2 lines
14 KiB
JSON
2 lines
14 KiB
JSON
{"affected":[{"affectedData":[{"product":"Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon IoT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables","vendor":"Qualcomm, Inc.","versions":[{"status":"affected","version":"APQ8017, APQ8053, APQ8096AU, APQ8098, MDM9206, MDM9207C, MDM9607, MSM8909W, MSM8917, MSM8953, MSM8996AU, QCS605, QM215, SDA660, SDA845, SDM429, SDM439, SDM450, SDM630, SDM632, SDM636, SDM660, SDM845, SDX20, SM6150, SM7150, SM8150"}]}],"source":"product-security@qualcomm.com"}],"configurations":[{"nodes":[{"cpeMatch":[{"criteria":"cpe:2.3:o:qualcomm:apq8017_firmware:-:*:*:*:*:*:*:*","matchCriteriaId":"6FEDA6CA-A0FD-4A72-B856-C8E65AC86902","vulnerable":true}],"negate":false,"operator":"OR"},{"cpeMatch":[{"criteria":"cpe:2.3:h:qualcomm:apq8017:-:*:*:*:*:*:*:*","matchCriteriaId":"8D29295A-7183-46BE-B4EE-F891D1C17ED9","vulnerable":false}],"negate":false,"operator":"OR"}],"operator":"AND"},{"nodes":[{"cpeMatch":[{"criteria":"cpe:2.3:o:qualcomm:apq8053_firmware:-:*:*:*:*:*:*:*","matchCriteriaId":"B052615D-857A-46D4-9098-1CBFA14687C6","vulnerable":true}],"negate":false,"operator":"OR"},{"cpeMatch":[{"criteria":"cpe:2.3:h:qualcomm:apq8053:-:*:*:*:*:*:*:*","matchCriteriaId":"19B59B60-A298-4A56-A45A-E34B7AAB43D7","vulnerable":false}],"negate":false,"operator":"OR"}],"operator":"AND"},{"nodes":[{"cpeMatch":[{"criteria":"cpe:2.3:o:qualcomm:apq8096au_firmware:-:*:*:*:*:*:*:*","matchCriteriaId":"DD17C0A3-A200-4659-968B-B2DA03CB683F","vulnerable":true}],"negate":false,"operator":"OR"},{"cpeMatch":[{"criteria":"cpe:2.3:h:qualcomm:apq8096au:-:*:*:*:*:*:*:*","matchCriteriaId":"B1F31FFB-982A-4308-82F8-C2480DABDED8","vulnerable":false}],"negate":false,"operator":"OR"}],"operator":"AND"},{"nodes":[{"cpeMatch":[{"criteria":"cpe:2.3:o:qualcomm:apq8098_firmware:-:*:*:*:*:*:*:*","matchCriteriaId":"13A7328A-89FB-4E9C-B4E3-D8097443FB7A","vulnerable":true}],"negate":false,"operator":"OR"},{"cpeMatch":[{"criteria":"cpe:2.3:h:qualcomm:apq8098:-:*:*:*:*:*:*:*","matchCriteriaId":"678A68E0-81D8-4562-826E-03872184256C","vulnerable":false}],"negate":false,"operator":"OR"}],"operator":"AND"},{"nodes":[{"cpeMatch":[{"criteria":"cpe:2.3:o:qualcomm:mdm9206_firmware:-:*:*:*:*:*:*:*","matchCriteriaId":"A960B86A-C397-4ACB-AEE6-55F316D32949","vulnerable":true}],"negate":false,"operator":"OR"},{"cpeMatch":[{"criteria":"cpe:2.3:h:qualcomm:mdm9206:-:*:*:*:*:*:*:*","matchCriteriaId":"D79B8959-3D1E-4B48-9181-D75FE90AAF98","vulnerable":false}],"negate":false,"operator":"OR"}],"operator":"AND"},{"nodes":[{"cpeMatch":[{"criteria":"cpe:2.3:o:qualcomm:mdm9207c_firmware:-:*:*:*:*:*:*:*","matchCriteriaId":"A3CFA66A-CD2E-4670-A137-65E2C94C1A11","vulnerable":true}],"negate":false,"operator":"OR"},{"cpeMatch":[{"criteria":"cpe:2.3:h:qualcomm:mdm9207c:-:*:*:*:*:*:*:*","matchCriteriaId":"DE52FE99-DF0D-4C57-BB9C-0B853D1AF58B","vulnerable":false}],"negate":false,"operator":"OR"}],"operator":"AND"},{"nodes":[{"cpeMatch":[{"criteria":"cpe:2.3:o:qualcomm:mdm9607_firmware:-:*:*:*:*:*:*:*","matchCriteriaId":"A35FECFB-60AE-42A8-BCBB-FEA7D5826D49","vulnerable":true}],"negate":false,"operator":"OR"},{"cpeMatch":[{"criteria":"cpe:2.3:h:qualcomm:mdm9607:-:*:*:*:*:*:*:*","matchCriteriaId":"E9765187-8653-4D66-B230-B2CE862AC5C0","vulnerable":false}],"negate":false,"operator":"OR"}],"operator":"AND"},{"nodes":[{"cpeMatch":[{"criteria":"cpe:2.3:o:qualcomm:msm8909w_firmware:-:*:*:*:*:*:*:*","matchCriteriaId":"FE28A59C-7AA6-4B85-84E8-07852B96108E","vulnerable":true}],"negate":false,"operator":"OR"},{"cpeMatch":[{"criteria":"cpe:2.3:h:qualcomm:msm8909w:-:*:*:*:*:*:*:*","matchCriteriaId":"5DEE828B-09A7-4AC1-8134-491A7C87C118","vulnerable":false}],"negate":false,"operator":"OR"}],"operator":"AND"},{"nodes":[{"cpeMatch":[{"criteria":"cpe:2.3:o:qualcomm:msm8917_firmware:-:*:*:*:*:*:*:*","matchCriteriaId":"9BD0305A-E31C-4888-B97E-CE571D40560A","vulnerable":true}],"negate":false,"operator":"OR"},{"cpeMatch":[{"criteria":"cpe:2.3:h:qualcomm:msm8917:-:*:*:*:*:*:*:*","matchCriteriaId":"369295A2-8236-44B6-A09F-7CB0BD20527F","vulnerable":false}],"negate":false,"operator":"OR"}],"operator":"AND"},{"nodes":[{"cpeMatch":[{"criteria":"cpe:2.3:o:qualcomm:msm8953_firmware:-:*:*:*:*:*:*:*","matchCriteriaId":"BE4E0E39-0081-4261-8350-149E763AB462","vulnerable":true}],"negate":false,"operator":"OR"},{"cpeMatch":[{"criteria":"cpe:2.3:h:qualcomm:msm8953:-:*:*:*:*:*:*:*","matchCriteriaId":"94F76229-1A4A-4306-A4CC-C823A99F041A","vulnerable":false}],"negate":false,"operator":"OR"}],"operator":"AND"},{"nodes":[{"cpeMatch":[{"criteria":"cpe:2.3:o:qualcomm:msm8996au_firmware:-:*:*:*:*:*:*:*","matchCriteriaId":"8CA1E7B0-782B-4757-B118-802943798984","vulnerable":true}],"negate":false,"operator":"OR"},{"cpeMatch":[{"criteria":"cpe:2.3:h:qualcomm:msm8996au:-:*:*:*:*:*:*:*","matchCriteriaId":"95CB08EC-AE12-4A54-AA3C-998F01FC8763","vulnerable":false}],"negate":false,"operator":"OR"}],"operator":"AND"},{"nodes":[{"cpeMatch":[{"criteria":"cpe:2.3:o:qualcomm:qcs605_firmware:-:*:*:*:*:*:*:*","matchCriteriaId":"B05FD66D-13A6-40E9-A64B-E428378F237E","vulnerable":true}],"negate":false,"operator":"OR"},{"cpeMatch":[{"criteria":"cpe:2.3:h:qualcomm:qcs605:-:*:*:*:*:*:*:*","matchCriteriaId":"D0D665C1-3EBA-42F2-BF56-55E6C365F7DF","vulnerable":false}],"negate":false,"operator":"OR"}],"operator":"AND"},{"nodes":[{"cpeMatch":[{"criteria":"cpe:2.3:o:qualcomm:qm215_firmware:-:*:*:*:*:*:*:*","matchCriteriaId":"F18CD1F1-C36A-4840-88CD-8F00BD68EF1A","vulnerable":true}],"negate":false,"operator":"OR"},{"cpeMatch":[{"criteria":"cpe:2.3:h:qualcomm:qm215:-:*:*:*:*:*:*:*","matchCriteriaId":"6A01800E-994E-4095-AD86-F02DC9D9C86E","vulnerable":false}],"negate":false,"operator":"OR"}],"operator":"AND"},{"nodes":[{"cpeMatch":[{"criteria":"cpe:2.3:o:qualcomm:sda660_firmware:-:*:*:*:*:*:*:*","matchCriteriaId":"A2326BD7-28A5-4244-8501-B109913E7AE6","vulnerable":true}],"negate":false,"operator":"OR"},{"cpeMatch":[{"criteria":"cpe:2.3:h:qualcomm:sda660:-:*:*:*:*:*:*:*","matchCriteriaId":"532D244B-8B5A-4923-B7F1-9DC0A5FC0E9D","vulnerable":false}],"negate":false,"operator":"OR"}],"operator":"AND"},{"nodes":[{"cpeMatch":[{"criteria":"cpe:2.3:o:qualcomm:sda845_firmware:-:*:*:*:*:*:*:*","matchCriteriaId":"022D7D87-F60F-4DD2-9E0B-A9DFD3D69B22","vulnerable":true}],"negate":false,"operator":"OR"},{"cpeMatch":[{"criteria":"cpe:2.3:h:qualcomm:sda845:-:*:*:*:*:*:*:*","matchCriteriaId":"37FA5777-1B35-4BD1-BB81-CB5DE62F3D56","vulnerable":false}],"negate":false,"operator":"OR"}],"operator":"AND"},{"nodes":[{"cpeMatch":[{"criteria":"cpe:2.3:o:qualcomm:sdm429_firmware:-:*:*:*:*:*:*:*","matchCriteriaId":"9DFD2C9A-6C25-4B8F-BE64-DAD3DCCDEADD","vulnerable":true}],"negate":false,"operator":"OR"},{"cpeMatch":[{"criteria":"cpe:2.3:h:qualcomm:sdm429:-:*:*:*:*:*:*:*","matchCriteriaId":"8DE61FCE-CA87-46E1-981D-B44697E54CB1","vulnerable":false}],"negate":false,"operator":"OR"}],"operator":"AND"},{"nodes":[{"cpeMatch":[{"criteria":"cpe:2.3:o:qualcomm:sdm439_firmware:-:*:*:*:*:*:*:*","matchCriteriaId":"84289E6D-DA2A-4D04-9DDA-E8C46DDDD056","vulnerable":true}],"negate":false,"operator":"OR"},{"cpeMatch":[{"criteria":"cpe:2.3:h:qualcomm:sdm439:-:*:*:*:*:*:*:*","matchCriteriaId":"C0B56360-7AC3-410A-B7F8-1BE8514B3781","vulnerable":false}],"negate":false,"operator":"OR"}],"operator":"AND"},{"nodes":[{"cpeMatch":[{"criteria":"cpe:2.3:o:qualcomm:sdm450_firmware:-:*:*:*:*:*:*:*","matchCriteriaId":"8F3B5AFF-4AD4-4C10-9E39-C553C7E9E16E","vulnerable":true}],"negate":false,"operator":"OR"},{"cpeMatch":[{"criteria":"cpe:2.3:h:qualcomm:sdm450:-:*:*:*:*:*:*:*","matchCriteriaId":"A09E7B90-DD7B-4617-90FD-29FF5BB190A9","vulnerable":false}],"negate":false,"operator":"OR"}],"operator":"AND"},{"nodes":[{"cpeMatch":[{"criteria":"cpe:2.3:o:qualcomm:sdm630_firmware:-:*:*:*:*:*:*:*","matchCriteriaId":"8EA0D645-80F6-48C3-AF0D-99198ADC8778","vulnerable":true}],"negate":false,"operator":"OR"},{"cpeMatch":[{"criteria":"cpe:2.3:h:qualcomm:sdm630:-:*:*:*:*:*:*:*","matchCriteriaId":"814FF3F3-CD5A-45A3-988C-6457D2CEB48C","vulnerable":false}],"negate":false,"operator":"OR"}],"operator":"AND"},{"nodes":[{"cpeMatch":[{"criteria":"cpe:2.3:o:qualcomm:sdm632_firmware:-:*:*:*:*:*:*:*","matchCriteriaId":"A02E12AC-F845-4164-9D95-ACD7167B6DD6","vulnerable":true}],"negate":false,"operator":"OR"},{"cpeMatch":[{"criteria":"cpe:2.3:h:qualcomm:sdm632:-:*:*:*:*:*:*:*","matchCriteriaId":"321F7DE7-E6E9-449F-867B-04A9F53334B0","vulnerable":false}],"negate":false,"operator":"OR"}],"operator":"AND"},{"nodes":[{"cpeMatch":[{"criteria":"cpe:2.3:o:qualcomm:sdm636_firmware:-:*:*:*:*:*:*:*","matchCriteriaId":"8F00D854-0AC7-415F-B19A-642CB9F72210","vulnerable":true}],"negate":false,"operator":"OR"},{"cpeMatch":[{"criteria":"cpe:2.3:h:qualcomm:sdm636:-:*:*:*:*:*:*:*","matchCriteriaId":"F977B432-2709-4D75-AA3E-F440285B7BA2","vulnerable":false}],"negate":false,"operator":"OR"}],"operator":"AND"},{"nodes":[{"cpeMatch":[{"criteria":"cpe:2.3:o:qualcomm:sdm660_firmware:-:*:*:*:*:*:*:*","matchCriteriaId":"24D7B67C-6FEC-48F8-9D46-778E4528BC20","vulnerable":true}],"negate":false,"operator":"OR"},{"cpeMatch":[{"criteria":"cpe:2.3:h:qualcomm:sdm660:-:*:*:*:*:*:*:*","matchCriteriaId":"05006807-D961-446C-B8DC-C87507F1316E","vulnerable":false}],"negate":false,"operator":"OR"}],"operator":"AND"},{"nodes":[{"cpeMatch":[{"criteria":"cpe:2.3:o:qualcomm:sdm845_firmware:-:*:*:*:*:*:*:*","matchCriteriaId":"DED4B719-53B5-4D16-B3FA-ADE29D28ED86","vulnerable":true}],"negate":false,"operator":"OR"},{"cpeMatch":[{"criteria":"cpe:2.3:h:qualcomm:sdm845:-:*:*:*:*:*:*:*","matchCriteriaId":"D342C86B-E184-457C-9F72-BD853ED79425","vulnerable":false}],"negate":false,"operator":"OR"}],"operator":"AND"},{"nodes":[{"cpeMatch":[{"criteria":"cpe:2.3:o:qualcomm:sdx20_firmware:-:*:*:*:*:*:*:*","matchCriteriaId":"A0CE1B23-6FE3-41C4-B264-C7A9E8BDBEC1","vulnerable":true}],"negate":false,"operator":"OR"},{"cpeMatch":[{"criteria":"cpe:2.3:h:qualcomm:sdx20:-:*:*:*:*:*:*:*","matchCriteriaId":"794BA13C-3C63-4695-AA45-676F85D904BE","vulnerable":false}],"negate":false,"operator":"OR"}],"operator":"AND"},{"nodes":[{"cpeMatch":[{"criteria":"cpe:2.3:o:qualcomm:sm6150_firmware:-:*:*:*:*:*:*:*","matchCriteriaId":"8ABE492A-3755-4969-9DEB-4B85EBB84644","vulnerable":true}],"negate":false,"operator":"OR"},{"cpeMatch":[{"criteria":"cpe:2.3:h:qualcomm:sm6150:-:*:*:*:*:*:*:*","matchCriteriaId":"E3D3787B-6ACC-4591-B041-01307ED66C36","vulnerable":false}],"negate":false,"operator":"OR"}],"operator":"AND"},{"nodes":[{"cpeMatch":[{"criteria":"cpe:2.3:o:qualcomm:sm7150_firmware:-:*:*:*:*:*:*:*","matchCriteriaId":"F63A748F-2236-4486-83F1-DE4BCBE5D56D","vulnerable":true}],"negate":false,"operator":"OR"},{"cpeMatch":[{"criteria":"cpe:2.3:h:qualcomm:sm7150:-:*:*:*:*:*:*:*","matchCriteriaId":"184F3DFC-27E8-48AC-B46C-C589DBCBF030","vulnerable":false}],"negate":false,"operator":"OR"}],"operator":"AND"},{"nodes":[{"cpeMatch":[{"criteria":"cpe:2.3:o:qualcomm:sm8150_firmware:-:*:*:*:*:*:*:*","matchCriteriaId":"9286B1E8-E39F-4DAA-8969-311CA2A0A8AA","vulnerable":true}],"negate":false,"operator":"OR"},{"cpeMatch":[{"criteria":"cpe:2.3:h:qualcomm:sm8150:-:*:*:*:*:*:*:*","matchCriteriaId":"19B9AE36-87A9-4EE7-87C8-CCA2DCF51039","vulnerable":false}],"negate":false,"operator":"OR"}],"operator":"AND"}],"cveTags":[],"descriptions":[{"lang":"en","value":"Buffer