High severity · published Jun 2, 2020
CVE-2020-3618
NULL exception due to accessing bad pointer while posting events on RT FIFO in Snapdragon Compute, Snapdragon Mobile, Snapdragon Wired Infrastructure and Networking in IPQ6018,…
7.8
CVSS
0.2%
EPSS
No
On KEV
Description
NULL exception due to accessing bad pointer while posting events on RT FIFO in Snapdragon Compute, Snapdragon Mobile, Snapdragon Wired Infrastructure and Networking in IPQ6018, IPQ8074, QCA8081, SC8180X, SXR2130
CVSS vector
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Attack vector
Local
Complexity
Low
Privileges
Low
User interaction
None
Confidentiality
High
Integrity
High
Availability
High
Scope
Unchanged
Exploitation
Is it being used?
Exploit prediction (EPSS)0.2% · higher than 13% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
IF
Ipq6018 Firmware · Qualcomm
All versions, or not specified · source: NVD
IF
Ipq8074 Firmware · Qualcomm
All versions, or not specified · source: NVD
QF
Qca8081 Firmware · Qualcomm
All versions, or not specified · source: NVD
SF
Sc8180x Firmware · Qualcomm
All versions, or not specified · source: NVD
SF
Sxr2130 Firmware · Qualcomm
All versions, or not specified · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2020-3618
CVE.org
https://www.cve.org/CVERecord?id=CVE-2020-3618
Vendor Advisory
https://www.qualcomm.com/company/product-security/bulletins/may-2020-bulletin
More from Ipq6018 Firmware
7.8
CVE-2023-33063
Use After Free in DSP Services
9.8
CVE-2024-49839
Buffer Over-read in WLAN Host Cmn
9.8
CVE-2024-45569
Improper Validation of Array Index in WLAN Host Communication
9.8
CVE-2024-33066
Memory corruption while redirecting log file to any file location with any file name
9.8
CVE-2024-21473
Memory corruption while redirecting log file to any file location with any file name