CVE-2020-3688: Buffer Overflow
Possible buffer overflow while parsing mp4 clip with corrupted sample atoms due to improper validation of index in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables in APQ8009, APQ8017, APQ8053, APQ8096AU, APQ8098, Kamorta, MDM9206, MDM9207C, MDM9607, MSM8905, MSM8909W, MSM8917, MSM8920, MSM8937, MSM8940, MSM8953, MSM8996, MSM8996AU, MSM8998, Nicobar, QCA6574AU, QCM2150, QCS405, QCS605, QM215, Rennell, SA6155P, Saipan, SDA660, SDA845, SDM429, SDM429W, SDM439, SDM450, SDM630, SDM632, SDM636, SDM660, SDM670, SDM710, SDM845, SDX20, SM6150, SM7150, SM8150, SM8250, SXR1130, SXR2130
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2020-3688?
CVE-2020-3688 has been classified with a high severity due to the potential impact of a buffer overflow.
How do I fix CVE-2020-3688?
To address CVE-2020-3688, it is recommended to apply the latest firmware updates from Qualcomm.
What devices are affected by CVE-2020-3688?
CVE-2020-3688 affects multiple Snapdragon-based devices, including Android and various Qualcomm firmware variants.
What type of vulnerability is CVE-2020-3688?
CVE-2020-3688 is a buffer overflow vulnerability that occurs while parsing corrupted mp4 clips.
Is CVE-2020-3688 being actively exploited?
Current information does not indicate that CVE-2020-3688 is being actively exploited in the wild.