CVEs-PoC/2020/CVE-2020-3617.md

### [CVE-2020-3617](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-3617)
![](https://img.shields.io/static/v1?label=Product&message=Snapdragon%20Compute%2C%20Snapdragon%20Consumer%20IOT%2C%20Snapdragon%20Industrial%20IOT%2C%20Snapdragon%20Mobile&color=blue)
![](https://img.shields.io/static/v1?label=Version&message=n%2Fa&color=blue)
![](https://img.shields.io/static/v1?label=Vulnerability&message=Buffer%20Over-read%20Issue%20in%20Q6%20testbus%20framework&color=brighgreen)

### Description

u'Buffer over-read Issue in Q6 testbus framework due to diag packet length is not completely validated before accessing the field and leads to Information disclosure.' in Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile in Kamorta, Nicobar, QCS605, QCS610, Rennell, SC7180, SDA660, SDM630, SDM636, SDM660, SDM670, SDM710, SM6150, SM7150, SM8150, SXR1130

### POC

#### Reference
- https://www.qualcomm.com/company/product-security/bulletins/september-2020-bulletin

#### Github
- https://github.com/404notf0und/CVE-Flow