NetSight
critical9.8

CVE-2020-3633

Array out of bound may occur while playing mp3 file as no check is there on offset if it is greater than the buffer allocated or not in Snapdragon Auto, Snapdr…

Impact

Array out of bound may occur while playing mp3 file as no check is there on offset if it is greater than the buffer allocated or not in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables in APQ8009, APQ8053, APQ8096AU, APQ8098, Kamorta, MDM9206, MDM9207C, MDM9607, MSM8905, MSM8909W, MSM8917, MSM8953, MSM8996AU, MSM8998, QCS405, QCS605, QM215, Rennell, Saipan, SDA660, SDM429, SDM429W, SDM439, SDM450, SDM630, SDM632, SDM636, SDM660, SDM670, SDM710, SDM845, SDX20, SM6150, SM7150, SM8150, SM8250, SXR2130

Affected products

VendorProductAffected versions
QualcommApq8009 Firmware
All versions
QualcommApq8053 Firmware
All versions
QualcommApq8096au Firmware
All versions
QualcommApq8098 Firmware
All versions
QualcommKamorta Firmware
All versions
QualcommMdm9206 Firmware
All versions
QualcommMdm9207c Firmware
All versions
QualcommMdm9607 Firmware
All versions
QualcommMsm8905 Firmware
All versions
QualcommMsm8909w Firmware
All versions
QualcommMsm8917 Firmware
All versions
QualcommMsm8953 Firmware
All versions

Weakness classification

References