CVE-2020-3702

MediumCVSS 6.5

Published: 08/09/2020(UTC)Updated: 08/10/2026(UTC)Translated: 09/10/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

Low risk

0.31%

22th percentile - higher than 22% of all known CVEs

Summary

Specifically timed and handcrafted traffic can cause internal errors in a WLAN device, leading to improper layer 2 Wi-Fi encryption and potential information disclosure over the air for a discrete set of traffic. Affected Snapdragon processors include APQ8053, IPQ4019, IPQ8064, MSM8909W, MSM8996AU, QCA9531, QCN5502, QCS405, SDX20, SM6150, SM7150.

Risk Assessment

A nearby attacker may intercept a subset of Wi-Fi traffic, potentially exposing sensitive data transmitted over the wireless network.

Recommendation

Install firmware updates provided by the manufacturer for affected Snapdragon devices. Monitor vendor advisories and apply security patches.

Other vulnerabilities in Snapdragon

CVE-2021-1905HighActively exploited
Possible use after free due to improper handling of memory mapping of multiple processes simultaneously in Snapdragon Auto, Compute, Connectivity, Consumer IOT, Industrial IOT, Mobile, Voice & Music, and Wearables.

Original NVD description (English source)

u'Specifically timed and handcrafted traffic can cause internal errors in a WLAN device that lead to improper layer 2 Wi-Fi encryption with a consequent possibility of information disclosure over the air for a discrete set of traffic' in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables, Snapdragon Wired Infrastructure and Networking in APQ8053, IPQ4019, IPQ8064, MSM8909W, MSM8996AU, QCA9531, QCN5502, QCS405, SDX20, SM6150, SM7150

Vulnerability data from NVD (NIST) · CISA KEV · EPSS