CVE-2020-3680: Qualcomm APQ8009 Firmware

High severity, CVSS 7.0. EPSS: 0.2% chance of exploitation in the next 30 days.

A race condition can occur when using the fastrpc memory mapping API. in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Wearables in APQ8009, APQ8053, MSM8909W, MSM8917, MSM8953, QCS605, QM215, SA415M, SDM429, SDM429W, SDM439, SDM450, SDM632, SDM670, SDM710, SDM845, SDX24, SXR1130

Affected products

• Qualcomm APQ8009 Firmware: affected versions not specified
• Qualcomm APQ8053 Firmware: affected versions not specified
• Qualcomm MSM8909W Firmware: affected versions not specified
• Qualcomm MSM8917 Firmware: affected versions not specified
• Qualcomm MSM8953 Firmware: affected versions not specified
• Qualcomm QCS605 Firmware: affected versions not specified
• Qualcomm QM215 Firmware: affected versions not specified
• Qualcomm SA415M Firmware: affected versions not specified
• Qualcomm SDM429 Firmware: affected versions not specified
• Qualcomm SDM429W Firmware: affected versions not specified
• Qualcomm SDM439 Firmware: affected versions not specified
• Qualcomm SDM450 Firmware: affected versions not specified
• Qualcomm SDM632 Firmware: affected versions not specified
• Qualcomm SDM670 Firmware: affected versions not specified
• Qualcomm SDM710 Firmware: affected versions not specified
• Qualcomm SDM845 Firmware: affected versions not specified
• Qualcomm SDX24 Firmware: affected versions not specified
• Qualcomm SXR1130 Firmware: affected versions not specified

Published 2020-06-02. Last modified 2026-06-17.