CVE-2020-3638
First published: Mon Oct 05 2020(Updated: )
u'An Unaligned address or size can propagate to the database due to improper page permissions and can lead to improper access control' in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Wired Infrastructure and Networking in Agatti, Bitra, Kamorta, QCA6390, QCS404, QCS610, Rennell, SA515M, SC7180, SC8180X, SDX55, SM6150, SM7150, SM8150, SM8250, SXR2130
Credit: product-security@qualcomm.com
| Affected Software | Affected Version | How to fix |
|---|---|---|
| Google Android | ||
| Qualcomm Agatti Firmware | ||
| Qualcomm Agatti | ||
| Google Android | ||
| Google Android | ||
| Google Android | ||
| Google Android | ||
| Qualcomm Qca6390 Firmware | ||
| Qualcomm Qca6390 | ||
| Qualcomm Qcs404 Firmware | ||
| Google Android | ||
| Google Android | ||
| Google Android | ||
| Qualcomm Rennell Firmware | ||
| Google Android | ||
| Qualcomm Sa515m Firmware | ||
| Google Android | ||
| Google Android | ||
| Google Android | ||
| Qualcomm Sc8180x Firmware | ||
| Qualcomm Sc8180x | ||
| Qualcomm Sdx55 Firmware | ||
| Qualcomm Sdx55 | ||
| Qualcomm Sm6150 Firmware | ||
| Qualcomm Sm6150 | ||
| Qualcomm Sm7150 Firmware | ||
| Qualcomm Sm7150 | ||
| Qualcomm Sm8150 Firmware | ||
| Qualcomm Sm8150 | ||
| Qualcomm Sm8250 Firmware | ||
| Qualcomm SM8250 | ||
| Qualcomm Sxr2130 Firmware | ||
| Qualcomm Sxr2130 |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
- https://source.android.com/docs/security/bulletin/2020-10-01/#asterisk
- https://source.android.com/docs/security/bulletin/2020-10-01 (Advisory)
- https://www.qualcomm.com/company/product-security/bulletins/october-2020-bulletin
- https://www.qualcomm.com/company/product-security/bulletins/october-2020-security-bulletin
Frequently Asked Questions
What is the vulnerability ID for this issue?
The vulnerability ID for this issue is CVE-2020-3638.
What is the severity level of CVE-2020-3638?
CVE-2020-3638 has a severity level of high.
Which products are affected by CVE-2020-3638?
CVE-2020-3638 affects Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Wired Infrastructure, Google Android, Qualcomm Agatti Firmware, Qualcomm Qca6390 Firmware, Qualcomm Qcs404 Firmware, Qualcomm Qcs610 Firmware, Qualcomm Rennell Firmware, Qualcomm Sa515m Firmware, Qualcomm Sc7180 Firmware, Qualcomm Sc8180x Firmware, Qualcomm Sdx55 Firmware, Qualcomm Sm6150 Firmware, Qualcomm Sm7150 Firmware, Qualcomm Sm8150 Firmware, Qualcomm Sm8250 Firmware, Qualcomm Sxr2130 Firmware.
What is the impact of CVE-2020-3638?
CVE-2020-3638 allows an unaligned address or size to propagate to the database, leading to improper access control.
Where can I find more information about CVE-2020-3638?
You can find more information about CVE-2020-3638 on the Qualcomm Product Security website and the Android Security Bulletin.
- agent/references
- agent/type
- agent/first-publish-date
- agent/softwarecombine
- agent/event
- agent/author
- agent/severity
- agent/description
- agent/last-modified-date
- agent/tags
- collector/android-source
- source/Android
- agent/software-canonical-lookup
- collector/nvd-index
- agent/software-canonical-lookup-request
- vendor/google
- canonical/google android
- vendor/qualcomm
- canonical/qualcomm agatti firmware
- canonical/qualcomm agatti
- canonical/qualcomm qca6390 firmware
- canonical/qualcomm qca6390
- canonical/qualcomm qcs404 firmware
- canonical/qualcomm rennell firmware
- canonical/qualcomm sa515m firmware
- canonical/qualcomm sc8180x firmware
- canonical/qualcomm sc8180x
- canonical/qualcomm sdx55 firmware
- canonical/qualcomm sdx55
- canonical/qualcomm sm6150 firmware
- canonical/qualcomm sm6150
- canonical/qualcomm sm7150 firmware
- canonical/qualcomm sm7150
- canonical/qualcomm sm8150 firmware
- canonical/qualcomm sm8150
- canonical/qualcomm sm8250 firmware
- canonical/qualcomm sm8250
- canonical/qualcomm sxr2130 firmware
- canonical/qualcomm sxr2130