CVSS 3.1
9.8 criticalCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:HCVE-2020-3675
Critical (9.8) in qualcomm. EPSS 1.1% chance of exploitation in the next 30 days.
u'Potential integer underflow while parsing Service Info and IPv6 link-local TLVs that comes as part of NDPE attribute' in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer Electronics Connectivity, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wired Infrastructure and Networking in IPQ5018, IPQ6018, IPQ8074, Kamorta, Nicobar, QCA6390, QCN7605, QCS404, QCS405, Rennell, SA415M, Saipan, SC7180, SC8180X, SDX55, SM6150, SM7150, SM8150, SM8250
Severity
- EPSS
- 1.1% chance of exploitation in the next 30 days; higher than 64% of CVEs (scores of 2026-10-31)
- CWE
- CWE-191
- Published
- Modified
- Record from
- the NVD, synced
Affected
- qualcomm:ipq5018_firmware
- qualcomm:ipq6018_firmware
- qualcomm:ipq8074_firmware
- qualcomm:kamorta_firmware
- qualcomm:nicobar_firmware
- qualcomm:qca6390_firmware
- qualcomm:qcn7605_firmware
- qualcomm:qcs404_firmware
- qualcomm:qcs405_firmware
- qualcomm:rennell_firmware
- qualcomm:sa415m_firmware
- qualcomm:saipan_firmware
- qualcomm:sc7180_firmware
- qualcomm:sc8180x_firmware
- qualcomm:sdx55_firmware
- qualcomm:sm6150_firmware
- qualcomm:sm7150_firmware
- qualcomm:sm8150_firmware
- qualcomm:sm8250_firmware