cnvd-2020-16060
Vulnerability from cnvd
Title
多款Qualcomm产品存在未明漏洞（CNVD-2020-16060）
Description
Qualcomm MDM9206等都是美国高通（Qualcomm）公司的产品。MDM9206是一款中央处理器（CPU）产品。MDM9607是一款中央处理器（CPU）产品。SDX55是一款调制解调器。 多款Qualcomm产品中的Kernel存在安全漏洞，该漏洞源于程序没有正确验证数组索引。目前没有详细的漏洞细节提供。
Severity
高
Patch Name
多款Qualcomm产品存在未明漏洞（CNVD-2020-16060）的补丁
Patch Description
Qualcomm MDM9206等都是美国高通（Qualcomm）公司的产品。MDM9206是一款中央处理器（CPU）产品。MDM9607是一款中央处理器（CPU）产品。SDX55是一款调制解调器。 多款Qualcomm产品中的Kernel存在安全漏洞，该漏洞源于程序没有正确验证数组索引。目前没有详细的漏洞细节提供。目前，供应商发布了安全公告及相关补丁信息，修复了此漏洞。
Formal description

目前厂商已发布升级补丁以修复漏洞，补丁获取链接： https://www.qualcomm.com/company/product-security/bulletins/october-2019-bulletin

Reference
https://www.qualcomm.com/company/product-security/bulletins/october-2019-bulletin
Impacted products
Name
['Qualcomm MDM 9150', 'Qualcomm MDM 9607', 'Qualcomm MDM 9650', 'Qualcomm MSM 8909', 'Qualcomm MSM 8996AU', 'Qualcomm SDA 660', 'Qualcomm MSM 8909W', 'Qualcomm MDM 9206', 'Qualcomm IPQ 8074', 'Qualcomm MDM 9640', 'Qualcomm Snapdragon_High_Med 2016', 'Qualcomm SXR 1130', 'Qualcomm QCA 8081', 'Qualcomm Qualcomm APQ 8096AU', 'Qualcomm Qualcomm APQ 8098', 'Qualcomm MSM 8998', 'Qualcomm Nicobar', 'Qualcomm SDA 845', 'Qualcomm SM 8150', 'Qualcomm SM 8250', 'Qualcomm SXR 2130', 'Qualcomm MDM 9635M', 'Qualcomm MDM 9655', 'Qualcomm MSM 8905', 'Qualcomm MSM 8917', 'Qualcomm MSM 8920', 'Qualcomm MSM 8937', 'Qualcomm MSM 8940', 'Qualcomm MSM 8953', 'Qualcomm MSM 8976', 'Marwel Qcm 2150', 'Qualcomm SDX 55', 'Qualcomm MSM 8996', 'Qualcomm Qualcomm APQ 8009', 'Qualcomm Qualcomm APQ 8017', 'Qualcomm Qualcomm APQ 8053', 'Qualcomm Qualcomm APQ 8096', 'Marwel Qcm 7605', 'Qualcomm QCN 404', 'Qualcomm QCN 405', 'Qualcomm QCN 605', 'Qualcomm QCS 215', 'Qualcomm QM 8180X', 'Qualcomm SC 660', 'Qualcomm SC 845', 'Qualcomm SDA 429', 'Qualcomm SDA 439', 'Qualcomm SDA 450', 'Qualcomm SDA 630', 'Qualcomm SDA 632', 'Qualcomm SDA 636', 'Qualcomm SDA 670', 'Qualcomm SDA 710', 'Qualcomm SDA 850', 'Qualcomm SDM 20']
Show details on source website

