CVE-2020-3657: Critical severity Google Android vulnerability
u'Remote code execution can happen by sending a carefully crafted POST query when Device configuration is accessed from a tethered client through webserver due to lack of array bound check.' in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables, Snapdragon Wired Infrastructure and Networking in APQ8009, APQ8017, APQ8053, APQ8096AU, APQ8098, IPQ4019, IPQ6018, IPQ8064, IPQ8074, MDM9150, MDM9206, MDM9207C, MDM9607, MDM9640, MDM9650, MSM8905, MSM8909W, MSM8953, MSM8996AU, QCA6574AU, QCS405, QCS610, QRB5165, SC8180X, SDA660, SDA845, SDM429, SDM429W, SDM630, SDM632, SDM636, SDM660, SDM845, SDX20, SDX24, SDX55, SM8250
Affected Software
Event History
Frequently Asked Questions
What is CVE-2020-3657?
CVE-2020-3657 is a vulnerability that allows remote code execution by sending a carefully crafted POST query when accessing device configuration through a webserver.
Who is affected by CVE-2020-3657?
CVE-2020-3657 affects Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, and various Qualcomm firmware versions used in Google Android.
What is the severity of CVE-2020-3657?
CVE-2020-3657 has a severity rating of critical with a severity value of 9.
How can the CVE-2020-3657 vulnerability be fixed?
To fix the CVE-2020-3657 vulnerability, apply the necessary security patches provided by Google Android or Qualcomm.
Where can I find more information about CVE-2020-3657?
You can find more information about CVE-2020-3657 in the Android Security Bulletin for October 2020 and the Qualcomm Product Security Bulletins for October 2020.