Buffer overflow in Qualcomm products - CVE-2020-3646
Published: May 17, 2025
Vulnerability identifier: #VU109354
CSH Severity:
CVSS v4: 6.9 [CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:/VI:/VA:/SC:N/SI:N/SA:N]
CVE-ID: CVE-2020-3646
CWE-ID: CWE-120
Exploitation vector: Local access
Exploit availability:
No public exploit available
Vulnerability details
The vulnerability allows #AV# #AU# to #BASIC_IMPACT#.
The vulnerability exists due to improper input validation in Video. #AV# #AU# can #EXT_IMPACT#.
Affected software
Bitra
MSM8909W
QCM2150
QCS405
QCS605
Saipan
SC8180X
SDA845
SDM429W
SDX24
SDX55
SM6150
SM7150
SM8150
SM8250
SXR2130
MSM8909W
QCM2150
QCS405
QCS605
Saipan
SC8180X
SDA845
SDM429W
SDX24
SDX55
SM6150
SM7150
SM8150
SM8250
SXR2130
How to mitigate CVE-2020-3646
Install security update from vendor's website.