2023-04-24 12:24:31 +02:00
{
"id" : "CVE-2020-3665" ,
"sourceIdentifier" : "product-security@qualcomm.com" ,
"published" : "2020-06-22T07:15:12.413" ,
2024-11-23 13:10:58 +00:00
"lastModified" : "2024-11-21T05:31:31.897" ,
"vulnStatus" : "Modified" ,
2024-12-08 03:06:42 +00:00
"cveTags" : [ ] ,
2023-04-24 12:24:31 +02:00
"descriptions" : [
{
"lang" : "en" ,
"value" : "A possible buffer overflow would occur while processing command from firmware due to the group_id obtained from the firmware being out of range in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon IoT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables in APQ8009, APQ8053, APQ8096AU, MDM9206, MDM9207C, MDM9607, MDM9615, MDM9640, MDM9650, MSM8909W, MSM8996, MSM8996AU, QCA6174A, QCA9377, QCA9379, SDM439, SDM636, SDM660, SDX20, SDX24, SM8150"
} ,
{
"lang" : "es" ,
"value" : "Se presentar\u00eda un posible desbordamiento del b\u00fafer al procesar el comando del firmware debido a que el group_id obtenido del firmware est\u00e1 fuera de rango en los productos Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon IoT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables en versiones APQ8009, APQ8053, APQ8096AU, MDM9206, MDM9207C, MDM9607, MDM9615, MDM9640, MDM9650, MSM8909W, MSM8996, MSM8996AU, QCA6174A, QCA9377, QCA9379, SDM439, SDM636, SDM660, SDX20, SDX24, SM8150"
}
] ,
"metrics" : {
"cvssMetricV31" : [
{
"source" : "nvd@nist.gov" ,
"type" : "Primary" ,
"cvssData" : {
"version" : "3.1" ,
"vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" ,
2024-11-23 13:10:58 +00:00
"baseScore" : 7.8 ,
"baseSeverity" : "HIGH" ,
2023-04-24 12:24:31 +02:00
"attackVector" : "LOCAL" ,
"attackComplexity" : "LOW" ,
"privilegesRequired" : "LOW" ,
"userInteraction" : "NONE" ,
"scope" : "UNCHANGED" ,
"confidentialityImpact" : "HIGH" ,
"integrityImpact" : "HIGH" ,
2024-11-23 13:10:58 +00:00
"availabilityImpact" : "HIGH"
2023-04-24 12:24:31 +02:00
} ,
"exploitabilityScore" : 1.8 ,
"impactScore" : 5.9
}
] ,
"cvssMetricV2" : [
{
"source" : "nvd@nist.gov" ,
"type" : "Primary" ,
"cvssData" : {
"version" : "2.0" ,
"vectorString" : "AV:L/AC:L/Au:N/C:P/I:P/A:P" ,
2024-11-23 13:10:58 +00:00
"baseScore" : 4.6 ,
2023-04-24 12:24:31 +02:00
"accessVector" : "LOCAL" ,
"accessComplexity" : "LOW" ,
"authentication" : "NONE" ,
"confidentialityImpact" : "PARTIAL" ,
"integrityImpact" : "PARTIAL" ,
2024-11-23 13:10:58 +00:00
"availabilityImpact" : "PARTIAL"
2023-04-24 12:24:31 +02:00
} ,
"baseSeverity" : "MEDIUM" ,
"exploitabilityScore" : 3.9 ,
"impactScore" : 6.4 ,
"acInsufInfo" : false ,
"obtainAllPrivilege" : false ,
"obtainUserPrivilege" : false ,
