CVE-2020-3633: Out-of-bounds Read
Array out of bound may occur while playing mp3 file as no check is there on offset if it is greater than the buffer allocated or not in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables in APQ8009, APQ8053, APQ8096AU, APQ8098, Kamorta, MDM9206, MDM9207C, MDM9607, MSM8905, MSM8909W, MSM8917, MSM8953, MSM8996AU, MSM8998, QCS405, QCS605, QM215, Rennell, Saipan, SDA660, SDM429, SDM429W, SDM439, SDM450, SDM630, SDM632, SDM636, SDM660, SDM670, SDM710, SDM845, SDX20, SM6150, SM7150, SM8150, SM8250, SXR2130
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2020-3633?
CVE-2020-3633 has a high severity rating due to the potential for array out of bounds errors when processing MP3 files.
How do I fix CVE-2020-3633?
To fix CVE-2020-3633, update the firmware of the affected Qualcomm devices to the latest available version that addresses the vulnerability.
Which devices are affected by CVE-2020-3633?
CVE-2020-3633 affects a variety of Qualcomm Snapdragon products including those in mobile, industrial IoT, and automotive categories.
What type of vulnerability is CVE-2020-3633?
CVE-2020-3633 is an array out of bounds vulnerability found in the playback of MP3 files.
Can exploitation of CVE-2020-3633 lead to device compromise?
Yes, exploitation of CVE-2020-3633 could potentially allow an attacker to execute arbitrary code on affected devices.