CVE-2020-3676 - Qualcomm Sdm630 Firmware, Qualcomm Sdm636 Firmware and Qualcomm Msm8920 Firmware

Critical 7.8

Possible memory corruption in perfservice due to improper validation array length taken from user application. in Snapdragon Auto, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile in APQ8096AU, APQ8098, Kamorta, MSM8917, MSM8920, MSM8937, MSM8940, MSM8953, MSM8998, Nicobar, QCM2150, QCS605, QM215, Rennell, Saipan, SDM429, SDM439, SDM450, SDM630, SDM632, SDM636, SDM660, SDM670, SDM710, SM6150, SM7150, SM8150, SM8250, SXR1130, SXR2130

Affected software

Qualcomm Sdm630 Firmware

Qualcomm Sdm636 Firmware

Qualcomm Msm8920 Firmware

Qualcomm Sxr2130 Firmware

Qualcomm Msm8998 Firmware

Qualcomm Sdm429 Firmware

Qualcomm Sm7150 Firmware

Qualcomm Apq8098 Firmware

Qualcomm Apq8096au Firmware

Qualcomm Nicobar Firmware

Qualcomm Qcs605 Firmware

Qualcomm Sdm710 Firmware

Qualcomm Sm8150 Firmware

Qualcomm Sdm439 Firmware

Qualcomm Sxr1130 Firmware

Qualcomm Saipan Firmware

Qualcomm Rennell Firmware

Qualcomm Qcm2150 Firmware

Qualcomm Sm6150 Firmware

Qualcomm Sdm660 Firmware

Qualcomm Msm8940 Firmware

Qualcomm Msm8937 Firmware

Qualcomm Msm8953 Firmware

Qualcomm Qm215 Firmware

Qualcomm Sdm632 Firmware

Qualcomm Msm8917 Firmware

Qualcomm Sdm450 Firmware

Qualcomm Sdm670 Firmware

Qualcomm Sm8250 Firmware

Qualcomm Kamorta Firmware

Reference links

Get alerted to vulnerabilities in your software

CVE alerts, vulnerability alerts, latest versions and news matched to your software stack.