CVE:CVE-2017-18280
CNNVD:CNNVD-201809-975
Qualcomm MDM9607等都是美国高通（Qualcomm）公司的用于不同平台的中央处理器（CPU）产品。
多款Qualcomm Snapdragon产品中的Buses存在访问控制错误漏洞。当可信的应用程序向设备开放SPI/I2C接口时，本地攻击者可借助其他可信的应用程序利用该漏洞读取这个开放接口上的数据。以下产品（用于汽车，移动设备和手表）受到影响：Qualcomm MDM9607；MSM8909W；MSM8996AU；SD 210；SD 212；SD 205；SD 425；SD 427；SD 430；SD 435；SD 450；SD 617；SD 625；SD 650/52；SD 820；SD 820A；SD 835；SDM429；SDM439；SDM632；Snapdragon_High_Med_2016。
solution:Upgrade qualcomm mdm9607_firmware to a higher version than -; Upgrade qualcomm msm8909w_firmware to a higher version than -; Upgrade qualcomm msm8996au_firmware to a higher version than -; Upgrade qualcomm sd210_firmware to a higher version than -; Upgrade qualcomm sd212_firmware to a higher version than -; Upgrade qualcomm sd205_firmware to a higher version than -; Upgrade qualcomm sd425_firmware to a higher version than -; Upgrade qualcomm sd427_firmware to a higher version than -; Upgrade qualcomm sd430_firmware to a higher version than -; Upgrade qualcomm sd435_firmware to a higher version than -; Upgrade qualcomm sd450_firmware to a higher version than -; Upgrade qualcomm sd617_firmware to a higher version than -; Upgrade qualcomm sd625_firmware to a higher version than -; Upgrade qualcomm sd650_firmware to a higher version than -; Upgrade qualcomm sd652_firmware to a higher version than -; Upgrade qualcomm sd820_firmware to a higher version than -; Upgrade qualcomm sd820a_firmware to a higher version than -; Upgrade qualcomm sd835_firmware to a higher version than -; Upgrade qualcomm sdm429_firmware to a higher version than -; Upgrade qualcomm sdm439_firmware to a higher version than -; Upgrade qualcomm sdm632_firmware to a higher version than -