漏洞信息详情
多款Qualcomm产品缓冲区错误漏洞
漏洞简介
Qualcomm MSM8996AU等都是美国高通(Qualcomm)公司的产品。MSM8996AU是一款中央处理器(CPU)产品。QCA6574AU是一款中央处理器(CPU)产品。SD 636是一款中央处理器(CPU)产品。
Qualcomm 存在安全漏洞,该漏洞源于QVR服务配置中缺少数据长度检查,可能导致缓冲区过度读取。以下产品及版本受到影响:APQ8017, APQ8053, APQ8064AU, APQ8096AU, AQT1000, MSM8917, MSM8953, MSM8996AU, QCA6310, QCA6320, QCA6335, QCA6390, QCA6391, QCA6420, QCA6426, QCA6430, QCA6436, QCA6564A, QCA6564AU, QCA6574A, QCA6574AU, QCM2290, QCM4290, QCM6125, QCM6490, QCS2290, QCS4290, QCS603, QCS605, QCS610, QCS6125, QCS6490, Qualcomm215, SD 455, SD 636, SD 675, SD205, SD210, SD429, SD439, SD460, SD480, SD632, SD662, SD665, SD675, SD678, SD690 5G, SD720G, SD730, SD750G, SD765, SD765G, SD768G, SD778G, SD780G, SD855, SD865 5G, SD870, SD888, SD888 5G, SDM630, SDX50M, SDX55, SDX55M, SDXR1, SDXR2 5G, SM4125, SM6250, SM6250P, SM7250, SM7325, WCD9370, WCD9371, WCD9375, WCD9380, WCD9385, WCN3610, WCN3615, WCN3660B, WCN3680, WCN3680B, WCN3910, WCN3950, WCN3988, WCN3991, WCN3998, WCN6740, WCN6750, WCN6850, WCN6851, WCN6855, WCN6856, WSA8830, WSA8835。
漏洞公告
目前厂商已发布升级补丁以修复漏洞,补丁获取链接:
https://www.qualcomm.com/company/product-security/bulletins/october-2021-bulletin。
参考网址
来源:device.harmonyos.com
链接:https://device.harmonyos.com/cn/docs/security/update/security-bulletins-wearables-202111-0000001172568432
来源:www.qualcomm.com
链接:https://www.qualcomm.com/company/product-security/bulletins/october-2021-bulletin
来源:nvd.nist.gov
链接:https://nvd.nist.gov/vuln/detail/CVE-2021-1985
来源:vigilance.fr
链接:https://vigilance.fr/vulnerability/Google-Android-Pixel-multiple-vulnerabilities-of-October-2021-36587
来源:source.android.com
链接:https://source.android.com/security/bulletin/2021-10-01
受影响实体
暂无
补丁
- 多款Qualcomm产品缓冲区错误漏洞的修复措施<!--2021-10-4-->
还没有评论,来说两句吧...