CVE-2020-3653: Input Validation
Published Apr 16, 2020
·Updated
Possible buffer over-read in windows wlan driver function due to lack of check of length of variable received from userspace in Snapdragon Compute, Snapdragon Connectivity in MSM8998, QCA6390, SC7180, SC8180X, SDM850
Affected Software
10 affected components
Qualcomm Msm8998 Firmware
Qualcomm MSM8998
Qualcomm Qca6390 Firmware
Qualcomm Qca6390
Qualcomm Sc7180 Firmware
Qualcomm Sc7180
Qualcomm Sc8180x Firmware
Qualcomm Sc8180x
Qualcomm Sdm850 Firmware
Qualcomm SDM850
Event History
Apr 16, 2020
CVE Published
via MITRE·10:46 AM
Data Sourced
via MITRE·10:46 AM
DescriptionWeakness
Frequently Asked Questions
1
What is the severity of CVE-2020-3653?
CVE-2020-3653 is considered a high severity vulnerability due to the potential for buffer over-reads.
2
How do I fix CVE-2020-3653?
To fix CVE-2020-3653, update your Qualcomm firmware to the latest version provided by Qualcomm.
3
Which devices are affected by CVE-2020-3653?
CVE-2020-3653 affects devices using Qualcomm MSM8998, QCA6390, SC7180, SC8180X, and SDM850 firmware.
4
What is a buffer over-read as described in CVE-2020-3653?
A buffer over-read occurs when a program reads more data than it should, potentially exposing sensitive information.
5
Is CVE-2020-3653 exploitable remotely?
CVE-2020-3653 could potentially be exploited remotely if an attacker can send vulnerable input to the device.