CVE-2020-3648: Input Validation
u'Possible out of bound write in DSP driver code due to lack of check of data received from user' in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables in MSM8909W
Affected Software
Event History
Frequently Asked Questions
What is CVE-2020-3648?
CVE-2020-3648 is a vulnerability that allows for a possible out of bound write in DSP driver code due to a lack of check of data received from the user.
What software is affected by CVE-2020-3648?
Qualcomm Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, and Snapdragon Wearables in MSM8909W are affected by CVE-2020-3648.
What is the severity of CVE-2020-3648?
CVE-2020-3648 has a severity rating of 7.8 (high).
How can I fix CVE-2020-3648?
To fix CVE-2020-3648, it is recommended to apply the patches and updates provided by Qualcomm.
Where can I find more information about CVE-2020-3648?
More information about CVE-2020-3648 can be found on the official Qualcomm product security bulletins for August 2020.