high7.8
CVE-2020-3676
Possible memory corruption in perfservice due to improper validation array length taken from user application.
Impact
Possible memory corruption in perfservice due to improper validation array length taken from user application. in Snapdragon Auto, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile in APQ8096AU, APQ8098, Kamorta, MSM8917, MSM8920, MSM8937, MSM8940, MSM8953, MSM8998, Nicobar, QCM2150, QCS605, QM215, Rennell, Saipan, SDM429, SDM439, SDM450, SDM630, SDM632, SDM636, SDM660, SDM670, SDM710, SM6150, SM7150, SM8150, SM8250, SXR1130, SXR2130
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Qualcomm | Apq8096au Firmware | All versions |
| Qualcomm | Apq8098 Firmware | All versions |
| Qualcomm | Kamorta Firmware | All versions |
| Qualcomm | Msm8917 Firmware | All versions |
| Qualcomm | Msm8920 Firmware | All versions |
| Qualcomm | Msm8937 Firmware | All versions |
| Qualcomm | Msm8940 Firmware | All versions |
| Qualcomm | Msm8953 Firmware | All versions |
| Qualcomm | Msm8998 Firmware | All versions |
| Qualcomm | Nicobar Firmware | All versions |
| Qualcomm | Qcm2150 Firmware | All versions |
| Qualcomm | Qcs605 Firmware | All versions |