CVE-2020-3625

HighCVSS 7.8/10Last modified Jun 17, 2026

Description

When making query to DSP capabilities, Stack out of bounds occurs due to wrong buffer length configured for DSP attributes in Snapdragon Auto, Snapdragon Consumer IOT, Snapdragon Mobile in SM8250, SXR2130

Metrics

CVSS 3.1 7.8/10CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Weakness enumeration

CWE-120

Affected software

Vendor	Product	Versions
Qualcomm, Inc.	Snapdragon Auto, Snapdragon Consumer IOT, Snapdragon Mobile	SM8250, SXR2130

References

https://www.qualcomm.com/company/product-security/bulletins/may-2020-bulletinVendor Advisory
https://www.qualcomm.com/company/product-security/bulletins/may-2020-bulletinVendor Advisory

Timeline

Published: Jun 2, 2020
Last modified: Jun 17, 2026
NVD status: Modified

Related CVEs from 2020

CVE-2020-362504.6In the ownCloud application before 2.15 for Android, the lock protection mechanism can be bypassed by moving the system date/time into the p CVE-2020-362514.3ownCloud Server before 10.3.0 allows an attacker, who has received non-administrative access to a group share, to remove everyone else's acc CVE-2020-362525.7ownCloud Server 10.x before 10.3.1 allows an attacker, who has one outgoing share from a victim, to access any version of any file by sendin CVE-2020-362548.1scp.c in Dropbear before 2020.79 mishandles the filename of . or an empty filename, a related issue to CVE-2018-20685.CVE-2020-362557.5An issue was discovered in IdentityModel (aka ScottBrady.IdentityModel) before 1.3.0. The Branca implementation allows an attacker to modify CVE-2020-36267.8Any application can bind to it and exercise the APIs due to no protection for AIDL uimlpaservice in Snapdragon Auto, Snapdragon Compute, Sna CVE-2020-362777.5Leptonica before 1.80.0 allows a denial of service (application crash) via an incorrect left shift in pixConvert2To8 in pixconv.c.CVE-2020-362787.5Leptonica before 1.80.0 allows a heap-based buffer over-read in findNextBorderPixel in ccbord.c.CVE-2020-362797.5Leptonica before 1.80.0 allows a heap-based buffer over-read in rasteropGeneralLow, related to adaptmap_reg.c and adaptmap.c.CVE-2020-36289.8Improper access due to socket opened by the logging application without specifying localhost address in Snapdragon Consumer IOT, Snapdragon CVE-2020-362807.5Leptonica before 1.80.0 allows a heap-based buffer over-read in pixReadFromTiffStream, related to tiffio.c.CVE-2020-362817.5Leptonica before 1.80.0 allows a heap-based buffer over-read in pixFewColorsOctcubeQuantMixed in colorquant1.c.