CVE-2020-3675: Qualcomm IPQ5018 Firmware

Critical severity, CVSS 9.8. EPSS: 1.1% chance of exploitation in the next 30 days.

u'Potential integer underflow while parsing Service Info and IPv6 link-local TLVs that comes as part of NDPE attribute' in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer Electronics Connectivity, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wired Infrastructure and Networking in IPQ5018, IPQ6018, IPQ8074, Kamorta, Nicobar, QCA6390, QCN7605, QCS404, QCS405, Rennell, SA415M, Saipan, SC7180, SC8180X, SDX55, SM6150, SM7150, SM8150, SM8250

Affected products

• Qualcomm IPQ5018 Firmware: affected versions not specified
• Qualcomm IPQ6018 Firmware: affected versions not specified
• Qualcomm IPQ8074 Firmware: affected versions not specified
• Qualcomm Kamorta Firmware: affected versions not specified
• Qualcomm Nicobar Firmware: affected versions not specified
• Qualcomm QCA6390 Firmware: affected versions not specified
• Qualcomm QCN7605 Firmware: affected versions not specified
• Qualcomm QCS404 Firmware: affected versions not specified
• Qualcomm QCS405 Firmware: affected versions not specified
• Qualcomm Rennell Firmware: affected versions not specified
• Qualcomm SA415M Firmware: affected versions not specified
• Qualcomm Saipan Firmware: affected versions not specified
• Qualcomm SC7180 Firmware: affected versions not specified
• Qualcomm SC8180X Firmware: affected versions not specified
• Qualcomm SDX55 Firmware: affected versions not specified
• Qualcomm SM6150 Firmware: affected versions not specified
• Qualcomm SM7150 Firmware: affected versions not specified
• Qualcomm SM8150 Firmware: affected versions not specified
• Qualcomm SM8250 Firmware: affected versions not specified

Published 2020-09-08. Last modified 2026-06-17.