CVE:CVE-2017-18302
CNNVD:CNNVD-201809-973
Qualcomm MSM8996AU等都是美国高通（Qualcomm）公司的用于不同平台的中央处理器（CPU）产品。
多款Qualcomm Snapdragon产品中的Ontario_Driver_loctl存在安全漏洞。攻击者可借助特制的HLOS客户端利用该漏洞更改内存中的框架，从而向TZ内核内存区域中写入任意内容。以下产品（汽车和移动设备）受到影响：Qualcomm MSM8996AU；SD 425；SD 427；SD 430；SD 435；SD 450；SD 625；SD 650/52；SD 820；SD 820A；SD 835；SDA660；SDM429；SDM439；SDM630；SDM632；SDM636；SDM660；Snapdragon_High_Med_2016。
solution:Upgrade qualcomm msm8996au_firmware to a higher version than -; Upgrade qualcomm sd425_firmware to a higher version than -; Upgrade qualcomm sd427_firmware to a higher version than -; Upgrade qualcomm sd430_firmware to a higher version than -; Upgrade qualcomm sd435_firmware to a higher version than -; Upgrade qualcomm sd450_firmware to a higher version than -; Upgrade qualcomm sd625_firmware to a higher version than -; Upgrade qualcomm sd650_firmware to a higher version than -; Upgrade qualcomm sd652_firmware to a higher version than -; Upgrade qualcomm sd820_firmware to a higher version than -; Upgrade qualcomm sd820a_firmware to a higher version than -; Upgrade qualcomm sd835_firmware to a higher version than -; Upgrade qualcomm sda660_firmware to a higher version than -; Upgrade qualcomm sdm429_firmware to a higher version than -; Upgrade qualcomm sdm439_firmware to a higher version than -; Upgrade qualcomm sdm630_firmware to a higher version than -; Upgrade qualcomm sdm632_firmware to a higher version than -; Upgrade qualcomm sdm636_firmware to a higher version than -; Upgrade qualcomm sdm660_firmware to a higher version than -