CVE-2020-3675: Integer Underflow
u'Potential integer underflow while parsing Service Info and IPv6 link-local TLVs that comes as part of NDPE attribute' in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer Electronics Connectivity, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wired Infrastructure and Networking in IPQ5018, IPQ6018, IPQ8074, Kamorta, Nicobar, QCA6390, QCN7605, QCS404, QCS405, Rennell, SA415M, Saipan, SC7180, SC8180X, SDX55, SM6150, SM7150, SM8150, SM8250
Affected Software
Event History
Frequently Asked Questions
What is CVE-2020-3675?
CVE-2020-3675 is a potential integer underflow vulnerability that occurs while parsing Service Info and IPv6 link-local TLVs.
How severe is CVE-2020-3675?
CVE-2020-3675 has a severity rating of 9.8 (critical).
Which software are affected by CVE-2020-3675?
Qualcomm Ipq5018 Firmware, Qualcomm Ipq8074 Firmware, Qualcomm Qca6390 Firmware, Qualcomm Qcs404 Firmware, Qualcomm Qcs405 Firmware, Qualcomm Rennell Firmware, Qualcomm Sa415m Firmware, Qualcomm Sc8180x Firmware, Qualcomm Sdx55 Firmware, Qualcomm Sm8150 Firmware, Qualcomm Sm8250 Firmware, and Google Android are affected by CVE-2020-3675.
How can I fix CVE-2020-3675?
To fix CVE-2020-3675, it is recommended to apply the necessary firmware updates provided by Qualcomm and Google.
Where can I find more information about CVE-2020-3675?
You can find more information about CVE-2020-3675 at the following references: [Link 1](https://www.qualcomm.com/company/product-security/bulletins/august-2020-bulletin), [Link 2](https://source.android.com/docs/security/bulletin/2020-08-01/#asterisk), [Link 3](https://source.android.com/docs/security/bulletin/2020-08-01).