VDB
CNVD-2020-20203
CNVD-2020-20203
PUBLISHED
Qualcomm MDM9206等都是美国高通(Qualcomm)公司的产品。MDM9206是一款中央处理器(CPU)产品。SDX24是一款调制解调器。APQ8017是一款中央处理器(CPU)产品。 多款Qualcomm产品中的Multi-Mode Call Processor存在缓冲区溢出漏洞,该漏洞源于在解码Service Reject/RAU Reject/PTMSI Realloc cmd时,程序未能进行正确的长度检查,攻击者可借助特制的请求利用该漏洞获取敏感信息或造成拒绝服务。
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| cnvd | Qualcomm QCM2150 | |
| cnvd | Qualcomm MDM9150 | |
| Qualcomm MDM9635M | ||
| cnvd | Qualcomm SDM429 | |
| cnvd | Qualcomm QM215 | |
| cnvd | Qualcomm MSM8909 | |
| cnvd | Qualcomm MDM9635M | |
| cnvd | Qualcomm MSM8909W | |
| cnvd | Qualcomm SDM636 | |
| Qualcomm SDM636 | ||
| Qualcomm SDX20 | ||
| cnvd | Qualcomm MSM8905 | |
| cnvd | Qualcomm APQ8053 | |
| cnvd | Qualcomm SDM660 | |
| cnvd | Qualcomm APQ8017 | |
| cnvd | Qualcomm MSM8937 | |
| Qualcomm APQ8096AU | ||
| Qualcomm SDX55 | ||
| cnvd | Qualcomm SDM632 | |
| Qualcomm APQ8017 |
…and 90 more
Timeline
- Mar 4, 2020 CVE ID Reserved
- Mar 4, 2020 CVE Updated
- Mar 30, 2020 CVE Published