CVE:CVE-2019-10597
CNNVD:CNNVD-202006-055
Qualcomm MSM8996AU等都是美国高通（Qualcomm）公司的一款中央处理器（CPU）产品。
多款Qualcomm产品中的Kernel存在输入验证错误漏洞，该漏洞源于程序没有正确检查用户输入。本地攻击者可利用该漏洞执行任意代码（任意内存写入）。以下产品及版本受到影响：Qualcomm IPQ6018；IPQ8074；MSM8996；MSM8996AU；Nicobar；QCS605；Rennell；Saipan；SC7180；SC8180X；SDM670；SDM710；SDM845；SDM850；SM6150；SM7150；SM8150；SM8250；SXR1130；SXR2130。
solution:Upgrade qualcomm ipq6018_firmware to a higher version than -; Upgrade qualcomm ipq8074_firmware to a higher version than -; Upgrade qualcomm msm8996_firmware to a higher version than -; Upgrade qualcomm msm8996au_firmware to a higher version than -; Upgrade qualcomm nicobar_firmware to a higher version than -; Upgrade qualcomm qcs605_firmware to a higher version than -; Upgrade qualcomm rennell_firmware to a higher version than -; Upgrade qualcomm saipan_firmware to a higher version than -; Upgrade qualcomm sc7180_firmware to a higher version than -; Upgrade qualcomm sc8180x_firmware to a higher version than -; Upgrade qualcomm sdm670_firmware to a higher version than -; Upgrade qualcomm sdm710_firmware to a higher version than -; Upgrade qualcomm sdm845_firmware to a higher version than -; Upgrade qualcomm sdm850_firmware to a higher version than -; Upgrade qualcomm sm6150_firmware to a higher version than -; Upgrade qualcomm sm7150_firmware to a higher version than -; Upgrade qualcomm sm8150_firmware to a higher version than -; Upgrade qualcomm sm8250_firmware to a higher version than -; Upgrade qualcomm sxr1130_firmware to a higher version than -; Upgrade qualcomm sxr2130_firmware to a higher version than -