CVE-2017-18160

Name of the Vulnerable Software and Affected Versions Qualcomm Snapdragon versions MDM9635M, MDM9645, MDM9650, MDM9655, MSM8909W, SD 835, SD 845, SD 850

Description The issue is related to the AGPS session failure in the GNSS module of Qualcomm Snapdragon mobile and wear devices. This failure occurs because the cyphersuites are hardcoded and require a manual update every time.

Recommendations For versions MDM9635M, MDM9645, MDM9650, MDM9655, MSM8909W, SD 835, SD 845, SD 850, update the cyphersuites manually to resolve the AGPS session failure issue. At the moment, there is no information about a newer version that contains a fix for this vulnerability.