CNVD-2020-41778

Vulnerability from cnvd - Published: 2020-07-23
VLAI Severity ?
Title
多款Qualcomm产品资源管理错误漏洞（CNVD-2020-41778）
Description
Qualcomm MSM8996AU等都是美国高通（Qualcomm）公司的一款中央处理器（CPU）产品。 多款Qualcomm产品中的HLOS Data存在资源管理错误漏洞，本地攻击者可通过发送特制请求利用该漏洞执行任意代码或导致拒绝服务。
Severity
高
Patch Name
多款Qualcomm产品资源管理错误漏洞（CNVD-2020-41778）的补丁
Patch Description
Qualcomm MSM8996AU等都是美国高通（Qualcomm）公司的一款中央处理器（CPU）产品。 多款Qualcomm产品中的HLOS Data存在资源管理错误漏洞，本地攻击者可通过发送特制请求利用该漏洞执行任意代码或导致拒绝服务。目前，供应商发布了安全公告及相关补丁信息，修复了此漏洞。
Formal description

厂商已发布了漏洞修复程序，请及时关注更新： https://www.qualcomm.com/company/product-security/bulletins/january-2020-bulletin

Reference
https://www.qualcomm.com/company/product-security/bulletins/january-2020-bulletin
Impacted products
Name
['Qualcomm MSM8909W', 'Qualcomm SDM429', 'Qualcomm SDM630', 'Qualcomm SDM632', 'Qualcomm SDM636', 'Qualcomm SDM660', 'Qualcomm MSM8996AU', 'Qualcomm SDA660', 'Qualcomm SXR1130', 'Qualcomm SDM439', 'Qualcomm QCS605', 'Qualcomm SM7150', 'Qualcomm QCA6574AU', 'Qualcomm Nicobar', 'Qualcomm APQ8009', 'Qualcomm SDM670', 'Qualcomm SM8150', 'Qualcomm SDM429W', 'Qualcomm APQ8053', 'Qualcomm APQ8096AU', 'Qualcomm MSM8917', 'Qualcomm MSM8920', 'Qualcomm MSM8937', 'Qualcomm MSM8940', 'Qualcomm MSM8953', 'Qualcomm SDM450', 'Qualcomm MSM8905', 'Qualcomm MSM8909', 'Qualcomm MSM8998', 'Qualcomm QM215', 'Qualcomm SDM710', 'Qualcomm SDM845', 'Qualcomm SM6150', 'Qualcomm MSM8939']
Show details on source website
To clipboard 

