CVE-2020-3703: Input Validation
u'Buffer over-read issue in Bluetooth peripheral firmware due to lack of check for invalid opcode and length of opcode received from central device(This CVE is equivalent to Link Layer Length Overfow issue (CVE-2019-16336,CVE-2019-17519) and Silent Length Overflow issue(CVE-2019-17518) mentioned in sweyntooth paper)' in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon IoT, Snapdragon Mobile, Snapdragon Voice & Music in APQ8053, APQ8076, AR9344, Bitra, Kamorta, MDM9206, MDM9207C, MDM9607, MSM8905, MSM8917, MSM8937, MSM8940, MSM8953, Nicobar, QCA6174A, QCA9377, QCM2150, QCM6125, QCS404, QCS405, QCS605, QCS610, QM215, Rennell, SC8180X, SDM429, SDM439, SDM450, SDM630, SDM632, SDM636, SDM660, SDM670, SDM710, SDM845, SDX20, SDX24, SM6150, SM7150, SM8150, SXR1130
Affected Software
Event History
Frequently Asked Questions
What are the implications of CVE-2020-3703?
CVE-2020-3703 can lead to a buffer over-read issue in Bluetooth peripheral firmware, potentially exposing sensitive information.
How do I mitigate the effects of CVE-2020-3703?
To mitigate CVE-2020-3703, it is recommended to update the firmware of affected Qualcomm devices to the latest version that addresses this vulnerability.
What devices are affected by CVE-2020-3703?
CVE-2020-3703 affects various Qualcomm firmware models including APQ8053, APQ8076, and Ar9344 among others.
What types of vulnerabilities are similar to CVE-2020-3703?
CVE-2020-3703 is equivalent to vulnerabilities such as Link Layer Length Overflow (CVE-2019-16336, CVE-2019-17519) and Silent Length Overflow (CVE-2019-17518).
What is the severity rating of CVE-2020-3703?
CVE-2020-3703 has been classified as a moderate severity vulnerability due to its potential impact on device security.