CVE:CVE-2019-2238
CNNVD:CNNVD-201907-083
Qualcomm MDM9206等都是美国高通（Qualcomm）公司的一款中央处理器（CPU）产品。
多款Qualcomm产品中的Content Protection存在缓冲区错误漏洞。该漏洞源于网络系统或产品在内存上执行操作时，未正确验证数据边界，导致向关联的其他内存位置上执行了错误的读写操作。攻击者可利用该漏洞导致缓冲区溢出或堆溢出等。以下产品及版本受到影响：Qualcomm MDM9206；MDM9607；MDM9650；MDM9655；QCS605；SD 210；SD 212；SD 205；SD 410/12；SD 675；SD 712；SD 710；SD 670；SD 730；SD 8CX；SXR1130。
solution:Upgrade qualcomm mdm9206_firmware to a higher version than -; Upgrade qualcomm mdm9607_firmware to a higher version than -; Upgrade qualcomm mdm9650_firmware to a higher version than -; Upgrade qualcomm mdm9655_firmware to a higher version than -; Upgrade qualcomm qcs605_firmware to a higher version than -; Upgrade qualcomm sd_210_firmware to a higher version than -; Upgrade qualcomm sd_212_firmware to a higher version than -; Upgrade qualcomm sd_205_firmware to a higher version than -; Upgrade qualcomm sd_410_firmware to a higher version than -; Upgrade qualcomm sd_412_firmware to a higher version than -; Upgrade qualcomm sd_675_firmware to a higher version than -; Upgrade qualcomm sd_712_firmware to a higher version than -; Upgrade qualcomm sd_710_firmware to a higher version than -; Upgrade qualcomm sd_670_firmware to a higher version than -; Upgrade qualcomm sd_730_firmware to a higher version than -; Upgrade qualcomm sd_8cx_firmware to a higher version than -; Upgrade qualcomm sxr1130_firmware to a higher version than -