by Kastro
Paper/Archive/CVE-2020-3653

CVE-2020-3653

Qualcomm, Inc. Snapdragon Compute, Snapdragon Connectivity — Possible buffer over-read in windows wlan driver function due to lack of check of length of variable received from userspace in Snapdrago…

EPSS 0.9%CVSS 9.1
critical.is priorityof 100
39
CVSS 9.1 (NVD)9.1 / 10 × 3027.3Not in CISA KEV+300.0EPSS percentile 60.2.602 × 2012.0No public exploit+100.0SSVC exploitation: unknown+100.0
Description · from the CVE record

Possible buffer over-read in windows wlan driver function due to lack of check of length of variable received from userspace in Snapdragon Compute, Snapdragon Connectivity in MSM8998, QCA6390, SC7180, SC8180X, SDM850

Affected

ProductAffectedFixed inSource
Snapdragon Compute, Snapdragon ConnectivityMSM8998, QCA6390, SC7180, SC8180X, SDM850–CNA

Scores by source

NVD9.1CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H

References

refqualcomm.com/company/product-security/bulletins/april-2020-bulletin