CVE-2020-3660: Out-of-bounds Read
Possible null-pointer dereference can occur while parsing mp4 clip with corrupted sample table atoms in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables in APQ8009, APQ8017, APQ8053, APQ8096AU, APQ8098, MDM9206, MDM9207C, MDM9607, MSM8905, MSM8909W, MSM8917, MSM8953, MSM8996, MSM8996AU, MSM8998, QCA6574AU, QCS405, QCS605, QM215, Rennell, Saipan, SDA660, SDM429, SDM429W, SDM439, SDM450, SDM630, SDM632, SDM636, SDM660, SDM845, SDX20, SM6150, SM7150, SM8150, SM8250, SXR2130
Affected Software
Event History
Frequently Asked Questions
What is CVE-2020-3660?
CVE-2020-3660 is a vulnerability that can lead to a null-pointer dereference while parsing an mp4 clip with corrupted sample table atoms.
What software is affected by CVE-2020-3660?
The affected software includes Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables in various firmware versions and configurations.
What is the severity of CVE-2020-3660?
The severity of CVE-2020-3660 is rated as critical with a CVSS score of 9.8.
What is the Common Weakness Enumeration (CWE) ID for CVE-2020-3660?
The CWE IDs associated with CVE-2020-3660 are CWE-129 (Improper Validation of Array Index) and CWE-476 (NULL Pointer Dereference).
Where can I find more information about CVE-2020-3660?
You can find more information about CVE-2020-3660 in the Android Security Bulletin for June 2020 as well as the Qualcomm Product Security Bulletin for June 2020.