cve.bz

CVE-2020-3648

7.8 highEPSS 0.2%

High (7.8) in qualcomm msm8909w firmware. EPSS 0.2% chance of exploitation in the next 30 days.

u'Possible out of bound write in DSP driver code due to lack of check of data received from user' in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables in MSM8909W

Severity

CVSS 3.1

7.8 high
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
EPSS
0.2% chance of exploitation in the next 30 days; higher than 8% of CVEs (scores of 2026-10-31)
CWEs
CWE-20, CWE-787
Published
Modified
Record from
the NVD, synced

Affected

References

Check your stackJSON