CVE-2020-3652: Qualcomm MSM8998 Firmware

Critical severity, CVSS 9.1. EPSS: 0.9% chance of exploitation in the next 30 days.

Possible buffer over-read issue in windows x86 wlan driver function while processing beacon or request frame due to lack of check of length of variable received. in Snapdragon Compute, Snapdragon Connectivity in MSM8998, QCA6390, SC7180, SC8180X, SDM850

Affected products

• Qualcomm MSM8998 Firmware: affected versions not specified
• Qualcomm QCA6390 Firmware: affected versions not specified
• Qualcomm SC7180 Firmware: affected versions not specified
• Qualcomm SC8180X Firmware: affected versions not specified
• Qualcomm SDM850 Firmware: affected versions not specified

Published 2020-04-16. Last modified 2026-06-17.