{"id":"CVE-2020-3646","aliases":["EUVD-2020-24917","GHSA-m69w-8p53-w8cx"],"status":"published","title":"u'Buffer overflow seen as the destination buffer size is lesser than the source buffer size in...","description":"u'Buffer overflow seen as the destination buffer size is lesser than the source buffer size in video application' in Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice \u0026 Music, Snapdragon Wearables in Bitra, MSM8909W, QCM2150, QCS405, QCS605, Saipan, SC8180X, SDA845, SDM429W, SDX24, SDX55, SM6150, SM7150, SM8150, SM8250, SXR2130","severity":{"version":"3.1","score":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","level":"high","assessor":"primary","from":"nvd"},"epss":{"day":"2026-11-11","score":0.00211,"percentile":0.11448,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":false},"cwes":["CWE-120"],"published":"2020-09-08T09:31:43Z","modified":"2026-06-17T03:18:46Z","products":[{"vendor":"qualcomm","product":"bitra_firmware"},{"vendor":"qualcomm","product":"msm8909w_firmware"},{"vendor":"qualcomm","product":"qcm2150_firmware"},{"vendor":"qualcomm","product":"qcs405_firmware"},{"vendor":"qualcomm","product":"qcs605_firmware"},{"vendor":"qualcomm","product":"saipan_firmware"},{"vendor":"qualcomm","product":"sc8180x_firmware"},{"vendor":"qualcomm","product":"sda845_firmware"},{"vendor":"qualcomm","product":"sdm429w_firmware"},{"vendor":"qualcomm","product":"sdx24_firmware"},{"vendor":"qualcomm","product":"sdx55_firmware"},{"vendor":"qualcomm","product":"sm6150_firmware"},{"vendor":"qualcomm","product":"sm7150_firmware"},{"vendor":"qualcomm","product":"sm8150_firmware"},{"vendor":"qualcomm","product":"sm8250_firmware"},{"vendor":"qualcomm","product":"sxr2130_firmware"},{"vendor":"qualcomm, inc.","product":"snapdragon compute, snapdragon consumer iot, snapdragon industrial iot, snapdragon mobile, snapdragon voice \u0026 music, snapdragon wearables"}],"references":[{"url":"https://www.qualcomm.com/company/product-security/bulletins/august-2020-bulletin","tags":["x_refsource_CONFIRM","x_transferred","Broken Link"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2020-3646"},{"url":"https://www.qualcomm.com/company/product-security/bulletins/august-2020-security-bulletin","tags":["Patch","Vendor Advisory"]},{"url":"https://github.com/advisories/GHSA-m69w-8p53-w8cx"}],"sources":{"cve":[{"id":"CVE-2020-3646","description":"u'Buffer overflow seen as the destination buffer size is lesser than the source buffer size in video application' in Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice \u0026 Music, Snapdragon Wearables in Bitra, MSM8909W, QCM2150, QCS405, QCS605, Saipan, SC8180X, SDA845, SDM429W, SDX24, SDX55, SM6150, SM7150, SM8150, SM8250, SXR2130","status":"published","published":"2020-09-08T09:31:43Z","modified":"2024-08-04T07:37:55.866Z","updated_at":"2026-11-02T14:35:51.923913Z"}],"euvd":[{"id":"EUVD-2020-24917","description":"u'Buffer overflow seen as the destination buffer size is lesser than the source buffer size in video application' in Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice \u0026 Music, Snapdragon Wearables in Bitra, MSM8909W, QCM2150, QCS405, QCS605, Saipan, SC8180X, SDA845, SDM429W, SDX24, SDX55, SM6150, SM7150, SM8150, SM8250, SXR2130","status":"published","published":"2020-09-08T09:31:43Z","modified":"2024-08-04T07:37:55Z","updated_at":"2026-11-03T03:08:09.450574Z"}],"ghsa":[{"id":"GHSA-m69w-8p53-w8cx","title":"u'Buffer overflow seen as the destination buffer size is lesser than the source buffer size in...","description":"u'Buffer overflow seen as the destination buffer size is lesser than the source buffer size in video application' in Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice \u0026 Music, Snapdragon Wearables in Bitra, MSM8909W, QCM2150, QCS405, QCS605, Saipan, SC8180X, SDA845, SDM429W, SDX24, SDX55, SM6150, SM7150, SM8150, SM8250, SXR2130","status":"published","published":"2022-05-24T17:27:32Z","modified":"2023-01-29T05:03:48Z","updated_at":"2026-11-02T14:45:24.208268Z"}],"nvd":[{"id":"CVE-2020-3646","description":"u'Buffer overflow seen as the destination buffer size is lesser than the source buffer size in video application' in Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice \u0026 Music, Snapdragon Wearables in Bitra, MSM8909W, QCM2150, QCS405, QCS605, Saipan, SC8180X, SDA845, SDM429W, SDX24, SDX55, SM6150, SM7150, SM8150, SM8250, SXR2130","status":"published","published":"2020-09-08T10:15:15.747Z","modified":"2026-06-17T03:18:46.887Z","cvss":[{"version":"3.1","score":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","level":"high","assessor":"primary"},{"version":"2.0","score":4.6,"vector":"AV:L/AC:L/Au:N/C:P/I:P/A:P","level":"medium","assessor":"primary"}],"cwes":["CWE-120"],"updated_at":"2026-11-02T14:06:14.981587Z"}]}}