{"id":"CVE-2020-3665","url":"https://www.cyber-defence.io/tools/cve/CVE-2020-3665","generatedAt":"2026-10-27T23:27:42.835Z","title":"A possible buffer overflow would occur while processing command from firmware due to the group_id obtained from the firmware being out of range in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer Electronics…","description":"A possible buffer overflow would occur while processing command from firmware due to the group_id obtained from the firmware being out of range in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon IoT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables in APQ8009, APQ8053, APQ8096AU, MDM9206, MDM9207C, MDM9607, MDM9615, MDM9640, MDM9650, MSM8909W, MSM8996, MSM8996AU, QCA6174A, QCA9377, QCA9379, SDM439, SDM636, SDM660, SDX20, SDX24, SM8150","published":"2020-06-22T07:15:12.000Z","lastModified":"2026-06-17T03:18:49.000Z","status":"Modified","sourceIdentifier":"product-security@qualcomm.com","cvss":{"version":"3.1","score":7.8,"severity":"HIGH","vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H"},"cwe":["CWE-129"],"affected":["qualcomm/apq8009 firmware","qualcomm/apq8053 firmware","qualcomm/apq8096au firmware","qualcomm/mdm9206 firmware","qualcomm/mdm9207c firmware","qualcomm/mdm9607 firmware","qualcomm/mdm9615 firmware","qualcomm/mdm9640 firmware","qualcomm/mdm9650 firmware","qualcomm/msm8909w firmware","qualcomm/msm8996 firmware","qualcomm/msm8996au firmware","qualcomm/qca6174a firmware","qualcomm/qca9377 firmware","qualcomm/qca9379 firmware","qualcomm/sdm439 firmware","qualcomm/sdm636 firmware","qualcomm/sdm660 firmware","qualcomm/sdx20 firmware","qualcomm/sdx24 firmware","qualcomm/sm8150 firmware"],"epss":{"score":0.0022,"percentile":0.12465,"date":"2026-10-26","history":[]},"kev":{"listed":false},"exploits":{"count":0,"verified":false,"firstPublished":null,"source":"Exploit-DB (https://gitlab.com/exploit-database/exploitdb)","entries":[]},"verdict":{"level":"high","text":"High impact if exploited, but EPSS currently rates exploitation as unlikely (0.22%). Schedule it in the normal patch cycle and watch for a rise in EPSS or a public exploit."},"changes":[],"references":[{"url":"https://www.qualcomm.com/company/product-security/bulletins/june-2020-bulletin","tags":["Broken Link"],"source":"product-security@qualcomm.com"},{"url":"https://www.qualcomm.com/company/product-security/bulletins/june-2020-security-bulletin","tags":["Vendor Advisory"],"source":"nvd@nist.gov"},{"url":"https://www.qualcomm.com/company/product-security/bulletins/june-2020-bulletin","tags":["Broken Link"],"source":"af854a3a-2127-422b-91ae-364da2661108"}],"sources":{"nvd":"https://nvd.nist.gov/vuln/detail/CVE-2020-3665","epss":"https://www.first.org/epss/","kev":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog","exploitdb":"https://www.exploit-db.com/"},"licence":"CC BY 4.0 — link back to the CVE Explorer if you publish the results; upstream data remains subject to its own terms."}