CVE-2020-3651

—

CVSS 3.1

7.5 high

EPSS

<1%p49

Published

Apr 16, 2020 (Apr 16, 2020)

Modified

Jun 17, 2026

Description

Active command timeout since WM status change cmd is not removed from active queue if peer sends multiple deauth frames. in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables in APQ8009, APQ8017, APQ8053, APQ8096AU, MDM9206, MDM9207C, MDM9607, MDM9640, MDM9650, MSM8905, MSM8909W, MSM8917, MSM8920, MSM8937, MSM8940, MSM8953, MSM8996AU, QCA6174A, QCA6574AU, QCA9377, QCA9379, QCM2150, QCN7605, QCS605, QM215, SC8180X, SDM429, SDM429W, SDM439, SDM450, SDM630, SDM632, SDM636, SDM660, SDM845, SDX20, SDX24, SDX55, SM8150, SXR1130

Vendors: qualcomm
Products: apq8009 firmware, apq8017 firmware, apq8053 firmware, apq8096au firmware, mdm9206 firmware, mdm9207c firmware, mdm9607 firmware, mdm9640 firmware, mdm9650 firmware, msm8905 firmware, msm8909w firmware, msm8917 firmware
Weakness: CWE-617
Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

NVD CVE.org GitHub PoCs EPSS (0.7%)

In the news0 stories

No ingested article mentions this CVE yet.