high7.1
CVE-2020-3617
u'Buffer over-read Issue in Q6 testbus framework due to diag packet length is not completely validated before accessing the field and leads to Information disc…
Impact
u'Buffer over-read Issue in Q6 testbus framework due to diag packet length is not completely validated before accessing the field and leads to Information disclosure.' in Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile in Kamorta, Nicobar, QCS605, QCS610, Rennell, SC7180, SDA660, SDM630, SDM636, SDM660, SDM670, SDM710, SM6150, SM7150, SM8150, SXR1130
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Qualcomm | Kamorta Firmware | All versions |
| Qualcomm | Nicobar Firmware | All versions |
| Qualcomm | Qcs605 Firmware | All versions |
| Qualcomm | Qcs610 Firmware | All versions |
| Qualcomm | Rennell Firmware | All versions |
| Qualcomm | Sc7180 Firmware | All versions |
| Qualcomm | Sda660 Firmware | All versions |
| Qualcomm | Sdm630 Firmware | All versions |
| Qualcomm | Sdm636 Firmware | All versions |
| Qualcomm | Sdm660 Firmware | All versions |
| Qualcomm | Sdm670 Firmware | All versions |
| Qualcomm | Sdm710 Firmware | All versions |