CVE:CVE-2020-11265
CNNVD:CNNVD-202101-072
Qualcomm WIN TZ FW是美国高通（Qualcomm）公司的一个用于处理器上的支撑固件。
Qualcomm WIN TZ FW 存在缓冲区错误漏洞，该漏洞源于没有验证传递给TZ BSP的指针参数而导致的信息泄露问题。以下产品及版本受到影响：AR7420, AR9580, CSR8811, IPQ4018, IPQ4019, IPQ4028, IPQ4029, QCA10901, QCA4024, QCA7500, QCA7520, QCA7550, QCA8075, QCA9880, QCA9886, QCA9888, QCA9889, QCA9898, QCA9984, QCA9992, QCA9994, QCN3018, QFE1922, QFE1952, WCD9340, WSA8810。
solution:Upgrade qualcomm ar7420_firmware to a higher version than -; Upgrade qualcomm ar9580_firmware to a higher version than -; Upgrade qualcomm csr8811_firmware to a higher version than -; Upgrade qualcomm ipq4018_firmware to a higher version than -; Upgrade qualcomm ipq4019_firmware to a higher version than -; Upgrade qualcomm ipq4028_firmware to a higher version than -; Upgrade qualcomm ipq4029_firmware to a higher version than -; Upgrade qualcomm qca10901_firmware to a higher version than -; Upgrade qualcomm qca4024_firmware to a higher version than -; Upgrade qualcomm qca7500_firmware to a higher version than -; Upgrade qualcomm qca7520_firmware to a higher version than -; Upgrade qualcomm qca7550_firmware to a higher version than -; Upgrade qualcomm qca8075_firmware to a higher version than -; Upgrade qualcomm qca9880_firmware to a higher version than -; Upgrade qualcomm qca9886_firmware to a higher version than -; Upgrade qualcomm qca9888_firmware to a higher version than -; Upgrade qualcomm qca9889_firmware to a higher version than -; Upgrade qualcomm qca9898_firmware to a higher version than -; Upgrade qualcomm qca9984_firmware to a higher version than -; Upgrade qualcomm qca9992_firmware to a higher version than -; Upgrade qualcomm qca9994_firmware to a higher version than -; Upgrade qualcomm qcn3018_firmware to a higher version than -; Upgrade qualcomm qfe1922_firmware to a higher version than -; Upgrade qualcomm qfe1952_firmware to a higher version than -; Upgrade qualcomm wcd9340_firmware to a higher version than -; Upgrade qualcomm wsa8810_firmware to a higher version than -