CVE-2020-3658

Possible null-pointer dereference can occur while parsing mp4 clip with corrupted sample table atoms in Snapdragon Auto, Snapdragon Compute, Snapdragon…

published June 22, 2020

CVSS
—
EPSS
1%
Percentile
60.0
In the wild
Unconfirmed
What it is

⚠️ A simple hiccup in mp4 parsing could lead to a frustrating null-pointer dereference! This affects a wide range of Snapdragon chips — talk about a crowd! 📽️ Think of it like a delivery service trying to handle packages without knowing where some of them are supposed to go. If there's a corrupted address in the system, it can cause chaos, leading to undelivered items and a frantic call to customer service. If exploited, this vulnerability could crash applications parsing corrupted mp4 clips, leaving users stuck in a buffering limbo. While there's no reported exploitation yet, the possibility of a system freeze could definitely ruin a movie night!

Put simply

Think of it like a delivery service trying to handle packages without knowing where some of them are supposed to go. If there's a corrupted address in the system, it can cause chaos, leading to undelivered items and a frantic call to customer service. This vulnerability arises from a null-pointer dereference during the parsing of corrupted sample table atoms in mp4 clips across various Snapdragon platforms, which can cause unexpected crashes.

What to do

If exploited, this vulnerability could crash applications parsing corrupted mp4 clips, leaving users stuck in a buffering limbo. While there's no reported exploitation yet, the possibility of a system freeze could definitely ruin a movie night! To mitigate this issue, ensure your devices are updated with the latest firmware patches from your manufacturer. Keep an eye on vulnerability advisories for any specific updates designed to address this issue. You've got this! Staying updated will keep your devices running smoothly. 🛡️

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.00923 · 60.0th percentile
Published
2020-06-22T07:10Z
EPSS history
Timeline
  • 22 JUN 07:10Z
    Possible null-pointer dereference can occur while parsing mp4 clip with corrupted sample table atoms in Snapdragon Auto, Snapdragon Compute, Snapdragon…
    cvelistv5