CVE:CVE-2019-10606
CNNVD:CNNVD-202001-183
Qualcomm MDM9607等都是美国高通（Qualcomm）公司的产品。MDM9607是一款中央处理器（CPU）产品。SDX24是一款调制解调器。QCS605是一款中央处理器（CPU）产品。
多款Qualcomm产品中的USB驱动程序存在缓冲区错误漏洞。本地攻击者可通过发送特制请求利用该漏洞执行任意代码。以下产品及版本受到影响：Qualcomm MDM9607；MSM8909W；MSM8917；MSM8920；MSM8937；MSM8940；QCS605；SDX24。
solution:Upgrade qualcomm mdm9607_firmware to a higher version than -; Upgrade qualcomm msm8909w_firmware to a higher version than -; Upgrade qualcomm msm8917_firmware to a higher version than -; Upgrade qualcomm msm8920_firmware to a higher version than -; Upgrade qualcomm msm8937_firmware to a higher version than -; Upgrade qualcomm msm8940_firmware to a higher version than -; Upgrade qualcomm qcs605_firmware to a higher version than -; Upgrade qualcomm sdx24_firmware to a higher version than -