overflow in display function due to memory copy without checking length of size using strcpy function in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon IoT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables in APQ8017, APQ8053, APQ8096AU, APQ8098, MDM9206, MDM9207C, MDM9607, MSM8909W, MSM8917, MSM8953, MSM8996AU, QCS605, QM215, SDA660, SDA845, SDM429, SDM439, SDM450, SDM630, SDM632, SDM636, SDM660, SDM845, SDX20, SM6150, SM7150, SM8150"},{"lang":"es","value":"Un desbordamiento del búfer en la función display debido a una copia de la memoria sin comprobar la longitud del tamaño utilizando la función strcpy en los productos Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon IoT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables en las versiones APQ8017, APQ8053, APQ8096AU, APQ8098, MDM9206, MDM9207C, MDM9607, MSM8909W, MSM8917, MSM8953, MSM8996AU, QCS605, QM215, SDA660, SDA845, SDM429, SDM439, SDM450, SDM630, SDM632, SDM636, SDM660, SDM845, SDX20, SM6150, SM7150, SM8150."}],"id":"CVE-2020-3616","lastModified":"2026-06-17T03:18:43.167","metrics":{"cvssMetricV2":[{"acInsufInfo":false,"baseSeverity":"HIGH","cvssData":{"accessComplexity":"LOW","accessVector":"LOCAL","authentication":"NONE","availabilityImpact":"COMPLETE","baseScore":7.2,"confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","vectorString":"AV:L/AC:L/Au:N/C:C/I:C/A:C","version":"2.0"},"exploitabilityScore":3.9,"impactScore":10.0,"obtainAllPrivilege":false,"obtainOtherPrivilege":false,"obtainUserPrivilege":false,"source":"nvd@nist.gov","type":"Primary","userInteractionRequired":false}],"cvssMetricV31":[{"cvssData":{"attackComplexity":"LOW","attackVector":"LOCAL","availabilityImpact":"HIGH","baseScore":7.8,"baseSeverity":"HIGH","confidentialityImpact":"HIGH","integrityImpact":"HIGH","privilegesRequired":"LOW","scope":"UNCHANGED","userInteraction":"NONE","vectorString":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","version":"3.1"},"exploitabilityScore":1.8,"impactScore":5.9,"source":"nvd@nist.gov","type":"Primary"}]},"published":"2020-06-02T15:15:13.633","references":[{"source":"product-security@qualcomm.com","tags":["Vendor Advisory"],"url":"https://www.qualcomm.com/company/product-security/bulletins/may-2020-bulletin"},{"source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"],"url":"https://www.qualcomm.com/company/product-security/bulletins/may-2020-bulletin"}],"sourceIdentifier":"product-security@qualcomm.com","vulnStatus":"Modified","weaknesses":[{"description":[{"lang":"en","value":"CWE-120"}],"source":"nvd@nist.gov","type":"Primary"}]}
|