by Kastro
Paper/Archive/CVE-2020-3652

CVE-2020-3652

Qualcomm, Inc. Snapdragon Compute, Snapdragon Connectivity — Possible buffer over-read issue in windows x86 wlan driver function while processing beacon or request frame due to lack of check of leng…

EPSS 0.9%CVSS 9.1
critical.is priorityof 100
39
CVSS 9.1 (NVD)9.1 / 10 × 3027.3Not in CISA KEV+300.0EPSS percentile 60.2.602 × 2012.0No public exploit+100.0SSVC exploitation: unknown+100.0
Description · from the CVE record

Possible buffer over-read issue in windows x86 wlan driver function while processing beacon or request frame due to lack of check of length of variable received. in Snapdragon Compute, Snapdragon Connectivity in MSM8998, QCA6390, SC7180, SC8180X, SDM850

Affected

ProductAffectedFixed inSource
Snapdragon Compute, Snapdragon ConnectivityMSM8998, QCA6390, SC7180, SC8180X, SDM850–CNA

Scores by source

NVD9.1CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H

References

refqualcomm.com/company/product-security/bulletins/april-2020-bulletin