Buffer over-read in Qualcomm products - CVE-2020-3675
Published: May 17, 2025
Vulnerability identifier: #VU109347
CSH Severity:
CVSS v4: 6.9 [CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:/VI:/VA:/SC:N/SI:N/SA:N]
CVE-ID: CVE-2020-3675
CWE-ID: CWE-126
Exploitation vector: Local access
Exploit availability:
No public exploit available
Vulnerability details
The vulnerability allows #AV# #AU# to #BASIC_IMPACT#.
The vulnerability exists due to improper input validation in WLAN. #AV# #AU# can #EXT_IMPACT#.
Affected software
Rennell
SM8250
SM8150
SM7150
SM6150
SDX55
SC8180X
Saipan
QCS405
QCN7605
Nicobar
Kamorta
IPQ8074
SC7180
SA415M
IPQ5018
QCS404
QCA6390
IPQ6018
SM8250
SM8150
SM7150
SM6150
SDX55
SC8180X
Saipan
QCS405
QCN7605
Nicobar
Kamorta
IPQ8074
SC7180
SA415M
IPQ5018
QCS404
QCA6390
IPQ6018
How to mitigate CVE-2020-3675
Install security update from vendor's website.