"obtainOtherPrivilege" : false ,
"userInteractionRequired" : false
}
]
} ,
"weaknesses" : [
{
"source" : "nvd@nist.gov" ,
"type" : "Primary" ,
"description" : [
{
"lang" : "en" ,
"value" : "CWE-129"
}
]
}
] ,
"configurations" : [
{
"operator" : "AND" ,
"nodes" : [
{
"operator" : "OR" ,
"negate" : false ,
"cpeMatch" : [
{
"vulnerable" : true ,
"criteria" : "cpe:2.3:o:qualcomm:apq8009_firmware:-:*:*:*:*:*:*:*" ,
"matchCriteriaId" : "C61BF93F-53DF-4399-AF41-45CEC1E0A2B8"
}
]
} ,
{
"operator" : "OR" ,
"negate" : false ,
"cpeMatch" : [
{
"vulnerable" : false ,
"criteria" : "cpe:2.3:h:qualcomm:apq8009:-:*:*:*:*:*:*:*" ,
"matchCriteriaId" : "7CC498E0-B82B-4A53-8F55-6C1DA58AFA88"
}
]
}
]
} ,
{
"operator" : "AND" ,
"nodes" : [
{
"operator" : "OR" ,
"negate" : false ,
"cpeMatch" : [
{
"vulnerable" : true ,
"criteria" : "cpe:2.3:o:qualcomm:apq8053_firmware:-:*:*:*:*:*:*:*" ,
"matchCriteriaId" : "B052615D-857A-46D4-9098-1CBFA14687C6"
}
]
} ,
{
"operator" : "OR" ,
"negate" : false ,
"cpeMatch" : [
{
"vulnerable" : false ,
"criteria" : "cpe:2.3:h:qualcomm:apq8053:-:*:*:*:*:*:*:*" ,
"matchCriteriaId" : "19B59B60-A298-4A56-A45A-E34B7AAB43D7"
}
]
}
]
} ,
{
"operator" : "AND" ,
"nodes" : [
{
"operator" : "OR" ,
"negate" : false ,
"cpeMatch" : [
{
"vulnerable" : true ,
"criteria" : "cpe:2.3:o:qualcomm:apq8096au_firmware:-:*:*:*:*:*:*:*" ,
"matchCriteriaId" : "DD17C0A3-A200-4659-968B-B2DA03CB683F"
}
]
} ,
{
"operator" : "OR" ,
"negate" : false ,
"cpeMatch" : [
{
"vulnerable" : false ,
"criteria" : "cpe:2.3:h:qualcomm:apq8096au:-:*:*:*:*:*:*:*" ,
"matchCriteriaId" : "B1F31FFB-982A-4308-82F8-C2480DABDED8"
}
]
}
]
} ,
{
"operator" : "AND" ,
"nodes" : [
{
"operator" : "OR" ,
"negate" : false ,
"cpeMatch" : [
{
"vulnerable" : true ,
"criteria" : "cpe:2.3:o:qualcomm:mdm9206_firmware:-:*:*:*:*:*:*:*" ,
"matchCriteriaId" : "A960B86A-C397-4ACB-AEE6-55F316D32949"
}
]
} ,
{
"operator" : "OR" ,
"negate" : false ,
"cpeMatch" : [
{
"vulnerable" : false ,
"criteria" : "cpe:2.3:h:qualcomm:mdm9206:-:*:*:*:*:*:*:*" ,
"matchCriteriaId" : "D79B8959-3D1E-4B48-9181-D75FE90AAF98"
}
]
}
]
} ,
{
"operator" : "AND" ,
"nodes" : [
{
"operator" : "OR" ,
"negate" : false ,
"cpeMatch" : [
{
"vulnerable" : true ,
"criteria" : "cpe:2.3:o:qualcomm:mdm9207c_firmware:-:*:*:*:*:*:*:*" ,
"matchCriteriaId" : "A3CFA66A-CD2E-4670-A137-65E2C94C1A11"
}
]
} ,
{
"operator" : "OR" ,
"negate" : false ,
"cpeMatch" : [
{
"vulnerable" : false ,
"criteria" : "cpe:2.3:h:qualcomm:mdm9207c:-:*:*:*:*:*:*:*" ,
"matchCriteriaId" : "DE52FE99-DF0D-4C57-BB9C-0B853D1AF58B"
}
]
}
]
} ,
{
"operator" : "AND" ,
"nodes" : [
{
"operator" : "OR" ,
"negate" : false ,
