CVE:CVE-2020-11834
CNNVD:CNNVD-202012-1975
Oppo SM8250是中国Oppo公司的一个对骁龙855芯片的驱动程序。
OPPO 存在缓冲区错误漏洞，该漏洞源于/SM8250_Q_Master/android/vendor/oppo_charger/oppo/oppo_vooc.c在proc fastchg fw update write中不检查len参数，导致漏洞。
solution:Upgrade oppo reno3_pro_firmware to a higher version than -; Upgrade oppo find_x2_pro_firmware to a higher version than -