CVE-2020-3621: Input Validation
u'Lack of check to ensure that the TX read index & RX write index that are read from shared memory are less than the FIFO size results into memory corruption and potential information leakage' in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables, Snapdragon Wired Infrastructure and Networking in APQ8009, APQ8017, APQ8053, APQ8096AU, APQ8098, Bitra, IPQ6018, IPQ8074, Kamorta, MDM9150, MDM9205, MDM9206, MDM9607, MDM9640, MDM9645, MDM9650, MDM9655, MSM8905, MSM8909, MSM8917, MSM8920, MSM8937, MSM8940, MSM8953, MSM8996, MSM8996AU, MSM8998, Nicobar, QCA8081, QCM2150, QCN7605, QCS404, QCS405, QCS605, QCS610, QM215, Rennell, SA415M, SA6155P, Saipan, SC7180, SC8180X, SDA660, SDA845, SDM429, SDM429W, SDM439, SDM450, SDM630, SDM632, SDM636, SDM660, SDM670, SDM710, SDM845, SDM850, SDX20, SDX24, SDX55, SM6150, SM7150, SM8150, SM8250, SXR1130, SXR2130
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2020-3621?
The severity of CVE-2020-3621 is rated as high, indicating it can lead to memory corruption and potential information leakage.
How do I fix CVE-2020-3621?
To fix CVE-2020-3621, update the affected Qualcomm firmware to the latest version provided in security bulletins from Qualcomm.
Which devices are affected by CVE-2020-3621?
CVE-2020-3621 affects various Qualcomm chipsets, including APQ8009, APQ8053, APQ8096AU, APQ8098, and others within the Snapdragon family.
What components are impacted by CVE-2020-3621?
CVE-2020-3621 impacts components related to shared memory management in Snapdragon Auto, Compute, Connectivity, and Consumer Electronics.
Is CVE-2020-3621 exploitable remotely?
CVE-2020-3621 is exploitable locally, meaning an attacker would likely need physical access to the device or execute malicious software.