CVSS 3.1
9.8 criticalCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:HCVE-2020-3633
Critical (9.8) in qualcomm. EPSS 1.1% chance of exploitation in the next 30 days.
Array out of bound may occur while playing mp3 file as no check is there on offset if it is greater than the buffer allocated or not in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables in APQ8009, APQ8053, APQ8096AU, APQ8098, Kamorta, MDM9206, MDM9207C, MDM9607, MSM8905, MSM8909W, MSM8917, MSM8953, MSM8996AU, MSM8998, QCS405, QCS605, QM215, Rennell, Saipan, SDA660, SDM429, SDM429W, SDM439, SDM450, SDM630, SDM632, SDM636, SDM660, SDM670, SDM710, SDM845, SDX20, SM6150, SM7150, SM8150, SM8250, SXR2130
Severity
- EPSS
- 1.1% chance of exploitation in the next 30 days; higher than 66% of CVEs (scores of 2026-10-31)
- CWE
- CWE-129
- Published
- Modified
- Record from
- the NVD, synced
Affected
- qualcomm:apq8009_firmware
- qualcomm:apq8053_firmware
- qualcomm:apq8096au_firmware
- qualcomm:apq8098_firmware
- qualcomm:kamorta_firmware
- qualcomm:mdm9206_firmware
- qualcomm:mdm9207c_firmware
- qualcomm:mdm9607_firmware
- qualcomm:msm8905_firmware
- qualcomm:msm8909w_firmware
- qualcomm:msm8917_firmware
- qualcomm:msm8953_firmware
- qualcomm:msm8996au_firmware
- qualcomm:msm8998_firmware
- qualcomm:qcs405_firmware
- qualcomm:qcs605_firmware
- qualcomm:qm215_firmware
- qualcomm:rennell_firmware
- qualcomm:saipan_firmware
- qualcomm:sda660_firmware
- qualcomm:sdm429_firmware
- qualcomm:sdm429w_firmware
- qualcomm:sdm439_firmware
- qualcomm:sdm450_firmware
- qualcomm:sdm630_firmware
- qualcomm:sdm632_firmware
- qualcomm:sdm636_firmware
- qualcomm:sdm660_firmware
- qualcomm:sdm670_firmware
- qualcomm:sdm710_firmware
- qualcomm:sdm845_firmware
- qualcomm:sdx20_firmware
- qualcomm:sm6150_firmware
- qualcomm:sm7150_firmware
- qualcomm:sm8150_firmware
- qualcomm:sm8250_firmware
- qualcomm:sxr2130_firmware