Skip to content
fr Sign in
Not rated

CVE-2020-3657 u'Remote code execution can happen by sending a carefully crafted POST query when Device configuration is accessed…

Description

u'Remote code execution can happen by sending a carefully crafted POST query when Device configuration is accessed from a tethered client through webserver due to lack of array bound check.' in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables, Snapdragon Wired Infrastructure and Networking in APQ8009, APQ8017, APQ8053, APQ8096AU, APQ8098, IPQ4019, IPQ6018, IPQ8064, IPQ8074, MDM9150, MDM9206, MDM9207C, MDM9607, MDM9640, MDM9650, MSM8905, MSM8909W, MSM8953, MSM8996AU, QCA6574AU, QCS405, QCS610, QRB5165, SC8180X, SDA660, SDA845, SDM429, SDM429W, SDM630, SDM632, SDM636, SDM660, SDM845, SDX20, SDX24, SDX55, SM8250

Affected products and versions

Product Affected versions Fixed in
Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables, Snapdragon Wired Infrastructure and Networking Versions not published

References

Timeline

  1. Published
  2. Last modified

Other CVEs of Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables, Snapdragon Wired Infrastructure and Networking

The 8 CVEs of Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables, Snapdragon Wired Infrastructure and Networking →
CVE-2021-30325 Possible out of bound access of DCI resources due to lack of validation process and resource allocation in Snapdragon… 6.7 Medium CVE-2021-30324 Possible out of bound write due to lack of boundary check for the maximum size of buffer when sending a DCI packet to… 6.7 Medium CVE-2019-14070 Possible use after free issue in pcm volume controls due to race condition exist in private data used in mixer… Not rated CVE-2019-14068 Out of bound access in msm routing due to lack of check of size before accessing in Snapdragon Auto, Snapdragon Compute,… Not rated
Track this CVE