CVEvulnerability
CVE-2017-18160
9.8 CRITICAL
Official page ↗
- Status
- Modified
- Published
- 2019-01-18
- Last modified
- 2026-06-17
- Assigner
- [email protected]
- CVSS 3.0 ([email protected])
- 9.8 CRITICAL — CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
- CVSS 2.0 ([email protected])
- 10.0 HIGH — AV:N/AC:L/Au:N/C:C/I:C/A:C
- Weaknesses
- CWE-310
Description
AGPS session failure in GNSS module due to cyphersuites are hardcoded and needed manual update everytime in snapdragon mobile and snapdragon wear in versions MDM9635M, MDM9645, MDM9650, MDM9655, MSM8909W, SD 835, SD 845, SD 850
Affected configurations
• qualcomm mdm9635m firmware
• qualcomm mdm9645 firmware
• qualcomm mdm9650 firmware
• qualcomm mdm9655 firmware
• qualcomm msm8909w firmware
• qualcomm sd 835 firmware
• qualcomm sd 845 firmware
• qualcomm sd 850 firmware
Related
Weakness · not in database (1)
References
- http://www.securityfocus.com/bid/106128 Third Party Advisory, VDB Entry
- https://www.qualcomm.com/company/product-security/bulletins Vendor Advisory
- http://www.securityfocus.com/bid/106128 Third Party Advisory, VDB Entry
- https://www.qualcomm.com/company/product-security/bulletins Vendor Advisory