"cpeMatch" : [
{
"vulnerable" : true ,
"criteria" : "cpe:2.3:o:qualcomm:mdm9607_firmware:-:*:*:*:*:*:*:*" ,
"matchCriteriaId" : "A35FECFB-60AE-42A8-BCBB-FEA7D5826D49"
}
]
} ,
{
"operator" : "OR" ,
"negate" : false ,
"cpeMatch" : [
{
"vulnerable" : false ,
"criteria" : "cpe:2.3:h:qualcomm:mdm9607:-:*:*:*:*:*:*:*" ,
"matchCriteriaId" : "E9765187-8653-4D66-B230-B2CE862AC5C0"
}
]
}
]
} ,
{
"operator" : "AND" ,
"nodes" : [
{
"operator" : "OR" ,
"negate" : false ,
"cpeMatch" : [
{
"vulnerable" : true ,
"criteria" : "cpe:2.3:o:qualcomm:mdm9615_firmware:-:*:*:*:*:*:*:*" ,
"matchCriteriaId" : "71E28EA6-0683-4755-8ABB-7F37DA810E4F"
}
]
} ,
{
"operator" : "OR" ,
"negate" : false ,
"cpeMatch" : [
{
"vulnerable" : false ,
"criteria" : "cpe:2.3:h:qualcomm:mdm9615:-:*:*:*:*:*:*:*" ,
"matchCriteriaId" : "D4DF4D4E-CDAA-42BB-802E-2722E7F3DBC2"
}
]
}
]
} ,
{
"operator" : "AND" ,
"nodes" : [
{
"operator" : "OR" ,
"negate" : false ,
"cpeMatch" : [
{
"vulnerable" : true ,
"criteria" : "cpe:2.3:o:qualcomm:mdm9640_firmware:-:*:*:*:*:*:*:*" ,
"matchCriteriaId" : "7FD1C359-C79B-4CE8-A192-5AA34D0BF05B"
}
]
} ,
{
"operator" : "OR" ,
"negate" : false ,
"cpeMatch" : [
{
"vulnerable" : false ,
"criteria" : "cpe:2.3:h:qualcomm:mdm9640:-:*:*:*:*:*:*:*" ,
"matchCriteriaId" : "716B747E-672C-4B95-9D8E-1262338E67EA"
}
]
}
]
} ,
{
"operator" : "AND" ,
"nodes" : [
{
"operator" : "OR" ,
"negate" : false ,
"cpeMatch" : [
{
"vulnerable" : true ,
"criteria" : "cpe:2.3:o:qualcomm:mdm9650_firmware:-:*:*:*:*:*:*:*" ,
"matchCriteriaId" : "35B7E25E-FA92-4C36-883C-CFF36F4B3507"
}
]
} ,
{
"operator" : "OR" ,
"negate" : false ,
"cpeMatch" : [
{
"vulnerable" : false ,
"criteria" : "cpe:2.3:h:qualcomm:mdm9650:-:*:*:*:*:*:*:*" ,
"matchCriteriaId" : "ECD99C6F-2444-4A5E-A517-0C8023DDF23D"
}
]
}
]
} ,
{
"operator" : "AND" ,
"nodes" : [
{
"operator" : "OR" ,
"negate" : false ,
"cpeMatch" : [
{
"vulnerable" : true ,
"criteria" : "cpe:2.3:o:qualcomm:msm8909w_firmware:-:*:*:*:*:*:*:*" ,
"matchCriteriaId" : "FE28A59C-7AA6-4B85-84E8-07852B96108E"
}
]
} ,
{
"operator" : "OR" ,
"negate" : false ,
"cpeMatch" : [
{
"vulnerable" : false ,
"criteria" : "cpe:2.3:h:qualcomm:msm8909w:-:*:*:*:*:*:*:*" ,
"matchCriteriaId" : "5DEE828B-09A7-4AC1-8134-491A7C87C118"
}
]
}
]
} ,
{
"operator" : "AND" ,
"nodes" : [
{
"operator" : "OR" ,
"negate" : false ,
"cpeMatch" : [
{
"vulnerable" : true ,
"criteria" : "cpe:2.3:o:qualcomm:msm8996_firmware:-:*:*:*:*:*:*:*" ,
"matchCriteriaId" : "F25AB827-02D7-4FDE-BFB7-3F5DE8071477"
}
]
} ,
{
"operator" : "OR" ,
"negate" : false ,
"cpeMatch" : [
{
"vulnerable" : false ,
"criteria" : "cpe:2.3:h:qualcomm:msm8996:-:*:*:*:*:*:*:*" ,
