High severity7.8NVD Advisory· Published Jun 2, 2020· Updated Jun 17, 2026

CVE-2020-3625

Description

When making query to DSP capabilities, Stack out of bounds occurs due to wrong buffer length configured for DSP attributes in Snapdragon Auto, Snapdragon Consumer IOT, Snapdragon Mobile in SM8250, SXR2130

Affected products

Qualcomm/Sm8250 Firmware
cpe:2.3:o:qualcomm:sm8250_firmware:-:*:*:*:*:*:*:*
Qualcomm/Sxr2130 Firmware
cpe:2.3:o:qualcomm:sxr2130_firmware:-:*:*:*:*:*:*:*
Qualcomm/Snapdragon Mobilellm-fuzzy
Qualcomm/Snapdragon Consumer IOTllm-fuzzy
Qualcomm/Snapdragon Autollm-fuzzy
Qualcomm, Inc./Snapdragon Auto, Snapdragon Consumer IOT, Snapdragon Mobilev5
Range: SM8250, SXR2130

Patches

Vulnerability mechanics

References

www.qualcomm.com/company/product-security/bulletins/may-2020-bulletinnvdVendor Advisory

News mentions

No linked articles in our index yet.

cvss	0.507
epss	0.000
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000