{
    "id": "CVE-2020-3657",
    "published": "2020-11-02 07:15:14",
    "last_modified": "2026-06-17 03:18:47",
    "cvss_score": "9.8",
    "cvss_severity": "CRITICAL",
    "cvss_version": "3.1",
    "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
    "cwe": "CWE-120",
    "description": "u'Remote code execution can happen by sending a carefully crafted POST query when Device configuration is accessed from a tethered client through webserver due to lack of array bound check.' in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables, Snapdragon Wired Infrastructure and Networking in APQ8009, APQ8017, APQ8053, APQ8096AU, APQ8098, IPQ4019, IPQ6018, IPQ8064, IPQ8074, MDM9150, MDM9206, MDM9207C, MDM9607, MDM9640, MDM9650, MSM8905, MSM8909W, MSM8953, MSM8996AU, QCA6574AU, QCS405, QCS610, QRB5165, SC8180X, SDA660, SDA845, SDM429, SDM429W, SDM630, SDM632, SDM636, SDM660, SDM845, SDX20, SDX24, SDX55, SM8250",
    "epss_score": "0.28338",
    "epss_percentile": "0.98074",
    "kev": 0,
    "kev_due": null,
    "has_exploit": 0,
    "updated_at": "2026-10-03 18:17:27",
    "priority": {
        "rank": 2,
        "label": "Patch early",
        "why": "EPSS 28.3% — above the 10% action threshold."
    },
    "products": [
        {
            "vendor": "qualcomm",
            "product": "apq8009"
        },
        {
            "vendor": "qualcomm",
            "product": "apq8009_firmware"
        },
        {
            "vendor": "qualcomm",
            "product": "apq8017"
        },
        {
            "vendor": "qualcomm",
            "product": "apq8017_firmware"
        },
        {
            "vendor": "qualcomm",
            "product": "apq8053"
        },
        {
            "vendor": "qualcomm",
            "product": "apq8053_firmware"
        },
        {
            "vendor": "qualcomm",
            "product": "apq8096au"
        },
        {
            "vendor": "qualcomm",
            "product": "apq8096au_firmware"
        },
        {
            "vendor": "qualcomm",
            "product": "apq8098"
        },
        {
            "vendor": "qualcomm",
            "product": "apq8098_firmware"
        },
        {
            "vendor": "qualcomm",
            "product": "ipq4019"
        },
        {
            "vendor": "qualcomm",
            "product": "ipq4019_firmware"
        },
        {
            "vendor": "qualcomm",
            "product": "ipq6018"
        },
        {
            "vendor": "qualcomm",
            "product": "ipq6018_firmware"
        },
        {
            "vendor": "qualcomm",
            "product": "ipq8064"
        },
        {
            "vendor": "qualcomm",
            "product": "ipq8064_firmware"
        },
        {
            "vendor": "qualcomm",
            "product": "ipq8074"
        },
        {
            "vendor": "qualcomm",
            "product": "ipq8074_firmware"
        },
        {
            "vendor": "qualcomm",
            "product": "mdm9150"
        },
        {
            "vendor": "qualcomm",
            "product": "mdm9150_firmware"
        },
        {
            "vendor": "qualcomm",
            "product": "mdm9206"
        },
        {
            "vendor": "qualcomm",
            "product": "mdm9206_firmware"
        },
        {
            "vendor": "qualcomm",
            "product": "mdm9207c"
        },
        {
            "vendor": "qualcomm",
            "product": "mdm9207c_firmware"
        },
        {
            "vendor": "qualcomm",
            "product": "mdm9607"
        },
        {
            "vendor": "qualcomm",
            "product": "mdm9607_firmware"
        },
        {
            "vendor": "qualcomm",
            "product": "mdm9640"
        },
        {
            "vendor": "qualcomm",
            "product": "mdm9640_firmware"
        },
        {
            "vendor": "qualcomm",
            "product": "mdm9650"
        },
        {
            "vendor": "qualcomm",
            "product": "mdm9650_firmware"
        },
        {
            "vendor": "qualcomm",
            "product": "msm8905"
        },
        {
            "vendor": "qualcomm",
            "product": "msm8905_firmware"
        },
        {
            "vendor": "qualcomm",
            "product": "msm8909w"
        },
        {
            "vendor": "qualcomm",
            "product": "msm8909w_firmware"
        },
        {
            "vendor": "qualcomm",
            "product": "msm8953"
        },
        {
            "vendor": "qualcomm",
            "product": "msm8953_firmware"
        },
        {
            "vendor": "qualcomm",
            "product": "msm8996au"
        },
        {
            "vendor": "qualcomm",
            "product": "msm8996au_firmware"
        },
        {
            "vendor": "qualcomm",
            "product": "qca6574au"
        },
        {
            "vendor": "qualcomm",
            "product": "qca6574au_firmware"
        }
    ],
    "kev_detail": null,
    "exploits": [],
    "refs_list": [
        "https://www.qualcomm.com/company/product-security/bulletins/october-2020-bulletin",
        "https://www.qualcomm.com/company/product-security/bulletins/october-2020-security-bulletin",
        "https://www.qualcomm.com/company/product-security/bulletins/october-2020-bulletin"
    ]
}