CVE-2020-3678: Qualcomm Agatti Firmware

High severity, CVSS 7.8. EPSS: 0.2% chance of exploitation in the next 30 days.

u'A buffer overflow could occur if the API is improperly used due to UIE init does not contain a buffer size a param' in Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Wired Infrastructure and Networking in Agatti, Kamorta, QCS404, QCS605, SDA845, SDM670, SDM710, SDM845, SXR1130

Affected products

  • Qualcomm Agatti Firmware: affected versions not specified
  • Qualcomm Kamorta Firmware: affected versions not specified
  • Qualcomm QCS404 Firmware: affected versions not specified
  • Qualcomm QCS605 Firmware: affected versions not specified
  • Qualcomm SDA845 Firmware: affected versions not specified
  • Qualcomm SDM670 Firmware: affected versions not specified
  • Qualcomm SDM710 Firmware: affected versions not specified
  • Qualcomm SDM845 Firmware: affected versions not specified
  • Qualcomm SXR1130 Firmware: affected versions not specified

Published 2020-11-02. Last modified 2026-06-17.