CVE-2020-3701
HIGHCVSS 7.8/10EPSS 0.22%
Last modified
CVE-2020-3701 is a high-severity vulnerability rated 7.8/10 on the CVSS scale. Use after free issue while processing error notification from camx driver due to not properly releasing the sequence data in Snapdragon Mobile in Saipan, SM8250, SXR2130. EPSS estimates a 0.22% chance of exploitation in the next 30 days.
Description
Use after free issue while processing error notification from camx driver due to not properly releasing the sequence data in Snapdragon Mobile in Saipan, SM8250, SXR2130
Metrics
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Weakness Enumeration
Affected Software
| Vendor | Product | Versions |
|---|---|---|
| Qualcomm | Saipan Firmware | All versions |
| Qualcomm | Sm8250 Firmware | All versions |
| Qualcomm | Sxr2130 Firmware | All versions |
References
Timeline
- Published
- Last Modified
- Status
- Modified
Frequently Asked Questions
What is CVE-2020-3701?
Use after free issue while processing error notification from camx driver due to not properly releasing the sequence data in Snapdragon Mobile in Saipan, SM8250, SXR2130
How severe is CVE-2020-3701?
CVE-2020-3701 has a CVSS score of 7.8/10 (HIGH severity). The EPSS model estimates a 0.22% probability of exploitation in the next 30 days.
How do I fix CVE-2020-3701?
Check the vendor references and advisories linked above for patched versions and mitigation guidance. You can also run a Strix scan to test if your systems are affected.
How Strix Helps
- How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
- Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
- PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
- AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.
Related CVEs from 2020
- CVE-2020-37004The Ultimate Project Manager CRM PRO version 2.0.5 contains …8.2
- CVE-2020-37005TimeClock Software 1.01 contains an authenticated time-based…7.1
- CVE-2020-37006berliCRM 1.0.24 contains a SQL injection vulnerability in th…8.2
- CVE-2020-37007Liman 0.7 contains a cross-site request forgery vulnerabilit…4.3
- CVE-2020-37008EasyPMS 1.0.0 contains an authentication bypass vulnerabilit…8.7
- CVE-2020-37009MedDream PACS Server 6.8.3.751 contains an authenticated rem…8.8
- CVE-2020-37010BearShare Lite 5.2.5 contains a buffer overflow vulnerabilit…9.8
- CVE-2020-37011Gnome Fonts Viewer 3.34.0 contains a heap corruption vulnera…8.4
- CVE-2020-37012Tea LaTex 1.0 contains a remote code execution vulnerability…9.8
- CVE-2020-37013Audio Playback Recorder 3.2.2 contains a local buffer overfl…8.4
- CVE-2020-37014Tryton 5.4 contains a persistent cross-site scripting vulner…6.4
- CVE-2020-37015The Ruijie Networks Switch eWeb S29_RGOS version 11.4 contai…7.5
Are you affected by CVE-2020-3701?
Run a free Strix scan to check your systems for this vulnerability.
Scan your code nowSource: NVD / NIST