: Qualcomm Agatti Firmware, Qualcomm Agatti, Qualcomm Apq8053 Firmware, Qualcomm Apq8053, Qualcomm Apq8096Au Firmware.