CVE-2020-3684 - Qualcomm Kamorta Firmware, Qualcomm Msm8905 Firmware and Qualcomm Qcs605 Firmware

Critical 7.8

u'QSEE reads the access permission policy for the SMEM TOC partition from the SMEM TOC contents populated by XBL Loader and applies them without validation' in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wired Infrastructure and Networking in Agatti, APQ8009, APQ8098, Bitra, IPQ6018, Kamorta, MDM9150, MDM9205, MDM9206, MDM9607, MDM9650, MSM8905, MSM8998, Nicobar, QCA6390, QCS404, QCS405, QCS605, QCS610, Rennell, SA415M, SA515M, SA6155P, SA8155P, Saipan, SC7180, SC8180X, SDA660, SDA845, SDM630, SDM636, SDM660, SDM670, SDM710, SDM845, SDM850, SDX20, SDX24, SDX55, SM6150, SM7150, SM8150, SM8250, SXR1130, SXR2130

Affected software

Qualcomm Kamorta Firmware

Qualcomm Msm8905 Firmware

Qualcomm Qcs605 Firmware

Qualcomm Msm8998 Firmware

Qualcomm Sm7150 Firmware

Qualcomm Sxr2130 Firmware

Qualcomm Qcs610 Firmware

Qualcomm Mdm9205 Firmware

Qualcomm Rennell Firmware

Qualcomm Mdm9607 Firmware

Qualcomm Agatti Firmware

Qualcomm Nicobar Firmware

Qualcomm Qcs405 Firmware

Qualcomm Sa6155p Firmware

Qualcomm Mdm9650 Firmware

Qualcomm Sm8150 Firmware

Qualcomm Apq8009 Firmware

Qualcomm Sdm710 Firmware

Qualcomm Ipq6018 Firmware

Qualcomm Sdm845 Firmware

Qualcomm Mdm9206 Firmware

Qualcomm Sa8155p Firmware

Qualcomm Sdx24 Firmware

Qualcomm Sm8250 Firmware

Qualcomm Qca6390 Firmware

Qualcomm Sa515m Firmware

Qualcomm Sdx55 Firmware

Qualcomm Sc7180 Firmware

Qualcomm Mdm9150 Firmware

Qualcomm Sxr1130 Firmware

Qualcomm Sdm850 Firmware

Qualcomm Sdm670 Firmware

Qualcomm Bitra Firmware

Qualcomm Saipan Firmware

Qualcomm Sda660 Firmware

Qualcomm Sdm636 Firmware

Qualcomm Sdm660 Firmware

Qualcomm Sa415m Firmware

Qualcomm Sda845 Firmware

Qualcomm Sm6150 Firmware

Qualcomm Sdm630 Firmware

Qualcomm Sdx20 Firmware

Qualcomm Qcs404 Firmware

Qualcomm Apq8098 Firmware

Qualcomm Sc8180x Firmware

Reference links

Get alerted to vulnerabilities in your software

CVE alerts, vulnerability alerts, latest versions and news matched to your software stack.