Not rated

CVE-2020-3633 Array out of bound may occur while playing mp3 file as no check is there on offset if it is greater than the buffer…

Description

Array out of bound may occur while playing mp3 file as no check is there on offset if it is greater than the buffer allocated or not in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables in APQ8009, APQ8053, APQ8096AU, APQ8098, Kamorta, MDM9206, MDM9207C, MDM9607, MSM8905, MSM8909W, MSM8917, MSM8953, MSM8996AU, MSM8998, QCS405, QCS605, QM215, Rennell, Saipan, SDA660, SDM429, SDM429W, SDM439, SDM450, SDM630, SDM632, SDM636, SDM660, SDM670, SDM710, SDM845, SDX20, SM6150, SM7150, SM8150, SM8250, SXR2130

Affected products and versions

Product	Affected versions	Fixed in
Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables	Versions not published

References

www.qualcomm.com www.qualcomm.com

Timeline

Published June 2, 2020
Last modified August 4, 2024

The 45 CVEs of Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables →

CVE-2022-33268 Information disclosure due to buffer over-read in Bluetooth HOST while pairing and connecting A2DP 8.2 High CVE-2021-30323 Improper validation of maximum size of data write to EFS file can lead to memory corruption in Snapdragon Auto,… 7.8 High CVE-2021-30289 Possible buffer overflow due to lack of range check while processing a DIAG command for COEX management in Snapdragon… 7.8 High CVE-2021-1969 Improper validation of kernel buffer address while copying information back to user buffer can lead to kernel memory… 6.2 Medium

Track this CVE