{"id":"CVE-2020-3641","aliases":["EUVD-2020-24912","GHSA-hqfr-fqq8-v557"],"status":"published","title":"Integer overflow may occur if atom size is less than atom offset as there is improper validation...","description":"Integer overflow may occur if atom size is less than atom offset as there is improper validation of atom size in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice \u0026 Music, Snapdragon Wearables in APQ8009, APQ8053, APQ8096AU, APQ8098, Kamorta, MDM9206, MDM9207C, MDM9607, MSM8905, MSM8909W, MSM8917, MSM8953, MSM8996AU, MSM8998, QCA6574AU, QCM2150, QCS405, QCS605, QM215, Rennell, SA6155P, Saipan, SDA660, SDM429, SDM429W, SDM439, SDM450, SDM630, SDM632, SDM636, SDM660, SDM845, SDX20, SM6150, SM7150, SM8150, SM8250, SXR2130","severity":{"version":"3.1","score":9.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"critical","assessor":"primary","from":"nvd"},"epss":{"day":"2026-11-09","score":0.01084,"percentile":0.65462,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":false},"cwes":["CWE-190"],"published":"2020-06-02T15:05:47Z","modified":"2026-06-17T03:18:46Z","products":[{"vendor":"qualcomm","product":"apq8009_firmware"},{"vendor":"qualcomm","product":"apq8053_firmware"},{"vendor":"qualcomm","product":"apq8096au_firmware"},{"vendor":"qualcomm","product":"apq8098_firmware"},{"vendor":"qualcomm","product":"kamorta_firmware"},{"vendor":"qualcomm","product":"mdm9206_firmware"},{"vendor":"qualcomm","product":"mdm9207c_firmware"},{"vendor":"qualcomm","product":"mdm9607_firmware"},{"vendor":"qualcomm","product":"msm8905_firmware"},{"vendor":"qualcomm","product":"msm8909w_firmware"},{"vendor":"qualcomm","product":"msm8917_firmware"},{"vendor":"qualcomm","product":"msm8953_firmware"},{"vendor":"qualcomm","product":"msm8996au_firmware"},{"vendor":"qualcomm","product":"msm8998_firmware"},{"vendor":"qualcomm","product":"qca6574au_firmware"},{"vendor":"qualcomm","product":"qcm2150_firmware"},{"vendor":"qualcomm","product":"qcs405_firmware"},{"vendor":"qualcomm","product":"qcs605_firmware"},{"vendor":"qualcomm","product":"qm215_firmware"},{"vendor":"qualcomm","product":"rennell_firmware"},{"vendor":"qualcomm","product":"sa6155p_firmware"},{"vendor":"qualcomm","product":"saipan_firmware"},{"vendor":"qualcomm","product":"sda660_firmware"},{"vendor":"qualcomm","product":"sdm429_firmware"},{"vendor":"qualcomm","product":"sdm429w_firmware"},{"vendor":"qualcomm","product":"sdm439_firmware"},{"vendor":"qualcomm","product":"sdm450_firmware"},{"vendor":"qualcomm","product":"sdm630_firmware"},{"vendor":"qualcomm","product":"sdm632_firmware"},{"vendor":"qualcomm","product":"sdm636_firmware"},{"vendor":"qualcomm","product":"sdm660_firmware"},{"vendor":"qualcomm","product":"sdm845_firmware"},{"vendor":"qualcomm","product":"sdx20_firmware"},{"vendor":"qualcomm","product":"sm6150_firmware"},{"vendor":"qualcomm","product":"sm7150_firmware"},{"vendor":"qualcomm","product":"sm8150_firmware"},{"vendor":"qualcomm","product":"sm8250_firmware"},{"vendor":"qualcomm","product":"sxr2130_firmware"},{"vendor":"qualcomm, inc.","product":"snapdragon auto, snapdragon compute, snapdragon consumer iot, snapdragon industrial iot, snapdragon mobile, snapdragon voice \u0026 music, snapdragon wearables"}],"references":[{"url":"https://www.qualcomm.com/company/product-security/bulletins/may-2020-bulletin","tags":["x_refsource_CONFIRM","x_transferred","Vendor Advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2020-3641"},{"url":"https://github.com/advisories/GHSA-hqfr-fqq8-v557"}],"sources":{"cve":[{"id":"CVE-2020-3641","description":"Integer overflow may occur if atom size is less than atom offset as there is improper validation of atom size in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice \u0026 Music, Snapdragon Wearables in APQ8009, APQ8053, APQ8096AU, APQ8098, Kamorta, MDM9206, MDM9207C, MDM9607, MSM8905, MSM8909W, MSM8917, MSM8953, MSM8996AU, MSM8998, QCA6574AU, QCM2150, QCS405, QCS605, QM215, Rennell, SA6155P, Saipan, SDA660, SDM429, SDM429W, SDM439, SDM450, SDM630, SDM632, SDM636, SDM660, SDM845, SDX20, SM6150, SM7150, SM8150, SM8250, SXR2130","status":"published","published":"2020-06-02T15:05:47Z","modified":"2024-08-04T07:37:55.792Z","updated_at":"2026-11-02T14:35:51.923913Z"}],"euvd":[{"id":"EUVD-2020-24912","description":"Integer overflow may occur if atom size is less than atom offset as there is improper validation of atom size in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice \u0026 Music, Snapdragon Wearables in APQ8009, APQ8053, APQ8096AU, APQ8098, Kamorta, MDM9206, MDM9207C, MDM9607, MSM8905, MSM8909W, MSM8917, MSM8953, MSM8996AU, MSM8998, QCA6574AU, QCM2150, QCS405, QCS605, QM215, Rennell, SA6155P, Saipan, SDA660, SDM429, SDM429W, SDM439, SDM450, SDM630, SDM632, SDM636, SDM660, SDM845, SDX20, SM6150, SM7150, SM8150, SM8250, SXR2130","status":"published","published":"2020-06-02T15:05:47Z","modified":"2024-08-04T07:37:55Z","updated_at":"2026-11-03T03:08:09.450574Z"}],"ghsa":[{"id":"GHSA-hqfr-fqq8-v557","title":"Integer overflow may occur if atom size is less than atom offset as there is improper validation...","description":"Integer overflow may occur if atom size is less than atom offset as there is improper validation of atom size in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice \u0026 Music, Snapdragon Wearables in APQ8009, APQ8053, APQ8096AU, APQ8098, Kamorta, MDM9206, MDM9207C, MDM9607, MSM8905, MSM8909W, MSM8917, MSM8953, MSM8996AU, MSM8998, QCA6574AU, QCM2150, QCS405, QCS605, QM215, Rennell, SA6155P, Saipan, SDA660, SDM429, SDM429W, SDM439, SDM450, SDM630, SDM632, SDM636, SDM660, SDM845, SDX20, SM6150, SM7150, SM8150, SM8250, SXR2130","status":"published","published":"2022-05-24T17:19:00Z","modified":"2023-01-29T05:02:47Z","updated_at":"2026-11-02T14:45:10.011414Z"}],"nvd":[{"id":"CVE-2020-3641","description":"Integer overflow may occur if atom size is less than atom offset as there is improper validation of atom size in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice \u0026 Music, Snapdragon Wearables in APQ8009, APQ8053, APQ8096AU, APQ8098, Kamorta, MDM9206, MDM9207C, MDM9607, MSM8905, MSM8909W, MSM8917, MSM8953, MSM8996AU, MSM8998, QCA6574AU, QCM2150, QCS405, QCS605, QM215, Rennell, SA6155P, Saipan, SDA660, SDM429, SDM429W, SDM439, SDM450, SDM630, SDM632, SDM636, SDM660, SDM845, SDX20, SM6150, SM7150, SM8150, SM8250, SXR2130","status":"published","published":"2020-06-02T15:15:14.07Z","modified":"2026-06-17T03:18:46.183Z","cvss":[{"version":"3.1","score":9.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"critical","assessor":"primary"},{"version":"2.0","score":10,"vector":"AV:N/AC:L/Au:N/C:C/I:C/A:C","level":"high","assessor":"primary"}],"cwes":["CWE-190"],"updated_at":"2026-11-02T14:06:04.922138Z"}]}}