CVE-2020-3670: Critical severity android vulnerability
u'Potential out of bounds read while processing downlink NAS transport message due to improper length check of Information Element(IEI) NAS message container' in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Wearables in Agatti, APQ8053, APQ8096AU, APQ8098, Kamorta, MDM9150, MDM9205, MDM9206, MDM9625, MDM9635M, MDM9640, MDM9645, MDM9650, MDM9655, MSM8905, MSM8909W, MSM8917, MSM8940, MSM8953, MSM8996AU, MSM8998, Nicobar, QCM2150, QCM6125, QCS605, QCS610, QM215, Rennell, SA415M, Saipan, SC7180, SC8180X, SDA660, SDA845, SDM429, SDM429W, SDM439, SDM450, SDM630, SDM632, SDM636, SDM660, SDM670, SDM710, SDM845, SDM850, SDX20, SDX24, SDX55, SM6150, SM7150, SM8150, SXR1130
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2020-3670?
CVE-2020-3670 has a medium severity rating due to the potential for an out of bounds read.
How do I fix CVE-2020-3670?
To fix CVE-2020-3670, ensure that you update your affected Qualcomm devices with the latest firmware patches.
Which devices are affected by CVE-2020-3670?
CVE-2020-3670 affects various Qualcomm Snapdragon devices, including those in Automotive, Compute, Mobile, and IoT categories.
What type of vulnerability is CVE-2020-3670?
CVE-2020-3670 is an out of bounds read vulnerability caused by improper length checks of NAS message containers.
What impact does CVE-2020-3670 have on users?
CVE-2020-3670 could potentially allow attackers to read sensitive memory contents, affecting data confidentiality.