CVE-2020-3662: Buffer Overflow
Buffer overflow can occur while parsing eac3 header while playing the clip which is nonstandard in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables in APQ8009, APQ8017, APQ8053, APQ8096AU, APQ8098, MSM8909W, MSM8917, MSM8953, MSM8996, MSM8996AU, MSM8998, QCA6574AU, QCS405, QCS605, QM215, Rennell, Saipan, SDA660, SDM429, SDM429W, SDM439, SDM450, SDM630, SDM632, SDM636, SDM660, SDM845, SDX20, SM6150, SM7150, SM8150, SM8250, SXR2130
Affected Software
Event History
Frequently Asked Questions
What is CVE-2020-3662?
CVE-2020-3662 is a vulnerability that can cause a buffer overflow while parsing eac3 headers in Snapdragon devices running Android.
Which devices are affected by CVE-2020-3662?
Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables in APQ8009, APQ8017, and other Qualcomm chips are affected by CVE-2020-3662.
What is the severity of CVE-2020-3662?
CVE-2020-3662 has a severity rating of 9.8, which is considered critical.
How can I fix CVE-2020-3662?
Updating your device's firmware or applying the necessary patches provided by Qualcomm or Google Android can help mitigate the vulnerability. It is recommended to follow the instructions provided by your device manufacturer or check the Qualcomm and Google Android security bulletins for more information.
Are Qualcomm Snapdragon chips vulnerable to CVE-2020-3662?
Yes, Qualcomm Snapdragon chips, such as APQ8009, APQ8017, are vulnerable to CVE-2020-3662.