{"id":"CVE-2020-3648","aliases":["EUVD-2020-24919","GHSA-vxw3-96f4-67xp"],"status":"published","title":"u'Possible out of bound write in DSP driver code due to lack of check of data received from user'...","description":"u'Possible out of bound write in DSP driver code due to lack of check of data received from user' in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice \u0026 Music, Snapdragon Wearables in MSM8909W","severity":{"version":"3.1","score":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","level":"high","assessor":"primary","from":"nvd"},"epss":{"day":"2026-11-10","score":0.0019,"percentile":0.08766,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":false},"cwes":["CWE-20","CWE-787"],"published":"2020-09-08T09:31:44Z","modified":"2026-06-17T03:18:47Z","products":[{"vendor":"qualcomm","product":"msm8909w_firmware"},{"vendor":"qualcomm, inc.","product":"snapdragon auto, snapdragon compute, snapdragon consumer iot, snapdragon industrial iot, snapdragon mobile, snapdragon voice \u0026 music, snapdragon wearables"}],"references":[{"url":"https://www.qualcomm.com/company/product-security/bulletins/august-2020-bulletin","tags":["x_refsource_CONFIRM","x_transferred","Broken Link"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2020-3648"},{"url":"https://www.qualcomm.com/company/product-security/bulletins/august-2020-security-bulletin","tags":["Vendor Advisory"]},{"url":"https://github.com/advisories/GHSA-vxw3-96f4-67xp"}],"sources":{"cve":[{"id":"CVE-2020-3648","description":"u'Possible out of bound write in DSP driver code due to lack of check of data received from user' in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice \u0026 Music, Snapdragon Wearables in MSM8909W","status":"published","published":"2020-09-08T09:31:44Z","modified":"2024-08-04T07:37:55.727Z","updated_at":"2026-11-02T14:35:51.563355Z"}],"euvd":[{"id":"EUVD-2020-24919","description":"u'Possible out of bound write in DSP driver code due to lack of check of data received from user' in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice \u0026 Music, Snapdragon Wearables in MSM8909W","status":"published","published":"2020-09-08T09:31:44Z","modified":"2024-08-04T07:37:55Z","updated_at":"2026-11-03T03:08:09.450574Z"}],"ghsa":[{"id":"GHSA-vxw3-96f4-67xp","title":"u'Possible out of bound write in DSP driver code due to lack of check of data received from user'...","description":"u'Possible out of bound write in DSP driver code due to lack of check of data received from user' in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice \u0026 Music, Snapdragon Wearables in MSM8909W","status":"published","published":"2022-05-24T17:27:33Z","modified":"2023-01-29T05:03:48Z","cwes":["CWE-20"],"updated_at":"2026-11-02T14:45:24.208268Z"}],"nvd":[{"id":"CVE-2020-3648","description":"u'Possible out of bound write in DSP driver code due to lack of check of data received from user' in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice \u0026 Music, Snapdragon Wearables in MSM8909W","status":"published","published":"2020-09-08T10:15:15.907Z","modified":"2026-06-17T03:18:47.12Z","cvss":[{"version":"3.1","score":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","level":"high","assessor":"primary"},{"version":"2.0","score":4.6,"vector":"AV:L/AC:L/Au:N/C:P/I:P/A:P","level":"medium","assessor":"primary"}],"cwes":["CWE-20","CWE-787"],"updated_at":"2026-11-02T14:06:14.981587Z"}]}}