CVSS 3.1
7.1 highCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:HCVE-2020-3617
High (7.1) in qualcomm. EPSS 0.2% chance of exploitation in the next 30 days.
u'Buffer over-read Issue in Q6 testbus framework due to diag packet length is not completely validated before accessing the field and leads to Information disclosure.' in Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile in Kamorta, Nicobar, QCS605, QCS610, Rennell, SC7180, SDA660, SDM630, SDM636, SDM660, SDM670, SDM710, SM6150, SM7150, SM8150, SXR1130
Severity
- EPSS
- 0.2% chance of exploitation in the next 30 days; higher than 12% of CVEs (scores of 2026-10-31)
- CWEs
- CWE-20, CWE-125
- Published
- Modified
- Record from
- the NVD, synced
Affected
- qualcomm:kamorta_firmware
- qualcomm:nicobar_firmware
- qualcomm:qcs605_firmware
- qualcomm:qcs610_firmware
- qualcomm:rennell_firmware
- qualcomm:sc7180_firmware
- qualcomm:sda660_firmware
- qualcomm:sdm630_firmware
- qualcomm:sdm636_firmware
- qualcomm:sdm660_firmware
- qualcomm:sdm670_firmware
- qualcomm:sdm710_firmware
- qualcomm:sm6150_firmware
- qualcomm:sm7150_firmware
- qualcomm:sm8150_firmware
- qualcomm:sxr1130_firmware