Skip to main content

Ipq5018 Firmware CVE-2020-3675

CRITICAL
Integer Underflow (CWE-191)
2020-09-08 product-security@qualcomm.com
Information Disclosure Qualcomm Integer Overflow Ipq5018 Firmware Ipq6018 Firmware Ipq8074 Firmware Kamorta Firmware Nicobar Firmware Qca6390 Firmware Qcn7605 Firmware Qcs404 Firmware Qcs405 Firmware Rennell Firmware Sa415M Firmware Saipan Firmware Sc7180 Firmware Sc8180X Firmware Sdx55 Firmware Sm6150 Firmware Sm7150 Firmware Sm8150 Firmware Sm8250 Firmware
9.8
CVSS 3.1 · NVD
Share

Severity by source

NVD PRIMARY
9.8 CRITICAL
AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Primary rating from NVD · only source for this CVE.

CVSS VectorNVD

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Attack Vector
Network
Attack Complexity
Low
Privileges Required
None
User Interaction
None
Scope
Unchanged
Confidentiality
High
Integrity
High
Availability
High

Lifecycle Timeline

1
CVE Published
Sep 08, 2020 - 10:15 nvd
CRITICAL 9.8

DescriptionNVD

u'Potential integer underflow while parsing Service Info and IPv6 link-local TLVs that comes as part of NDPE attribute' in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer Electronics Connectivity, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wired Infrastructure and Networking in IPQ5018, IPQ6018, IPQ8074, Kamorta, Nicobar, QCA6390, QCN7605, QCS404, QCS405, Rennell, SA415M, Saipan, SC7180, SC8180X, SDX55, SM6150, SM7150, SM8150, SM8250

AnalysisAI

u'Potential integer underflow while parsing Service Info and IPv6 link-local TLVs that comes as part of NDPE attribute' in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon. Rated critical severity (CVSS 9.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.

Technical ContextAI

This vulnerability is classified under CWE-191. u'Potential integer underflow while parsing Service Info and IPv6 link-local TLVs that comes as part of NDPE attribute' in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer Electronics Connectivity, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wired Infrastructure and Networking in IPQ5018, IPQ6018, IPQ8074, Kamorta, Nicobar, QCA6390, QCN7605, QCS404, QCS405, Rennell, SA415M, Saipan, SC7180, SC8180X, SDX55, SM6150, SM7150, SM8150, SM8250 Affected products include: Qualcomm Ipq5018 Firmware, Qualcomm Ipq6018 Firmware, Qualcomm Ipq8074 Firmware, Qualcomm Kamorta Firmware, Qualcomm Nicobar Firmware.

RemediationAI

No vendor patch is available at time of analysis. Monitor vendor advisories for updates. Apply vendor patches when available. Implement network segmentation and monitoring as interim mitigations.

More in Ipq5018 Firmware

View all
CVE-2022-25748 CRITICAL
9.8 Oct 19

Memory corruption in WLAN due to integer overflow to buffer overflow while parsing GTK frames. Rated critical severity (
CVE-2021-1976 CRITICAL
9.8 Sep 17

A use after free can occur due to improper validation of P2P device address in PD Request frame in Snapdragon Auto, Snap
CVE-2021-1972 CRITICAL
9.8 Sep 08

Possible buffer overflow due to improper validation of device types during P2P search in Snapdragon Auto, Snapdragon Com
CVE-2021-1965 CRITICAL POC
9.8 Jul 13

Possible buffer overflow due to lack of parameter length check during MBSSID scan IE parse in Snapdragon Auto, Snapdrago
CVE-2020-3669 CRITICAL
9.8 Sep 08

u'Buffer Overflow issue in WLAN tcp ip verification due to usage of out of range pointer offset' in Snapdragon Auto, Sna
CVE-2020-3667 CRITICAL
9.8 Sep 08

u'Buffer Overflow in mic calculation for WPA due to copying data into buffer without validating the length of buffer' in
CVE-2022-25719 CRITICAL
9.1 Oct 19

Information disclosure in WLAN due to improper length check while processing authentication handshake in Snapdragon Auto
CVE-2021-1980 CRITICAL
9.1 Oct 20

Possible buffer over read due to lack of length check while parsing beacon IE response in Snapdragon Auto, Snapdragon Co
CVE-2023-21664 HIGH
7.8 Sep 05

Memory Corruption in Core Platform while printing the response buffer in log. Rated high severity (CVSS 7.8), this vulne
CVE-2023-21662 HIGH
7.8 Sep 05

Memory corruption in Core Platform while printing the response buffer in log. Rated high severity (CVSS 7.8), this vulne
CVE-2022-25677 HIGH
7.8 Dec 13

Memory corruption in diag due to use after free while processing dci packet in Snapdragon Auto, Snapdragon Compute, Snap
CVE-2022-25652 HIGH
7.8 Sep 16

Cryptographic issues in BSP due to improper hash verification in Snapdragon Wired Infrastructure and Networking. Rated h

Same weakness CWE-191 – Integer Underflow

View all
CVE-2014-0497 CRITICAL POC
9.8
CVE-2015-5212 MEDIUM
6.8
CVE-2017-14496 HIGH POC
7.5
CVE-2014-8768 MEDIUM POC
5.0
CVE-2017-11757 CRITICAL POC
9.8
CVE-2024-23313 CRITICAL POC
9.8
CVE-2021-3323 CRITICAL POC
9.8
CVE-2021-21811 CRITICAL POC
9.8

Same technique Information Disclosure

View all
CVE-2013-2251 CRITICAL POC
9.8
CVE-2017-5638 CRITICAL POC
9.8
CVE-2025-24813 CRITICAL POC
9.8
CVE-2015-1701 HIGH POC
7.8
CVE-2017-0147 HIGH POC
7.5
CVE-2014-6324 HIGH POC
8.8
CVE-2023-7028 CRITICAL POC
10.0
CVE-2017-0213 HIGH POC
7.3

Share

CVE-2020-3675 vulnerability details – vuln.today
Back

This site uses cookies essential for authentication and security. No tracking or analytics cookies are used. Privacy Policy