2 lines
6.3 KiB
JSON
2 lines
6.3 KiB
JSON
{"affected":[{"affectedData":[{"product":"Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Wired Infrastructure and Networking","vendor":"Qualcomm, Inc.","versions":[{"status":"affected","version":"Agatti, Kamorta, QCS404, QCS605, SDA845, SDM670, SDM710, SDM845, SXR1130"}]}],"source":"product-security@qualcomm.com"}],"configurations":[{"nodes":[{"cpeMatch":[{"criteria":"cpe:2.3:o:qualcomm:agatti_firmware:-:*:*:*:*:*:*:*","matchCriteriaId":"39E6366C-4356-4689-B1B6-762861CB1813","vulnerable":true}],"negate":false,"operator":"OR"},{"cpeMatch":[{"criteria":"cpe:2.3:h:qualcomm:agatti:-:*:*:*:*:*:*:*","matchCriteriaId":"37440A79-2D29-4747-981B-7D2C526FFBC7","vulnerable":false}],"negate":false,"operator":"OR"}],"operator":"AND"},{"nodes":[{"cpeMatch":[{"criteria":"cpe:2.3:o:qualcomm:kamorta_firmware:-:*:*:*:*:*:*:*","matchCriteriaId":"4C17D128-D249-463B-B21B-F5B01265726A","vulnerable":true}],"negate":false,"operator":"OR"},{"cpeMatch":[{"criteria":"cpe:2.3:h:qualcomm:kamorta:-:*:*:*:*:*:*:*","matchCriteriaId":"4ECFB565-9C4D-4F58-AD4E-283276688F00","vulnerable":false}],"negate":false,"operator":"OR"}],"operator":"AND"},{"nodes":[{"cpeMatch":[{"criteria":"cpe:2.3:o:qualcomm:qcs404_firmware:-:*:*:*:*:*:*:*","matchCriteriaId":"2A2F7E6B-D499-4698-A203-A12725E51DFF","vulnerable":true}],"negate":false,"operator":"OR"},{"cpeMatch":[{"criteria":"cpe:2.3:h:qualcomm:qcs404:-:*:*:*:*:*:*:*","matchCriteriaId":"B172AA65-B693-48DF-9D5A-7BB6FCC4A2A3","vulnerable":false}],"negate":false,"operator":"OR"}],"operator":"AND"},{"nodes":[{"cpeMatch":[{"criteria":"cpe:2.3:o:qualcomm:qcs605_firmware:-:*:*:*:*:*:*:*","matchCriteriaId":"B05FD66D-13A6-40E9-A64B-E428378F237E","vulnerable":true}],"negate":false,"operator":"OR"},{"cpeMatch":[{"criteria":"cpe:2.3:h:qualcomm:qcs605:-:*:*:*:*:*:*:*","matchCriteriaId":"D0D665C1-3EBA-42F2-BF56-55E6C365F7DF","vulnerable":false}],"negate":false,"operator":"OR"}],"operator":"AND"},{"nodes":[{"cpeMatch":[{"criteria":"cpe:2.3:o:qualcomm:sda845_firmware:-:*:*:*:*:*:*:*","matchCriteriaId":"022D7D87-F60F-4DD2-9E0B-A9DFD3D69B22","vulnerable":true}],"negate":false,"operator":"OR"},{"cpeMatch":[{"criteria":"cpe:2.3:h:qualcomm:sda845:-:*:*:*:*:*:*:*","matchCriteriaId":"37FA5777-1B35-4BD1-BB81-CB5DE62F3D56","vulnerable":false}],"negate":false,"operator":"OR"}],"operator":"AND"},{"nodes":[{"cpeMatch":[{"criteria":"cpe:2.3:o:qualcomm:sdm670_firmware:-:*:*:*:*:*:*:*","matchCriteriaId":"00865826-86AE-425F-BE6F-162F611FB200","vulnerable":true}],"negate":false,"operator":"OR"},{"cpeMatch":[{"criteria":"cpe:2.3:h:qualcomm:sdm670:-:*:*:*:*:*:*:*","matchCriteriaId":"0CC0441C-C30B-4D99-9BAD-C1E4387302BB","vulnerable":false}],"negate":false,"operator":"OR"}],"operator":"AND"},{"nodes":[{"cpeMatch":[{"criteria":"cpe:2.3:o:qualcomm:sdm710_firmware:-:*:*:*:*:*:*:*","matchCriteriaId":"D045BE4B-BC19-4A51-90E6-00C18389C81B","vulnerable":true}],"negate":false,"operator":"OR"},{"cpeMatch":[{"criteria":"cpe:2.3:h:qualcomm:sdm710:-:*:*:*:*:*:*:*","matchCriteriaId":"4F006960-CDE3-4E74-B4F0-2C4B2CA93959","vulnerable":false}],"negate":false,"operator":"OR"}],"operator":"AND"},{"nodes":[{"cpeMatch":[{"criteria":"cpe:2.3:o:qualcomm:sdm845_firmware:-:*:*:*:*:*:*:*","matchCriteriaId":"DED4B719-53B5-4D16-B3FA-ADE29D28ED86","vulnerable":true}],"negate":false,"operator":"OR"},{"cpeMatch":[{"criteria":"cpe:2.3:h:qualcomm:sdm845:-:*:*:*:*:*:*:*","matchCriteriaId":"D342C86B-E184-457C-9F72-BD853ED79425","vulnerable":false}],"negate":false,"operator":"OR"}],"operator":"AND"},{"nodes":[{"cpeMatch":[{"criteria":"cpe:2.3:o:qualcomm:sxr1130_firmware:-:*:*:*:*:*:*:*","matchCriteriaId":"096F7BA5-FF58-416B-93EF-733B16326C86","vulnerable":true}],"negate":false,"operator":"OR"},{"cpeMatch":[{"criteria":"cpe:2.3:h:qualcomm:sxr1130:-:*:*:*:*:*:*:*","matchCriteriaId":"7AF958FB-1611-4102-A2DB-8D4311AE0D72","vulnerable":false}],"negate":false,"operator":"OR"}],"operator":"AND"}],"cveTags":[],"descriptions":[{"lang":"en","value":"u'A buffer overflow could occur if the API is improperly used due to UIE init does not contain a buffer size a param' in Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Wired Infrastructure and Networking in Agatti, Kamorta, QCS404, QCS605, SDA845, SDM670, SDM710, SDM845, SXR1130"},{"lang":"es","value":"Un desbordamiento de búfer podría ocurrir si la API es usada inapropiadamente debido a que UIE init no contiene un param de un tamaño de búfer en los productos Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Wired Infrastructure and Networking en versiones Agatti, Kamorta, QCS404, QCS605, SDA845, SDM670, SDM710, SDM845, SXR1130"}],"id":"CVE-2020-3678","lastModified":"2026-06-17T03:18:51.037","metrics":{"cvssMetricV2":[{"acInsufInfo":false,"baseSeverity":"MEDIUM","cvssData":{"accessComplexity":"LOW","accessVector":"LOCAL","authentication":"NONE","availabilityImpact":"PARTIAL","baseScore":4.6,"confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","vectorString":"AV:L/AC:L/Au:N/C:P/I:P/A:P","version":"2.0"},"exploitabilityScore":3.9,"impactScore":6.4,"obtainAllPrivilege":false,"obtainOtherPrivilege":false,"obtainUserPrivilege":false,"source":"nvd@nist.gov","type":"Primary","userInteractionRequired":false}],"cvssMetricV31":[{"cvssData":{"attackComplexity":"LOW","attackVector":"LOCAL","availabilityImpact":"HIGH","baseScore":7.8,"baseSeverity":"HIGH","confidentialityImpact":"HIGH","integrityImpact":"HIGH","privilegesRequired":"LOW","scope":"UNCHANGED","userInteraction":"NONE","vectorString":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","version":"3.1"},"exploitabilityScore":1.8,"impactScore":5.9,"source":"nvd@nist.gov","type":"Primary"}]},"published":"2020-11-02T07:15:14.670","references":[{"source":"product-security@qualcomm.com","tags":["Broken Link"],"url":"https://www.qualcomm.com/company/product-security/bulletins/october-2020-bulletin"},{"source":"nvd@nist.gov","tags":["Vendor Advisory"],"url":"https://www.qualcomm.com/company/product-security/bulletins/october-2020-security-bulletin"},{"source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"],"url":"https://www.qualcomm.com/company/product-security/bulletins/october-2020-bulletin"}],"sourceIdentifier":"product-security@qualcomm.com","vulnStatus":"Modified","weaknesses":[{"description":[{"lang":"en","value":"CWE-120"}],"source":"nvd@nist.gov","type":"Primary"}]}
|