"matchCriteriaId" : "8AAB0FCA-8F94-4FB1-ACCC-02E0222BAE49"
}
]
}
]
} ,
{
"operator" : "AND" ,
"nodes" : [
{
"operator" : "OR" ,
"negate" : false ,
"cpeMatch" : [
{
"vulnerable" : true ,
"criteria" : "cpe:2.3:o:qualcomm:msm8996au_firmware:-:*:*:*:*:*:*:*" ,
"matchCriteriaId" : "8CA1E7B0-782B-4757-B118-802943798984"
}
]
} ,
{
"operator" : "OR" ,
"negate" : false ,
"cpeMatch" : [
{
"vulnerable" : false ,
"criteria" : "cpe:2.3:h:qualcomm:msm8996au:-:*:*:*:*:*:*:*" ,
"matchCriteriaId" : "95CB08EC-AE12-4A54-AA3C-998F01FC8763"
}
]
}
]
} ,
{
"operator" : "AND" ,
"nodes" : [
{
"operator" : "OR" ,
"negate" : false ,
"cpeMatch" : [
{
"vulnerable" : true ,
"criteria" : "cpe:2.3:o:qualcomm:qca6174a_firmware:-:*:*:*:*:*:*:*" ,
"matchCriteriaId" : "4FF653D0-15CF-4A10-8D8E-BE56F4DAB890"
}
]
} ,
{
"operator" : "OR" ,
"negate" : false ,
"cpeMatch" : [
{
"vulnerable" : false ,
"criteria" : "cpe:2.3:h:qualcomm:qca6174a:-:*:*:*:*:*:*:*" ,
"matchCriteriaId" : "C31FA74C-6659-4457-BC32-257624F43C66"
}
]
}
]
} ,
{
"operator" : "AND" ,
"nodes" : [
{
"operator" : "OR" ,
"negate" : false ,
"cpeMatch" : [
{
"vulnerable" : true ,
"criteria" : "cpe:2.3:o:qualcomm:qca9377_firmware:-:*:*:*:*:*:*:*" ,
"matchCriteriaId" : "C4D2B46E-3996-42FD-B932-09E92C02EC8A"
}
]
} ,
{
"operator" : "OR" ,
"negate" : false ,
"cpeMatch" : [
{
"vulnerable" : false ,
"criteria" : "cpe:2.3:h:qualcomm:qca9377:-:*:*:*:*:*:*:*" ,
"matchCriteriaId" : "98E58C63-F253-4DCC-8A14-48FEB64B4C3D"
}
]
}
]
} ,
{
"operator" : "AND" ,
"nodes" : [
{
"operator" : "OR" ,
"negate" : false ,
"cpeMatch" : [
{
"vulnerable" : true ,
"criteria" : "cpe:2.3:o:qualcomm:qca9379_firmware:-:*:*:*:*:*:*:*" ,
"matchCriteriaId" : "25565FDA-651D-4A05-8B1E-2188B6921253"
}
]
} ,
{
"operator" : "OR" ,
"negate" : false ,
"cpeMatch" : [
{
"vulnerable" : false ,
"criteria" : "cpe:2.3:h:qualcomm:qca9379:-:*:*:*:*:*:*:*" ,
"matchCriteriaId" : "B8D49750-BBEA-4A3D-9898-28B7A50A7F42"
}
]
}
]
} ,
{
"operator" : "AND" ,
"nodes" : [
{
"operator" : "OR" ,
"negate" : false ,
"cpeMatch" : [
{
"vulnerable" : true ,
"criteria" : "cpe:2.3:o:qualcomm:sdm439_firmware:-:*:*:*:*:*:*:*" ,
"matchCriteriaId" : "84289E6D-DA2A-4D04-9DDA-E8C46DDDD056"
}
]
} ,
{
"operator" : "OR" ,
"negate" : false ,
"cpeMatch" : [
{
"vulnerable" : false ,
"criteria" : "cpe:2.3:h:qualcomm:sdm439:-:*:*:*:*:*:*:*" ,
"matchCriteriaId" : "C0B56360-7AC3-410A-B7F8-1BE8514B3781"
}
]
}
]
} ,
{
"operator" : "AND" ,
"nodes" : [
{
"operator" : "OR" ,
"negate" : false ,
"cpeMatch" : [
{
"vulnerable" : true ,
"criteria" : "cpe:2.3:o:qualcomm:sdm636_firmware:-:*:*:*:*:*:*:*" ,
"matchCriteriaId" : "8F00D854-0AC7-415F-B19A-642CB9F72210"
}
]
} ,
