CVE-2020-3702u'Specifically timed and handcrafted traffic can cause internal errors in a WLAN device that lead to improper layer 2 Wi-Fi encryption with a consequent possibility of information disclosure over the…
Updated under an hour ago ()
Does this affect you?
It affects Qualcomm, Inc. Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables, Snapdragon Wired Infrastructure and Networking and 13 other products. Add what you run to find out whether that includes you.
No exploitation reported and no EPSS estimate yet.
Do this next
Free account, 1 product
u'Specifically timed and handcrafted traffic can cause internal errors in a WLAN device that lead to improper layer 2 Wi-Fi encryption with a consequent possibility of information disclosure over the air for a discrete set of traffic' in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables, Snapdragon Wired Infrastructure and Networking in APQ8053, IPQ4019, IPQ8064, MSM8909W, MSM8996AU, QCA9531, QCN5502, QCS405, SDX20, SM6150, SM7150
- CVSS
- 6.5 MEDIUM (v3.1, NVD)CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
- Weakness (CWE)
- Not given
- Known exploited
- Not in CISA's KEV catalog
- EPSS (exploitation in the next 30 days)
- Not loaded for this CVE
- Assigned by
- qualcomm
- NVD analysis
- Modified
- Record last updated
- Oct 8, 2026
- First seen by InfoSec Signals
- Oct 9, 2026
Affected products
Qualcomm, Inc. Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables, Snapdragon Wired Infrastructure and Networking qualcomm:snapdragon_auto_snapdragon_compute_snapdragon_connectivity_snapdragon_consumer_iot_snapdragon_industrial_iot_snapdragon_mobile_snapdragon_voice_and_music_snapdragon_wearables_snapdragon_wired_infrastructure_and_networking (from the name) | APQ8053, IPQ4019, IPQ8064, MSM8909W, MSM8996AU, QCA9531, QCN5502, QCS405, SDX20, SM6150, SM7150 | CNA record |
qualcomm apq8053_firmware qualcomm:apq8053_firmware | all versions | NVD |
qualcomm ipq4019_firmware qualcomm:ipq4019_firmware | all versions | NVD |
qualcomm ipq8064_firmware qualcomm:ipq8064_firmware | all versions | NVD |
qualcomm msm8909w_firmware qualcomm:msm8909w_firmware | all versions | NVD |
qualcomm msm8996au_firmware qualcomm:msm8996au_firmware | all versions | NVD |
qualcomm qca9531_firmware qualcomm:qca9531_firmware | all versions | NVD |
qualcomm qcn5502_firmware qualcomm:qcn5502_firmware | all versions | NVD |
qualcomm qcs405_firmware qualcomm:qcs405_firmware | all versions | NVD |
qualcomm sdx20_firmware qualcomm:sdx20_firmware | all versions | NVD |
qualcomm sm6150_firmware qualcomm:sm6150_firmware | all versions | NVD |
qualcomm sm7150_firmware qualcomm:sm7150_firmware | all versions | NVD |
debian debian_linux debian:debian_linux | 10.0; 9.0; 10.0 | NVD |
arista access_point arista:access_point | through 8.8.3-12 | NVD |
References
- https://www.qualcomm.com/company/product-security/bulletins/august-2020-bulletinx-refsource-confirm
- https://www.arista.com/en/support/advisories-notices/security-advisories/11998-security-advisory-58x-refsource-confirm
- https://www.debian.org/security/2021/dsa-4978vendor-advisory, x-refsource-debian
- https://lists.debian.org/debian-lts-announce/2021/10/msg00010.htmlmailing-list, x-refsource-mlist
- https://lists.debian.org/debian-lts-announce/2021/12/msg00012.htmlmailing-list, x-refsource-mlist
The CVE record on cve.org NVD's entry
The CVE record is authoritative. Products marked “from the name” were identified from the CNA's free-text names, not a CPE, and are matched less certainly. This product uses the NVD API but is not endorsed or certified by the NVD.