Use of Out-of-range Pointer Offset in Qualcomm products - CVE-2020-3669
Published: May 17, 2025
Vulnerability identifier: #VU109346
CSH Severity:
CVSS v4: 6.9 [CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:/VI:/VA:/SC:N/SI:N/SA:N]
CVE-ID: CVE-2020-3669
CWE-ID: CWE-823
Exploitation vector: Local access
Exploit availability:
No public exploit available
Vulnerability details
The vulnerability allows #AV# #AU# to #BASIC_IMPACT#.
The vulnerability exists due to improper input validation in WLAN. #AV# #AU# can #EXT_IMPACT#.
Affected software
SC7180
SDM850
SA415M
QCS404
QCA8081
QCA6390
IPQ6018
IPQ5018
SXR1130
SM8250
SM8150
SM7150
SM6150
SDM845
SDM710
SDM670
SDM660
SDM636
SDM630
SDA845
SC8180X
APQ8098
Rennell
QCS605
QCS405
QCN7605
Nicobar
MSM8998
Kamorta
IPQ8074
SDM850
SA415M
QCS404
QCA8081
QCA6390
IPQ6018
IPQ5018
SXR1130
SM8250
SM8150
SM7150
SM6150
SDM845
SDM710
SDM670
SDM660
SDM636
SDM630
SDA845
SC8180X
APQ8098
Rennell
QCS605
QCS405
QCN7605
Nicobar
MSM8998
Kamorta
IPQ8074
How to mitigate CVE-2020-3669
Install security update from vendor's website.