CVE-2020-3671: Use After Free

Published Jul 30, 2020

Updated

Use-after-free issue could occur due to dangling pointer when generating a frame buffer in OpenGL ES in Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music in APQ8009, Nicobar, QCM2150, QCS405, Saipan, SDM845, SM8150, SM8250, SXR2130

Affected Software

19 affected components

Google Android

Qualcomm Apq8009 Firmware

Qualcomm Apq8009

Qualcomm Nicobar Firmware

Qualcomm Nicobar

Qualcomm Qcm2150 Firmware

Qualcomm Qcm2150

Qualcomm Qcs405 Firmware

Qualcomm QCS405

Qualcomm Saipan Firmware

Qualcomm Saipan

Qualcomm Sdm845 Firmware

Qualcomm SDM845

Qualcomm Sm8150 Firmware

Qualcomm SM8150

Qualcomm Sm8250 Firmware

Qualcomm SM8250

Qualcomm Sxr2130 Firmware

Qualcomm Sxr2130

Event History

Jul 30, 2020

CVE Published

via MITRE·11:40 AM

Data Sourced

via MITRE·11:40 AM

DescriptionWeakness

Sep 8, 2020

Data Sourced

via Android·12:00 AM

SeverityAffected Software

Frequently Asked Questions

What is CVE-2020-3671?

CVE-2020-3671 is a use-after-free vulnerability that could occur due to a dangling pointer when generating a frame buffer in OpenGL ES.

Which software is affected by CVE-2020-3671?

CVE-2020-3671 affects Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music in APQ8009, Nicobar, QCM2150, QCS405, Saipan, SDM845, SM8150, SM8250, SXR2130.

What is the severity of CVE-2020-3671?

The severity of CVE-2020-3671 is critical with a severity score of 9.8.

How can CVE-2020-3671 be fixed?

To fix CVE-2020-3671, it is recommended to apply the necessary security patches provided by Qualcomm and Google.

Where can I find more information about CVE-2020-3671?

You can find more information about CVE-2020-3671 on the Qualcomm Product Security Bulletins page and the Android Security Bulletin for September 2020.