漏洞标题
N/A
漏洞描述信息
多个读取溢出问题,由于不当长度检查,在解码 CSdomain 中的 Identity Request/ CSdomain 中的Authentication Reject/ PRAU 接受时/在记录 Snapdragon Auto、 Snapdragon Compute、 Snapdragon Connectivity、 Snapdragon Consumer IOT、 Snapdragon Industrial IOT、 Snapdragon IoT、 Snapdragon Mobile、 Snapdragon Voice & Music、 Snapdragon Wearables 和 Snapdragon Wired Infrastructure 和 Networking 的 DL 消息时
CVSS信息
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H
漏洞类别
N/A
漏洞标题
N/A
漏洞描述信息
Multiple Read overflows issue due to improper length check while decoding Identity Request in CSdomain/Authentication Reject in CS domain/ PRAU accept/while logging DL message in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon IoT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables, Snapdragon Wired Infrastructure and Networking in APQ8009, APQ8017, APQ8053, APQ8096, APQ8096AU, APQ8098, MDM9150, MDM9205, MDM9206, MDM9607, MDM9615, MDM9625, MDM9635M, MDM9640, MDM9645, MDM9650, MDM9655, MSM8905, MSM8909, MSM8909W, MSM8917, MSM8920, MSM8937, MSM8939, MSM8940, MSM8953, MSM8996AU, MSM8998, Nicobar, QCM2150, QCS605, QM215, Rennell, SC8180X, SDA660, SDA845, SDM429, SDM429W, SDM439, SDM450, SDM630, SDM632, SDM636, SDM660, SDM670, SDM710, SDM845, SDM850, SDX20, SDX24, SDX55, SM6150, SM7150, SM8150, SXR1130
CVSS信息
N/A
漏洞类别
N/A
漏洞标题
多款Qualcomm产品缓冲区错误漏洞
漏洞描述信息
Qualcomm MDM9206等都是美国高通(Qualcomm)公司的产品。MDM9206是一款中央处理器(CPU)产品。SDX24是一款调制解调器。MSM8917是一款中央处理器(CPU)产品。 多款Qualcomm产品中的Multi-Mode Call Processor存在缓冲区错误漏洞。远程攻击者可借助特制请求利用该漏洞获取敏感信息,进而对受影响系统发起进一步攻击。以下产品及版本受到影响:Qualcomm APQ8009;APQ8017;APQ8053;APQ8096;APQ8096AU;APQ
CVSS信息
N/A
漏洞类别
缓冲区错误