CVE-2020-3693

Severity Score

7.8

*CVSS v3.1

Exploit Likelihood

*EPSS

Affected Versions

*CPE

Public Exploits

*Multiple Sources

Exploited in Wild

*KEV

Decision

*SSVC

Descriptions

u'Use out of range pointer issue can occur due to incorrect buffer range check during the execution of qseecom.' in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables in APQ8009, APQ8017, APQ8053, APQ8098, Bitra, MSM8909W, MSM8996AU, Nicobar, QCM2150, QCS605, Saipan, SDM429W, SDX20, SM6150, SM8150, SM8250, SXR2130

Puede ocurrir un problema de uso del puntero fuera de rango debido a una comprobación incorrecta del rango del búfer durante la ejecución de qseecom en los productos Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables en versiones APQ8009, APQ8017, APQ8053, APQ8098, Bitra, MSM8909W, MSM8996AU, Nicobar, QCM2150, QCS605, Saipan, SDM429W, SDX20, SM6150, SM8150, SM8250, SXR2130

*Credits: N/A

Attack Vector

Local

Attack Complexity

Low

Privileges Required

Low

User Interaction

None

Scope

Unchanged

Confidentiality

High

Integrity

High

Availability

High

Attack Vector

Local

Attack Complexity

Low

Authentication

None

Confidentiality

Partial

Integrity

Partial

Availability

Partial

* Common Vulnerability Scoring System

SSVC

Decision:-

Exploitation

Automatable

Tech. Impact

* Organization's Worst-case Scenario

Timeline

2019-12-17 CVE Reserved
2020-11-02 CVE Published
2023-03-08 EPSS Updated
2024-08-04 CVE Updated
---------- Exploited in Wild
---------- KEV Due Date
---------- First Exploit

CWE

CWE-119: Improper Restriction of Operations within the Bounds of a Memory Buffer

CAPEC

References (2)

URL	Tag	Source
https://www.qualcomm.com/company/product-security/bulletins/october-2020-bulletin	Broken Link

URL	Date	SRC

URL	Date	SRC
https://www.qualcomm.com/company/product-security/bulletins/october-2020-security-bulletin	2020-11-06

URL	Date	SRC

Affected Vendors, Products, and Versions

Vendor		Product				Version		Other		Status
Vendor	Product	Version	Other	Status	<-- -->	Vendor	Product	Version	Other	Status
Qualcomm Search vendor "Qualcomm"	Apq8009 Firmware Search vendor "Qualcomm" for product "Apq8009 Firmware"	-	-	Affected	in	Qualcomm Search vendor "Qualcomm"	Apq8009 Search vendor "Qualcomm" for product "Apq8009"	-	-	Safe
Qualcomm Search vendor "Qualcomm"	Apq8017 Firmware Search vendor "Qualcomm" for product "Apq8017 Firmware"	-	-	Affected	in	Qualcomm Search vendor "Qualcomm"	Apq8017 Search vendor "Qualcomm" for product "Apq8017"	-	-	Safe
Qualcomm Search vendor "Qualcomm"	Apq8053 Firmware Search vendor "Qualcomm" for product "Apq8053 Firmware"	-	-	Affected	in	Qualcomm Search vendor "Qualcomm"	Apq8053 Search vendor "Qualcomm" for product "Apq8053"	-	-	Safe
Qualcomm Search vendor "Qualcomm"	Apq8098 Firmware Search vendor "Qualcomm" for product "Apq8098 Firmware"	-	-	Affected	in	Qualcomm Search vendor "Qualcomm"	Apq8098 Search vendor "Qualcomm" for product "Apq8098"	-	-	Safe
Qualcomm Search vendor "Qualcomm"	Bitra Firmware Search vendor "Qualcomm" for product "Bitra Firmware"	-	-	Affected	in	Qualcomm Search vendor "Qualcomm"	Bitra Search vendor "Qualcomm" for product "Bitra"	-	-	Safe
Qualcomm Search vendor "Qualcomm"	Msm8909w Firmware Search vendor "Qualcomm" for product "Msm8909w Firmware"	-	-	Affected	in	Qualcomm Search vendor "Qualcomm"	Msm8909w Search vendor "Qualcomm" for product "Msm8909w"	-	-	Safe
Qualcomm Search vendor "Qualcomm"	Msm8996au Firmware Search vendor "Qualcomm" for product "Msm8996au Firmware"	-	-	Affected	in	Qualcomm Search vendor "Qualcomm"	Msm8996au Search vendor "Qualcomm" for product "Msm8996au"	-	-	Safe
Qualcomm Search vendor "Qualcomm"	Nicobar Firmware Search vendor "Qualcomm" for product "Nicobar Firmware"	-	-	Affected	in	Qualcomm Search vendor "Qualcomm"	Nicobar Search vendor "Qualcomm" for product "Nicobar"	-	-	Safe
Qualcomm Search vendor "Qualcomm"	Qcm2150 Firmware Search vendor "Qualcomm" for product "Qcm2150 Firmware"	-	-	Affected	in	Qualcomm Search vendor "Qualcomm"	Qcm2150 Search vendor "Qualcomm" for product "Qcm2150"	-	-	Safe
Qualcomm Search vendor "Qualcomm"	Qcs605 Firmware Search vendor "Qualcomm" for product "Qcs605 Firmware"	-	-	Affected	in	Qualcomm Search vendor "Qualcomm"	Qcs605 Search vendor "Qualcomm" for product "Qcs605"	-	-	Safe
Qualcomm Search vendor "Qualcomm"	Saipan Firmware Search vendor "Qualcomm" for product "Saipan Firmware"	-	-	Affected	in	Qualcomm Search vendor "Qualcomm"	Saipan Search vendor "Qualcomm" for product "Saipan"	-	-	Safe
Qualcomm Search vendor "Qualcomm"	Sdm429w Firmware Search vendor "Qualcomm" for product "Sdm429w Firmware"	-	-	Affected	in	Qualcomm Search vendor "Qualcomm"	Sdm429w Search vendor "Qualcomm" for product "Sdm429w"	-	-	Safe
Qualcomm Search vendor "Qualcomm"	Sdx20 Firmware Search vendor "Qualcomm" for product "Sdx20 Firmware"	-	-	Affected	in	Qualcomm Search vendor "Qualcomm"	Sdx20 Search vendor "Qualcomm" for product "Sdx20"	-	-	Safe
Qualcomm Search vendor "Qualcomm"	Sm6150 Firmware Search vendor "Qualcomm" for product "Sm6150 Firmware"	-	-	Affected	in	Qualcomm Search vendor "Qualcomm"	Sm6150 Search vendor "Qualcomm" for product "Sm6150"	-	-	Safe
Qualcomm Search vendor "Qualcomm"	Sm8150 Firmware Search vendor "Qualcomm" for product "Sm8150 Firmware"	-	-	Affected	in	Qualcomm Search vendor "Qualcomm"	Sm8150 Search vendor "Qualcomm" for product "Sm8150"	-	-	Safe
Qualcomm Search vendor "Qualcomm"	Sm8250 Firmware Search vendor "Qualcomm" for product "Sm8250 Firmware"	-	-	Affected	in	Qualcomm Search vendor "Qualcomm"	Sm8250 Search vendor "Qualcomm" for product "Sm8250"	-	-	Safe
Qualcomm Search vendor "Qualcomm"	Sxr2130 Firmware Search vendor "Qualcomm" for product "Sxr2130 Firmware"	-	-	Affected	in	Qualcomm Search vendor "Qualcomm"	Sxr2130 Search vendor "Qualcomm" for product "Sxr2130"	-	-	Safe