CVE-2020-3648

Severity: high (CVSS 7.8 v3.1)
Exploited in the wild: not listed in CISA KEV
EPSS: 0.2% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2020-09-08 · updated 2026-06-17
Weakness: CWE-20

Description

u'Possible out of bound write in DSP driver code due to lack of check of data received from user' in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables in MSM8909W

Affected products

Qualcomm Msm8909W Firmware: all versions

References

https://www.qualcomm.com/company/product-security/bulletins/august-2020-bulletin
https://www.qualcomm.com/company/product-security/bulletins/august-2020-security-bulletin
https://www.qualcomm.com/company/product-security/bulletins/august-2020-bulletin

Get alerted when CVE-2020-3648 or the next vulnerability affects your stack