What is CVE-2020-3675?

CVE-2020-3675 is a potential integer underflow vulnerability that occurs while parsing Service Info and IPv6 link-local TLVs.

How severe is CVE-2020-3675?

CVE-2020-3675 has a severity rating of 9.8 (critical).

Which software are affected by CVE-2020-3675?

Qualcomm Ipq5018 Firmware, Qualcomm Ipq8074 Firmware, Qualcomm Qca6390 Firmware, Qualcomm Qcs404 Firmware, Qualcomm Qcs405 Firmware, Qualcomm Rennell Firmware, Qualcomm Sa415m Firmware, Qualcomm Sc8180x Firmware, Qualcomm Sdx55 Firmware, Qualcomm Sm8150 Firmware, Qualcomm Sm8250 Firmware, and Google Android are affected by CVE-2020-3675.

How can I fix CVE-2020-3675?

To fix CVE-2020-3675, it is recommended to apply the necessary firmware updates provided by Qualcomm and Google.

Where can I find more information about CVE-2020-3675?

You can find more information about CVE-2020-3675 at the following references: [Link 1](https://www.qualcomm.com/company/product-security/bulletins/august-2020-bulletin), [Link 2](https://source.android.com/docs/security/bulletin/2020-08-01/#asterisk), [Link 3](https://source.android.com/docs/security/bulletin/2020-08-01).

Vulnerability/
CVE-2020-3675

critical

CWE

191

3/8/2020

25/10/2022

CVE-2020-3675: Integer Underflow

First published: Mon Aug 03 2020(Updated: )

u'Potential integer underflow while parsing Service Info and IPv6 link-local TLVs that comes as part of NDPE attribute' in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer Electronics Connectivity, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wired Infrastructure and Networking in IPQ5018, IPQ6018, IPQ8074, Kamorta, Nicobar, QCA6390, QCN7605, QCS404, QCS405, Rennell, SA415M, Saipan, SC7180, SC8180X, SDX55, SM6150, SM7150, SM8150, SM8250

Credit: product-security@qualcomm.com

Affected Software	Affected Version	How to fix
Qualcomm Ipq5018 Firmware
Qualcomm Ipq5018
Google Android
Qualcomm Ipq6018
Qualcomm Ipq8074 Firmware
Qualcomm Ipq8074
Google Android
Google Android
Google Android
Qualcomm Nicobar
Qualcomm Qca6390 Firmware
Qualcomm Qca6390
Google Android
Google Android
Qualcomm Qcs404 Firmware
Google Android
Qualcomm Qcs405 Firmware
Google Android
Qualcomm Rennell Firmware
Google Android
Qualcomm Sa415m Firmware
Google Android
Google Android
Google Android
Google Android
Google Android
Qualcomm Sc8180x Firmware
Qualcomm Sc8180x
Qualcomm Sdx55 Firmware
Qualcomm Sdx55
Google Android
Qualcomm Sm6150
Google Android
Google Android
Qualcomm Sm8150 Firmware
Qualcomm Sm8150
Qualcomm Sm8250 Firmware
Qualcomm SM8250
Google Android

Never miss a vulnerability like this again

Reference Links

Frequently Asked Questions

What is CVE-2020-3675?
CVE-2020-3675 is a potential integer underflow vulnerability that occurs while parsing Service Info and IPv6 link-local TLVs.
How severe is CVE-2020-3675?
CVE-2020-3675 has a severity rating of 9.8 (critical).
Which software are affected by CVE-2020-3675?
Qualcomm Ipq5018 Firmware, Qualcomm Ipq8074 Firmware, Qualcomm Qca6390 Firmware, Qualcomm Qcs404 Firmware, Qualcomm Qcs405 Firmware, Qualcomm Rennell Firmware, Qualcomm Sa415m Firmware, Qualcomm Sc8180x Firmware, Qualcomm Sdx55 Firmware, Qualcomm Sm8150 Firmware, Qualcomm Sm8250 Firmware, and Google Android are affected by CVE-2020-3675.
How can I fix CVE-2020-3675?
To fix CVE-2020-3675, it is recommended to apply the necessary firmware updates provided by Qualcomm and Google.
Where can I find more information about CVE-2020-3675?
You can find more information about CVE-2020-3675 at the following references: [Link 1](https://www.qualcomm.com/company/product-security/bulletins/august-2020-bulletin), [Link 2](https://source.android.com/docs/security/bulletin/2020-08-01/#asterisk), [Link 3](https://source.android.com/docs/security/bulletin/2020-08-01).