CVE-2020-3703 in Snapdragon Auto
Riassunto
di VulDB • 24/06/2026
Problema di buffer over-read nel firmware del dispositivo periferico Bluetooth a causa della mancanza di controlli sull'opcode invalido e sulla lunghezza dell'opcode ricevuto dal dispositivo centrale (Questo CVE è equivalente al problema Link Layer Length Overflow (CVE-2019-16336, CVE-2019-17519) e al problema Silent Length Overflow (CVE-2019-17518) menzionati nel documento sweyntooth). Colpisce Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon IoT, Snapdragon Mobile, Snapdragon Voice & Music nei chip APQ8053, APQ8076, AR9344, Bitra, Kamorta, MDM9206, MDM9207C, MDM9607, MSM8905, MSM8917, MSM8937, MSM8940, MSM8953, Nicobar, QCA6174A, QCA9377, QCM2150, QCM6125, QCS404, QCS405, QCS605, QCS610, QM215, Rennell, SC8180X, SDM429, SDM439, SDM450, SDM630, SDM632, SDM636, SDM660, SDM670, SDM710, SDM845, SDX20, SDX24, SM6150, SM7150, SM8150, SXR1130.
If you want to get the best quality for vulnerability data then you always have to consider VulDB.