{
  "cves": {
    "cve": {
      "cveNumber": "CVE-2019-10548",
      "cveUrl": "https://nvd.nist.gov/vuln/detail/CVE-2019-10548"
    }
  },
  "description": "Qualcomm MSM8996AU\u7b49\u90fd\u662f\u7f8e\u56fd\u9ad8\u901a\uff08Qualcomm\uff09\u516c\u53f8\u7684\u4e00\u6b3e\u4e2d\u592e\u5904\u7406\u5668\uff08CPU\uff09\u4ea7\u54c1\u3002\n\n\u591a\u6b3eQualcomm\u4ea7\u54c1\u4e2d\u7684HLOS Data\u5b58\u5728\u8d44\u6e90\u7ba1\u7406\u9519\u8bef\u6f0f\u6d1e\uff0c\u672c\u5730\u653b\u51fb\u8005\u53ef\u901a\u8fc7\u53d1\u9001\u7279\u5236\u8bf7\u6c42\u5229\u7528\u8be5\u6f0f\u6d1e\u6267\u884c\u4efb\u610f\u4ee3\u7801\u6216\u5bfc\u81f4\u62d2\u7edd\u670d\u52a1\u3002",
  "formalWay": "\u5382\u5546\u5df2\u53d1\u5e03\u4e86\u6f0f\u6d1e\u4fee\u590d\u7a0b\u5e8f\uff0c\u8bf7\u53ca\u65f6\u5173\u6ce8\u66f4\u65b0\uff1a\r\nhttps://www.qualcomm.com/company/product-security/bulletins/january-2020-bulletin",
  "isEvent": "\u901a\u7528\u8f6f\u786c\u4ef6\u6f0f\u6d1e",
  "number": "CNVD-2020-41778",
  "openTime": "2020-07-23",
  "patchDescription": "Qualcomm MSM8996AU\u7b49\u90fd\u662f\u7f8e\u56fd\u9ad8\u901a\uff08Qualcomm\uff09\u516c\u53f8\u7684\u4e00\u6b3e\u4e2d\u592e\u5904\u7406\u5668\uff08CPU\uff09\u4ea7\u54c1\u3002\r\n\r\n\u591a\u6b3eQualcomm\u4ea7\u54c1\u4e2d\u7684HLOS Data\u5b58\u5728\u8d44\u6e90\u7ba1\u7406\u9519\u8bef\u6f0f\u6d1e\uff0c\u672c\u5730\u653b\u51fb\u8005\u53ef\u901a\u8fc7\u53d1\u9001\u7279\u5236\u8bf7\u6c42\u5229\u7528\u8be5\u6f0f\u6d1e\u6267\u884c\u4efb\u610f\u4ee3\u7801\u6216\u5bfc\u81f4\u62d2\u7edd\u670d\u52a1\u3002\u76ee\u524d\uff0c\u4f9b\u5e94\u5546\u53d1\u5e03\u4e86\u5b89\u5168\u516c\u544a\u53ca\u76f8\u5173\u8865\u4e01\u4fe1\u606f\uff0c\u4fee\u590d\u4e86\u6b64\u6f0f\u6d1e\u3002",
  "patchName": "\u591a\u6b3eQualcomm\u4ea7\u54c1\u8d44\u6e90\u7ba1\u7406\u9519\u8bef\u6f0f\u6d1e\uff08CNVD-2020-41778\uff09\u7684\u8865\u4e01",
  "products": {
    "product": [
      "Qualcomm MSM8909W",
      "Qualcomm SDM429",
      "Qualcomm SDM630",
      "Qualcomm SDM632",
      "Qualcomm SDM636",
      "Qualcomm SDM660",
      "Qualcomm MSM8996AU",
      "Qualcomm SDA660",
      "Qualcomm SXR1130",
      "Qualcomm SDM439",
      "Qualcomm QCS605",
      "Qualcomm SM7150",
      "Qualcomm QCA6574AU",
      "Qualcomm Nicobar",
      "Qualcomm APQ8009",
      "Qualcomm SDM670",
      "Qualcomm SM8150",
      "Qualcomm SDM429W",
      "Qualcomm APQ8053",
      "Qualcomm APQ8096AU",
      "Qualcomm MSM8917",
      "Qualcomm MSM8920",
      "Qualcomm MSM8937",
      "Qualcomm MSM8940",
      "Qualcomm MSM8953",
      "Qualcomm SDM450",
      "Qualcomm MSM8905",
      "Qualcomm MSM8909",
      "Qualcomm MSM8998",
      "Qualcomm QM215",
      "Qualcomm SDM710",
      "Qualcomm SDM845",
      "Qualcomm SM6150",
      "Qualcomm MSM8939"
    ]
  },
  "referenceLink": "https://www.qualcomm.com/company/product-security/bulletins/january-2020-bulletin",
  "serverity": "\u9ad8",
  "submitTime": "2020-01-09",
  "title": "\u591a\u6b3eQualcomm\u4ea7\u54c1\u8d44\u6e90\u7ba1\u7406\u9519\u8bef\u6f0f\u6d1e\uff08CNVD-2020-41778\uff09"
}


Log in or create an account to share your comment.




Tags
Taxonomy of the tags.




Sightings

Author Source Type Date

Nomenclature

  • Seen: The vulnerability was mentioned, discussed, or observed by the user.
  • Confirmed: The vulnerability has been validated from an analyst's perspective.
  • Published Proof of Concept: A public proof of concept is available for this vulnerability.
  • Exploited: The vulnerability was observed as exploited by the user who reported the sighting.
  • Patched: The vulnerability was observed as successfully patched by the user who reported the sighting.
  • Not exploited: The vulnerability was not observed as exploited by the user who reported the sighting.
  • Not confirmed: The user expressed doubt about the validity of the vulnerability.
  • Not patched: The vulnerability was not observed as successfully patched by the user who reported the sighting.



Detection rules are retrieved from Rulezet.