CVE:CVE-2020-11256
CNNVD:CNNVD-202101-098
Qualcomm WIN TZ FW是美国高通（Qualcomm）公司的一个用于处理器上的支撑固件。
Qualcomm WIN TZ FW 存在安全漏洞，该漏洞源于缺乏对传递给trustzone的缓冲区指针的验证进行检查而导致内存损坏。以下产品及版本受到影响：AR7420, AR9580, CSR8811, IPQ4018, IPQ4019, IPQ4028, IPQ4029, QCA10901, QCA4024, QCA7500, QCA7520, QCA7550, QCA8075, QCA9880, QCA9886, QCA9888, QCA9889, QCA9898, QCA9984, QCA9992, QCA9994, QCN3018, QFE1922, QFE1952, WCD9340, WSA8810。
solution:Upgrade qualcomm ar7420_firmware to a higher version than -; Upgrade qualcomm ar9580_firmware to a higher version than -; Upgrade qualcomm csr8811_firmware to a higher version than -; Upgrade qualcomm ipq4018_firmware to a higher version than -; Upgrade qualcomm ipq4019_firmware to a higher version than -; Upgrade qualcomm ipq4028_firmware to a higher version than -; Upgrade qualcomm ipq4029_firmware to a higher version than -; Upgrade qualcomm qca10901_firmware to a higher version than -; Upgrade qualcomm qca4024_firmware to a higher version than -; Upgrade qualcomm qca7500_firmware to a higher version than -; Upgrade qualcomm qca7520_firmware to a higher version than -; Upgrade qualcomm qca7550_firmware to a higher version than -; Upgrade qualcomm qca8075_firmware to a higher version than -; Upgrade qualcomm qca9880_firmware to a higher version than -; Upgrade qualcomm qca9886_firmware to a higher version than -; Upgrade qualcomm qca9888_firmware to a higher version than -; Upgrade qualcomm qca9889_firmware to a higher version than -; Upgrade qualcomm qca9898_firmware to a higher version than -; Upgrade qualcomm qca9984_firmware to a higher version than -; Upgrade qualcomm qca9992_firmware to a higher version than -; Upgrade qualcomm qca9994_firmware to a higher version than -; Upgrade qualcomm qcn3018_firmware to a higher version than -; Upgrade qualcomm qfe1922_firmware to a higher version than -; Upgrade qualcomm qfe1952_firmware to a higher version than -; Upgrade qualcomm wcd9340_firmware to a higher version than -; Upgrade qualcomm wsa8810_firmware to a higher version than -