Disclosure summary
u'Specifically timed and handcrafted traffic can cause internal errors in a WLAN device that lead to improper layer 2 Wi-Fi encryption with a consequent possibility of information disclosure over the air for a discrete set of traffic' in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables, Snapdragon Wired Infrastructure and Networking in APQ8053, IPQ4019, IPQ8064, MSM8909W, MSM8996AU, QCA9531, QCN5502, QCS405, SDX20, SM6150, SM7150
Source-reported weakness categories
CWE-319
Source-specific records & product guidance
Sources retain their own attribution and scoring. Follow the original record to confirm affected versions, fixed releases, and configuration conditions.
NIST National Vulnerability Database · NVD-CVE-2020-3702
Open original source · Updated Oct 08, 2026
Only CPE matches marked vulnerable=true are indexed. AND/OR platform conditions must be checked in the original NVD record.
| Vendor | Product / association | Version / bounds |
|---|---|---|
| qualcomm | apq8053_firmware | - |
| qualcomm | ipq4019_firmware | - |
| qualcomm | ipq8064_firmware | - |
| qualcomm | msm8909w_firmware | - |
| qualcomm | msm8996au_firmware | - |
| qualcomm | qca9531_firmware | - |
| qualcomm | qcn5502_firmware | - |
| qualcomm | qcs405_firmware | - |
| qualcomm | sdx20_firmware | - |
| qualcomm | sm6150_firmware | - |
| qualcomm | sm7150_firmware | - |
| debian | debian_linux | 10.0 |
| arista | access_point | * {"versionEndIncluding":"8.8.3-12"} |
| debian | debian_linux | 9.0 |
Original records & references
- NIST NVD record
- CVE Program record
- lists.debian.org — Mailing List, Third Party Advisory
- lists.debian.org — Mailing List, Third Party Advisory
- www.arista.com — Third Party Advisory
- www.debian.org — Third Party Advisory
- www.qualcomm.com — Vendor Advisory
- lists.debian.org — Mailing List, Third Party Advisory
- lists.debian.org — Mailing List, Third Party Advisory
- www.arista.com — Third Party Advisory
- www.debian.org — Third Party Advisory
- www.qualcomm.com — Vendor Advisory
PUBLISHED 2020-09-08T06:15:16-04:00
MODIFIED 2026-10-08T17:17:30-04:00
INGESTED 2026-10-10T20:50:19-04:00