{
"operator" : "OR" ,
"negate" : false ,
"cpeMatch" : [
{
"vulnerable" : false ,
"criteria" : "cpe:2.3:h:qualcomm:sdm636:-:*:*:*:*:*:*:*" ,
"matchCriteriaId" : "F977B432-2709-4D75-AA3E-F440285B7BA2"
}
]
}
]
} ,
{
"operator" : "AND" ,
"nodes" : [
{
"operator" : "OR" ,
"negate" : false ,
"cpeMatch" : [
{
"vulnerable" : true ,
"criteria" : "cpe:2.3:o:qualcomm:sdm660_firmware:-:*:*:*:*:*:*:*" ,
"matchCriteriaId" : "24D7B67C-6FEC-48F8-9D46-778E4528BC20"
}
]
} ,
{
"operator" : "OR" ,
"negate" : false ,
"cpeMatch" : [
{
"vulnerable" : false ,
"criteria" : "cpe:2.3:h:qualcomm:sdm660:-:*:*:*:*:*:*:*" ,
"matchCriteriaId" : "05006807-D961-446C-B8DC-C87507F1316E"
}
]
}
]
} ,
{
"operator" : "AND" ,
"nodes" : [
{
"operator" : "OR" ,
"negate" : false ,
"cpeMatch" : [
{
"vulnerable" : true ,
"criteria" : "cpe:2.3:o:qualcomm:sdx20_firmware:-:*:*:*:*:*:*:*" ,
"matchCriteriaId" : "A0CE1B23-6FE3-41C4-B264-C7A9E8BDBEC1"
}
]
} ,
{
"operator" : "OR" ,
"negate" : false ,
"cpeMatch" : [
{
"vulnerable" : false ,
"criteria" : "cpe:2.3:h:qualcomm:sdx20:-:*:*:*:*:*:*:*" ,
"matchCriteriaId" : "794BA13C-3C63-4695-AA45-676F85D904BE"
}
]
}
]
} ,
{
"operator" : "AND" ,
"nodes" : [
{
"operator" : "OR" ,
"negate" : false ,
"cpeMatch" : [
{
"vulnerable" : true ,
"criteria" : "cpe:2.3:o:qualcomm:sdx24_firmware:-:*:*:*:*:*:*:*" ,
"matchCriteriaId" : "F9BE864E-7B1E-44D5-A10A-60078095DE33"
}
]
} ,
{
"operator" : "OR" ,
"negate" : false ,
"cpeMatch" : [
{
"vulnerable" : false ,
"criteria" : "cpe:2.3:h:qualcomm:sdx24:-:*:*:*:*:*:*:*" ,
"matchCriteriaId" : "96DD6B48-2554-464D-A061-DBB4B8E00758"
}
]
}
]
} ,
{
"operator" : "AND" ,
"nodes" : [
{
"operator" : "OR" ,
"negate" : false ,
"cpeMatch" : [
{
"vulnerable" : true ,
"criteria" : "cpe:2.3:o:qualcomm:sm8150_firmware:-:*:*:*:*:*:*:*" ,
"matchCriteriaId" : "9286B1E8-E39F-4DAA-8969-311CA2A0A8AA"
}
]
} ,
{
"operator" : "OR" ,
"negate" : false ,
"cpeMatch" : [
{
"vulnerable" : false ,
"criteria" : "cpe:2.3:h:qualcomm:sm8150:-:*:*:*:*:*:*:*" ,
"matchCriteriaId" : "19B9AE36-87A9-4EE7-87C8-CCA2DCF51039"
}
]
}
]
}
] ,
"references" : [
{
"url" : "https://www.qualcomm.com/company/product-security/bulletins/june-2020-bulletin" ,
"source" : "product-security@qualcomm.com" ,
"tags" : [
"Broken Link"
]
} ,
{
"url" : "https://www.qualcomm.com/company/product-security/bulletins/june-2020-security-bulletin" ,
"source" : "nvd@nist.gov" ,
"tags" : [
"Vendor Advisory"
]
2024-11-23 13:10:58 +00:00
} ,
{
"url" : "https://www.qualcomm.com/company/product-security/bulletins/june-2020-bulletin" ,
"source" : "af854a3a-2127-422b-91ae-364da2661108" ,
"tags" : [
"Broken Link"
]
2023-04-24 12:24:31 +02:00
}
]
}