VDB
CNVD-2020-20202
CNVD-2020-20202
PUBLISHED
Qualcomm MDM9607等都是美国高通（Qualcomm）公司的产品。MDM9607是一款中央处理器（CPU）产品。SDX24是一款调制解调器。SDM630是一款中央处理器（CPU）产品。 多款Qualcomm产品中的Audio中存在缓冲区溢出漏洞，该漏洞源于网络系统或产品在内存上执行操作时，未正确验证数据边界，导致向关联的其他内存位置上执行了错误的读写操作，攻击者可利用该漏洞导致缓冲区溢出或堆溢出等。
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Qualcomm SXR1130 | ||
| Qualcomm APQ8053 | ||
| Qualcomm SC8180X | ||
| Qualcomm MDM9640 | ||
| Qualcomm SDM636 | ||
| Qualcomm SM6150 | ||
| Qualcomm SM8250 | ||
| Qualcomm SDX24 | ||
| Qualcomm MDM9607 | ||
| Qualcomm SM7150 | ||
| Qualcomm SDM630 | ||
| Qualcomm QCS605 | ||
| Qualcomm SDX55 | ||
| Qualcomm APQ8098 | ||
| Qualcomm SDM660 | ||
| Qualcomm MSM8998 | ||
| Qualcomm SDM439 | ||
| Qualcomm SDM845 |
Timeline
- Mar 4, 2020 CVE ID Reserved
- Mar 30, 2020 CVE Published