CVSS 3.1
7.8 highCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:HCVE-2020-3665
High (7.8) in qualcomm. EPSS 0.2% chance of exploitation in the next 30 days.
A possible buffer overflow would occur while processing command from firmware due to the group_id obtained from the firmware being out of range in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon IoT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables in APQ8009, APQ8053, APQ8096AU, MDM9206, MDM9207C, MDM9607, MDM9615, MDM9640, MDM9650, MSM8909W, MSM8996, MSM8996AU, QCA6174A, QCA9377, QCA9379, SDM439, SDM636, SDM660, SDX20, SDX24, SM8150
Severity
- EPSS
- 0.2% chance of exploitation in the next 30 days; higher than 12% of CVEs (scores of 2026-10-31)
- CWE
- CWE-129
- Published
- Modified
- Record from
- the NVD, synced
Affected
- qualcomm:apq8009_firmware
- qualcomm:apq8053_firmware
- qualcomm:apq8096au_firmware
- qualcomm:mdm9206_firmware
- qualcomm:mdm9207c_firmware
- qualcomm:mdm9607_firmware
- qualcomm:mdm9615_firmware
- qualcomm:mdm9640_firmware
- qualcomm:mdm9650_firmware
- qualcomm:msm8909w_firmware
- qualcomm:msm8996_firmware
- qualcomm:msm8996au_firmware
- qualcomm:qca6174a_firmware
- qualcomm:qca9377_firmware
- qualcomm:qca9379_firmware
- qualcomm:sdm439_firmware
- qualcomm:sdm636_firmware
- qualcomm:sdm660_firmware
- qualcomm:sdx20_firmware
- qualcomm:sdx24_firmware
- qualcomm:sm8150_firmware