CVE:CVE-2018-5917
CNNVD:CNNVD-201811-841
Qualcomm MSM8996AU等都是美国高通（Qualcomm）公司的产品。Qualcomm MSM8996AU是一款中央处理器（CPU）。SDX24是一款调制解调器。
多款Qualcomm Snapdragon产品中的‘OEM crypto’函数存在缓冲区溢出漏洞，该漏洞源于输入验证不当。攻击者可利用该漏洞执行未授权的操作。以下产品（用于汽车和移动设备）受到影响：Qualcomm MSM8996AU；SD 425；SD 430；SD 450；SD 625；SD 820；SD 820A；SD 835；SD 845；SD 850；SDA660；SDA845；SDX24；SXR1130。
solution:Upgrade qualcomm msm8996au_firmware to a higher version than -; Upgrade qualcomm sd_425_firmware to a higher version than -; Upgrade qualcomm sd_430_firmware to a higher version than -; Upgrade qualcomm sd_450_firmware to a higher version than -; Upgrade qualcomm sd_625_firmware to a higher version than -; Upgrade qualcomm sd_820_firmware to a higher version than -; Upgrade qualcomm sd_820a_firmware to a higher version than -; Upgrade qualcomm sd_835_firmware to a higher version than -; Upgrade qualcomm sd_845_firmware to a higher version than -; Upgrade qualcomm sd_850_firmware to a higher version than -; Upgrade qualcomm sda660_firmware to a higher version than -; Upgrade qualcomm sda845_firmware to a higher version than -; Upgrade qualcomm sdx24_firmware to a higher version than -; Upgrade qualcomm sxr1130_firmware to a higher version than -