-
首页
-
>
安全漏洞
-
>
Qualcomm 组件缓冲区错误漏洞
Qualcomm 组件缓冲区错误漏洞
CNNVD-ID编号 |
CNNVD-202105-028 |
CVE编号 |
CVE-2020-11288 |
发布时间 |
2021-05-03 |
更新时间 |
2021-05-06 |
漏洞类型 |
缓冲区错误 |
漏洞来源 |
N/A |
危险等级 |
中危 |
威胁类型 |
N/A |
厂商 |
N/A |
漏洞介绍
Qualcomm 组件是美国高通(Qualcomm)公司的一个组件。提供高通设备功能的内在部件。
高通组件存在缓冲区错误漏洞,该漏洞源于缺少输入验证,在处理命令时可能会在playready中发生越界写入。以下产品及版本受到影响:AQT1000, AR8031, AR8035, CSRA6620, CSRA6640, CSRB31024, FSM10055, FSM10056, MDM9205, PM3003A, PM4125, PM4250, PM456, PM6125, PM6150, PM6150A, PM6150L, PM6250, PM6350, PM640A, PM640L, PM640P, PM660, PM660L, PM670, PM670A, PM670L, PM7150A, PM7150L, PM7250, PM7250B, PM8004, PM8005, PM8008, PM8009, PM8150, PM8150A, PM8150B, PM8150C, PM8150L, PM8250, PM8350, PM8350B, PM8350BH, PM8350C, PM855, PM855B, PM855L, PM855P, PM8998, PMC1000H, PMD9655, PME605, PMI632, PMI8998, PMK8002, PMK8003, PMK8350, PMM6155AU, PMM8155AU, PMM8195AU, PMM855AU, PMR525, PMR735A, PMR735B, PMX24, PMX50, PMX55, QAT3516, QAT3518, QAT3519, QAT3522, QAT3550, QAT3555, QAT5515, QAT5516, QAT5522, QAT5533, QAT5568, QBT1500, QBT2000, QCA4004, QCA6174A, QCA6175A, QCA6310, QCA6335, QCA6390, QCA6391, QCA6420, QCA6421, QCA6426, QCA6430, QCA6431, QCA6436, QCA6564, QCA6564A, QCA6564AU, QCA6574, QCA6574A, QCA6574AU, QCA658
漏洞补丁
目前厂商已发布升级了Qualcomm 组件缓冲区错误漏洞的补丁,Qualcomm 组件缓冲区错误漏洞的补丁获取链接:
https://www.qualcomm.com/company/product-security/bulletins/may-2021-bulletin
参考网址
受影响实体
信息来源