CVE-2020-3698: Input Validation
Out of bound write while QoS DSCP mapping due to improper input validation for data received from association response frame in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables in APQ8009, APQ8017, APQ8053, APQ8096AU, APQ8098, MDM9150, MDM9206, MDM9207C, MDM9607, MDM9650, MSM8905, MSM8909W, MSM8917, MSM8920, MSM8937, MSM8940, MSM8953, MSM8996AU, Nicobar, QCA6174A, QCA6574AU, QCA9377, QCA9379, QCM2150, QCN7605, QCS405, QCS605, QM215, SA6155P, Saipan, SC8180X, SDA845, SDM429, SDM429W, SDM439, SDM450, SDM630, SDM632, SDM636, SDM660, SDM845, SDX20, SDX55, SM8150, SM8250, SXR2130
Affected Software
Remediation
Event History
Frequently Asked Questions
What is the severity of CVE-2020-3698?
CVE-2020-3698 is classified as a high severity vulnerability due to its potential to cause significant impact through out-of-bounds writes.
How do I fix CVE-2020-3698?
To mitigate CVE-2020-3698, apply the recommended firmware updates provided by Qualcomm for affected devices.
Which devices are affected by CVE-2020-3698?
CVE-2020-3698 affects various Qualcomm Snapdragon platforms, including different firmware versions for specific models.
What type of vulnerability is CVE-2020-3698?
CVE-2020-3698 is an out-of-bounds write vulnerability triggered by improper input validation in association response frames.
Can CVE-2020-3698 lead to remote code execution?
Yes, CVE-2020-3698 can potentially allow an attacker to execute arbitrary code with elevated privileges if exploited.