CVE-2020-3654: Out-of-bounds Read
u'Buffer overflow occurs while processing SIP message packet due to lack of check of index validation before copying into it' in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Wearables in Agatti, APQ8053, APQ8096AU, APQ8098, Bitra, Kamorta, MSM8905, MSM8909W, MSM8917, MSM8940, MSM8953, MSM8996AU, MSM8998, Nicobar, QCA6390, QCA6574AU, QCM2150, QCS605, QM215, Rennell, SA6155P, SA8155P, Saipan, SDA660, SDM429, SDM429W, SDM439, SDM450, SDM630, SDM632, SDM636, SDM660, SDM670, SDM710, SDM845, SM6150, SM7150, SM8150, SM8250, SXR1130, SXR2130
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2020-3654?
CVE-2020-3654 has been classified as a critical vulnerability due to its potential to cause a buffer overflow through improperly validated SIP message packets.
How do I fix CVE-2020-3654?
To fix CVE-2020-3654, users should update their affected Qualcomm firmware or Android devices to the latest available security patches.
What products are affected by CVE-2020-3654?
CVE-2020-3654 affects various Qualcomm products including Snapdragon Auto, Snapdragon Connectivity, and several firmware versions across different devices.
Is my Qualcomm device vulnerable to CVE-2020-3654?
To determine if your Qualcomm device is vulnerable to CVE-2020-3654, check if it is using any of the specified affected firmware versions listed in the vulnerability report.
When was CVE-2020-3654 disclosed?
CVE-2020-3654 was disclosed in October 2020 as part of Qualcomm's security bulletin.