CVE:CVE-2019-2301
CNNVD:CNNVD-201907-1329
Qualcomm MSM8996AU等都是美国高通（Qualcomm）公司的产品。MSM8996AU是一款中央处理器（CPU）产品。SD 712是一款中央处理器（CPU）产品。SDX24是一款调制解调器。
多款Qualcomm产品中的Kernel存在缓冲区错误漏洞。该漏洞源于网络系统或产品在内存上执行操作时，未正确验证数据边界，导致向关联的其他内存位置上执行了错误的读写操作。攻击者可利用该漏洞导致缓冲区溢出或堆溢出等。以下产品及版本受到影响：Qualcomm IPQ4019；IPQ8064；MSM8909W；MSM8996AU；QCA9980；QCS605；Qualcomm 215；SD 425；SD 439；SD 429；SD 450；SD 625；SD 632；SD 636；SD 712；SD 710；SD 670；SD 820A；SD 845；SD 850；SD 855；SDM439；SDM660；SDX24。
solution:Upgrade qualcomm ipq4019_firmware to a higher version than -; Upgrade qualcomm ipq8064_firmware to a higher version than -; Upgrade qualcomm msm8909w_firmware to a higher version than -; Upgrade qualcomm msm8996au_firmware to a higher version than -; Upgrade qualcomm qca9980_firmware to a higher version than -; Upgrade qualcomm qcs605_firmware to a higher version than -; Upgrade qualcomm qualcomm_215_firmware to a higher version than -; Upgrade qualcomm sd_425_firmware to a higher version than -; Upgrade qualcomm sd_439_firmware to a higher version than -; Upgrade qualcomm sd_429_firmware to a higher version than -; Upgrade qualcomm sd_450_firmware to a higher version than -; Upgrade qualcomm sd_625_firmware to a higher version than -; Upgrade qualcomm sd_632_firmware to a higher version than -; Upgrade qualcomm sd_636_firmware to a higher version than -; Upgrade qualcomm sd_712_firmware to a higher version than -; Upgrade qualcomm sd_710_firmware to a higher version than -; Upgrade qualcomm sd_670_firmware to a higher version than -; Upgrade qualcomm sd_820a_firmware to a higher version than -; Upgrade qualcomm sd_845_firmware to a higher version than -; Upgrade qualcomm sd_850_firmware to a higher version than -; Upgrade qualcomm sd_855_firmware to a higher version than -; Upgrade qualcomm sdm439_firmware to a higher version than -; Upgrade qualcomm sdm660_firmware to a higher version than -; Upgrade qualcomm sdx24_firmware to a higher version than -