CVE-2020-3625: Qualcomm SM8250 Firmware

High severity, CVSS 7.8. EPSS: 0.2% chance of exploitation in the next 30 days.

When making query to DSP capabilities, Stack out of bounds occurs due to wrong buffer length configured for DSP attributes in Snapdragon Auto, Snapdragon Consumer IOT, Snapdragon Mobile in SM8250, SXR2130

Affected products

• Qualcomm SM8250 Firmware: affected versions not specified
• Qualcomm SXR2130 Firmware: affected versions not specified

Published 2020-06-02. Last modified 2026-06-17.