2 lines
4.4 KiB
JSON
2 lines
4.4 KiB
JSON
{"affected":[{"affectedData":[{"product":"Snapdragon Compute, Snapdragon Connectivity","vendor":"Qualcomm, Inc.","versions":[{"status":"affected","version":"MSM8998, QCA6390, SC7180, SC8180X, SDM850"}]}],"source":"product-security@qualcomm.com"}],"configurations":[{"nodes":[{"cpeMatch":[{"criteria":"cpe:2.3:o:qualcomm:msm8998_firmware:-:*:*:*:*:*:*:*","matchCriteriaId":"0E9154AF-E52E-4E84-9322-2CA7EBD3E6FE","vulnerable":true}],"negate":false,"operator":"OR"},{"cpeMatch":[{"criteria":"cpe:2.3:h:qualcomm:msm8998:-:*:*:*:*:*:*:*","matchCriteriaId":"4796F9BD-61B3-45ED-B5E3-B061887285E2","vulnerable":false}],"negate":false,"operator":"OR"}],"operator":"AND"},{"nodes":[{"cpeMatch":[{"criteria":"cpe:2.3:o:qualcomm:qca6390_firmware:-:*:*:*:*:*:*:*","matchCriteriaId":"96FBD6DF-F174-4690-AA3D-1E8974E3627F","vulnerable":true}],"negate":false,"operator":"OR"},{"cpeMatch":[{"criteria":"cpe:2.3:h:qualcomm:qca6390:-:*:*:*:*:*:*:*","matchCriteriaId":"A3BF86E1-3FAC-4A42-8C01-5944C6C30AE5","vulnerable":false}],"negate":false,"operator":"OR"}],"operator":"AND"},{"nodes":[{"cpeMatch":[{"criteria":"cpe:2.3:o:qualcomm:sc7180_firmware:-:*:*:*:*:*:*:*","matchCriteriaId":"792A18B7-E775-4AF4-A8C4-D434400317B0","vulnerable":true}],"negate":false,"operator":"OR"},{"cpeMatch":[{"criteria":"cpe:2.3:h:qualcomm:sc7180:-:*:*:*:*:*:*:*","matchCriteriaId":"B5170B38-0976-49BB-A916-5BE44C567218","vulnerable":false}],"negate":false,"operator":"OR"}],"operator":"AND"},{"nodes":[{"cpeMatch":[{"criteria":"cpe:2.3:o:qualcomm:sc8180x_firmware:-:*:*:*:*:*:*:*","matchCriteriaId":"30A45C1A-C921-42B5-9237-367245023B45","vulnerable":true}],"negate":false,"operator":"OR"},{"cpeMatch":[{"criteria":"cpe:2.3:h:qualcomm:sc8180x:-:*:*:*:*:*:*:*","matchCriteriaId":"56C9D979-F214-4CD4-8CF9-43BC804BB179","vulnerable":false}],"negate":false,"operator":"OR"}],"operator":"AND"},{"nodes":[{"cpeMatch":[{"criteria":"cpe:2.3:o:qualcomm:sdm850_firmware:-:*:*:*:*:*:*:*","matchCriteriaId":"B3ADE826-C55D-4731-80B9-164FEA290FAC","vulnerable":true}],"negate":false,"operator":"OR"},{"cpeMatch":[{"criteria":"cpe:2.3:h:qualcomm:sdm850:-:*:*:*:*:*:*:*","matchCriteriaId":"8ED4F8FE-32DB-4696-A3AD-A9D7CB7E513A","vulnerable":false}],"negate":false,"operator":"OR"}],"operator":"AND"}],"cveTags":[],"descriptions":[{"lang":"en","value":"Possible buffer over-read issue in windows x86 wlan driver function while processing beacon or request frame due to lack of check of length of variable received. in Snapdragon Compute, Snapdragon Connectivity in MSM8998, QCA6390, SC7180, SC8180X, SDM850"},{"lang":"es","value":"Un posible problema de lectura excesiva del búfer en la función del controlador wlan de Windows x86 mientras procesa una trama beacon o de petición debido a una falta de comprobación de la longitud de una variable recibida en los productos in Snapdragon Compute, Snapdragon Connectivity en versiones MSM8998, QCA6390, SC7180, SC8180X, SDM850."}],"id":"CVE-2020-3652","lastModified":"2026-06-17T03:18:47.370","metrics":{"cvssMetricV2":[{"acInsufInfo":false,"baseSeverity":"HIGH","cvssData":{"accessComplexity":"LOW","accessVector":"NETWORK","authentication":"NONE","availabilityImpact":"COMPLETE","baseScore":9.4,"confidentialityImpact":"COMPLETE","integrityImpact":"NONE","vectorString":"AV:N/AC:L/Au:N/C:C/I:N/A:C","version":"2.0"},"exploitabilityScore":10.0,"impactScore":9.2,"obtainAllPrivilege":false,"obtainOtherPrivilege":false,"obtainUserPrivilege":false,"source":"nvd@nist.gov","type":"Primary","userInteractionRequired":false}],"cvssMetricV31":[{"cvssData":{"attackComplexity":"LOW","attackVector":"NETWORK","availabilityImpact":"HIGH","baseScore":9.1,"baseSeverity":"CRITICAL","confidentialityImpact":"HIGH","integrityImpact":"NONE","privilegesRequired":"NONE","scope":"UNCHANGED","userInteraction":"NONE","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H","version":"3.1"},"exploitabilityScore":3.9,"impactScore":5.2,"source":"nvd@nist.gov","type":"Primary"}]},"published":"2020-04-16T11:15:15.730","references":[{"source":"product-security@qualcomm.com","tags":["Vendor Advisory"],"url":"https://www.qualcomm.com/company/product-security/bulletins/april-2020-bulletin"},{"source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"],"url":"https://www.qualcomm.com/company/product-security/bulletins/april-2020-bulletin"}],"sourceIdentifier":"product-security@qualcomm.com","vulnStatus":"Modified","weaknesses":[{"description":[{"lang":"en","value":"CWE-20"},{"lang":"en","value":"CWE-125"}],"source":"nvd@nist.gov","type":"Primary"}]}
|