Buffer overflow in Qualcomm products - CVE-2020-3646
Published: May 17, 2025
Vulnerability identifier: #VU109354
CSH Severity:
CVSS v4.0: CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:/VI:/VA:/SC:N/SI:N/SA:N/E:U/U:
CVE-ID: CVE-2020-3646
CWE-ID: CWE-120
Exploitation vector: Local access
Exploit availability:
No public exploit available
Vendor: Qualcomm
Affected software:
Bitra
MSM8909W
QCM2150
QCS405
QCS605
Saipan
SC8180X
SDA845
SDM429W
SDX24
SDX55
SM6150
SM7150
SM8150
SM8250
SXR2130
Bitra
MSM8909W
QCM2150
QCS405
QCS605
Saipan
SC8180X
SDA845
SDM429W
SDX24
SDX55
SM6150
SM7150
SM8150
SM8250
SXR2130
Detailed vulnerability description
The vulnerability allows #AV# #AU# to #BASIC_IMPACT#.
The vulnerability exists due to improper input validation in Video. #AV# #AU# can #EXT_IMPACT#.
How to mitigate CVE-2020-3646
Install security update from vendor's website.