CVE-2020-3658: Null Pointer Dereference
Possible null-pointer dereference can occur while parsing mp4 clip with corrupted sample table atoms in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables in APQ8009, APQ8017, APQ8053, APQ8096AU, APQ8098, Kamorta, MDM9206, MDM9207C, MDM9607, MSM8905, MSM8909W, MSM8917, MSM8920, MSM8937, MSM8940, MSM8953, MSM8996, MSM8996AU, MSM8998, QCA6574AU, QCS405, QCS605, QM215, Rennell, Saipan, SDA660, SDM429, SDM429W, SDM439, SDM450, SDM630, SDM632, SDM636, SDM660, SDM670, SDM710, SDM845, SDX20, SM6150, SM7150, SM8150, SM8250, SXR1130, SXR2130
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2020-3658?
CVE-2020-3658 is classified as a moderate severity vulnerability that can lead to possible null-pointer dereference when parsing certain mp4 clips.
How do I fix CVE-2020-3658?
To fix CVE-2020-3658, update your Snapdragon firmware to the latest version provided by Qualcomm that addresses this vulnerability.
Which devices are affected by CVE-2020-3658?
CVE-2020-3658 affects several devices running Snapdragon platforms, including Snapdragon Auto, Mobile, IoT, and others.
Can CVE-2020-3658 be exploited remotely?
CVE-2020-3658 could potentially be exploited remotely if a malicious mp4 file is sent to the vulnerable device.
What kind of attack does CVE-2020-3658 allow?
CVE-2020-3658 allows attackers to potentially crash the affected device or cause unintended behavior due to null-pointer dereference.