To clipboard 

{
  "cves": {
    "cve": {
      "cveNumber": "CVE-2018-13916",
      "cveUrl": "https://nvd.nist.gov/vuln/detail/CVE-2018-13916"
    }
  },
  "description": "Qualcomm MDM9206\u7b49\u90fd\u662f\u7f8e\u56fd\u9ad8\u901a\uff08Qualcomm\uff09\u516c\u53f8\u7684\u4ea7\u54c1\u3002MDM9206\u662f\u4e00\u6b3e\u4e2d\u592e\u5904\u7406\u5668\uff08CPU\uff09\u4ea7\u54c1\u3002MDM9607\u662f\u4e00\u6b3e\u4e2d\u592e\u5904\u7406\u5668\uff08CPU\uff09\u4ea7\u54c1\u3002SDX55\u662f\u4e00\u6b3e\u8c03\u5236\u89e3\u8c03\u5668\u3002\n\n\u591a\u6b3eQualcomm\u4ea7\u54c1\u4e2d\u7684Kernel\u5b58\u5728\u5b89\u5168\u6f0f\u6d1e\uff0c\u8be5\u6f0f\u6d1e\u6e90\u4e8e\u7a0b\u5e8f\u6ca1\u6709\u6b63\u786e\u9a8c\u8bc1\u6570\u7ec4\u7d22\u5f15\u3002\u76ee\u524d\u6ca1\u6709\u8be6\u7ec6\u7684\u6f0f\u6d1e\u7ec6\u8282\u63d0\u4f9b\u3002",
  "formalWay": "\u76ee\u524d\u5382\u5546\u5df2\u53d1\u5e03\u5347\u7ea7\u8865\u4e01\u4ee5\u4fee\u590d\u6f0f\u6d1e\uff0c\u8865\u4e01\u83b7\u53d6\u94fe\u63a5\uff1a\r\nhttps://www.qualcomm.com/company/product-security/bulletins/october-2019-bulletin",
  "isEvent": "\u901a\u7528\u8f6f\u786c\u4ef6\u6f0f\u6d1e",
  "number": "CNVD-2020-16060",
  "openTime": "2020-03-09",
  "patchDescription": "Qualcomm MDM9206\u7b49\u90fd\u662f\u7f8e\u56fd\u9ad8\u901a\uff08Qualcomm\uff09\u516c\u53f8\u7684\u4ea7\u54c1\u3002MDM9206\u662f\u4e00\u6b3e\u4e2d\u592e\u5904\u7406\u5668\uff08CPU\uff09\u4ea7\u54c1\u3002MDM9607\u662f\u4e00\u6b3e\u4e2d\u592e\u5904\u7406\u5668\uff08CPU\uff09\u4ea7\u54c1\u3002SDX55\u662f\u4e00\u6b3e\u8c03\u5236\u89e3\u8c03\u5668\u3002\r\n\r\n\u591a\u6b3eQualcomm\u4ea7\u54c1\u4e2d\u7684Kernel\u5b58\u5728\u5b89\u5168\u6f0f\u6d1e\uff0c\u8be5\u6f0f\u6d1e\u6e90\u4e8e\u7a0b\u5e8f\u6ca1\u6709\u6b63\u786e\u9a8c\u8bc1\u6570\u7ec4\u7d22\u5f15\u3002\u76ee\u524d\u6ca1\u6709\u8be6\u7ec6\u7684\u6f0f\u6d1e\u7ec6\u8282\u63d0\u4f9b\u3002\u76ee\u524d\uff0c\u4f9b\u5e94\u5546\u53d1\u5e03\u4e86\u5b89\u5168\u516c\u544a\u53ca\u76f8\u5173\u8865\u4e01\u4fe1\u606f\uff0c\u4fee\u590d\u4e86\u6b64\u6f0f\u6d1e\u3002",
  "patchName": "\u591a\u6b3eQualcomm\u4ea7\u54c1\u5b58\u5728\u672a\u660e\u6f0f\u6d1e\uff08CNVD-2020-16060\uff09\u7684\u8865\u4e01",
  "products": {
    "product": [
      "Qualcomm MDM 9150",
      "Qualcomm MDM 9607",
      "Qualcomm MDM 9650",
      "Qualcomm MSM 8909",
      "Qualcomm MSM 8996AU",
      "Qualcomm SDA 660",
      "Qualcomm MSM 8909W",
      "Qualcomm MDM 9206",
      "Qualcomm IPQ 8074",
      "Qualcomm MDM 9640",
      "Qualcomm Snapdragon_High_Med 2016",
      "Qualcomm SXR 1130",
      "Qualcomm QCA 8081",
      "Qualcomm Qualcomm APQ 8096AU",
      "Qualcomm Qualcomm APQ 8098",
      "Qualcomm MSM 8998",
      "Qualcomm Nicobar",
      "Qualcomm SDA 845",
      "Qualcomm SM 8150",
      "Qualcomm SM 8250",
      "Qualcomm SXR 2130",
      "Qualcomm MDM 9635M",
      "Qualcomm MDM 9655",
      "Qualcomm MSM 8905",
      "Qualcomm MSM 8917",
      "Qualcomm MSM 8920",
      "Qualcomm MSM 8937",
      "Qualcomm MSM 8940",
      "Qualcomm MSM 8953",
      "Qualcomm MSM 8976",
      "Marwel Qcm 2150",
      "Qualcomm SDX 55",
      "Qualcomm MSM 8996",
      "Qualcomm Qualcomm APQ 8009",
      "Qualcomm Qualcomm APQ 8017",
      "Qualcomm Qualcomm APQ 8053",
      "Qualcomm Qualcomm APQ 8096",
      "Marwel Qcm 7605",
      "Qualcomm QCN 404",
      "Qualcomm QCN 405",
      "Qualcomm QCN 605",
      "Qualcomm QCS 215",
      "Qualcomm QM 8180X",
      "Qualcomm SC 660",
      "Qualcomm SC 845",
      "Qualcomm SDA 429",
      "Qualcomm SDA 439",
      "Qualcomm SDA 450",
      "Qualcomm SDA 630",
      "Qualcomm SDA 632",
      "Qualcomm SDA 636",
      "Qualcomm SDA 670",
      "Qualcomm SDA 710",
      "Qualcomm SDA 850",
      "Qualcomm SDM 20"
    ]
  },
  "referenceLink": "https://www.qualcomm.com/company/product-security/bulletins/october-2019-bulletin",
  "serverity": "\u9ad8",
  "submitTime": "2019-11-25",
  "title": "\u591a\u6b3eQualcomm\u4ea7\u54c1\u5b58\u5728\u672a\u660e\u6f0f\u6d1e\uff08CNVD-2020-16060\uff09"
}


Log in or create an account to share your comment.




Tags
Taxonomy of the tags.




Sightings

Author Source Type Date

Nomenclature

  • Seen: The vulnerability was mentioned, discussed, or seen somewhere by the user.
  • Confirmed: The vulnerability is confirmed from an analyst perspective.
  • Published Proof of Concept: A public proof of concept is available for this vulnerability.
  • Exploited: This vulnerability was exploited and seen by the user reporting the sighting.
  • Patched: This vulnerability was successfully patched by the user reporting the sighting.
  • Not exploited: This vulnerability was not exploited or seen by the user reporting the sighting.
  • Not confirmed: The user expresses doubt about the veracity of the vulnerability.
  • Not patched: This vulnerability was not successfully patched by the user reporting the sighting.