CVE-2017-18160

AGPS session failure in GNSS module due to cyphersuites are hardcoded and needed manual update everytime in snapdragon mobile and snapdragon wear in versions…

published January 18, 2019

CVSS
—
EPSS
1%
Percentile
69.6
In the wild
Unconfirmed
What it is

⚠️ A manual update dance is required with this AGPS session failure on Snapdragon devices! The cyphersuites are hardcoded, so if you’re in the affected version club, you’ll need to step up your update game! 🎶 Think of it like a hotel that only accepts certain types of credit cards and you have to check their list every single time you visit—so annoying! Just like that hotel, the hardcoded cyphersuites in the GNSS module require manual intervention to keep your GPS functionality up and running smoothly. Without the necessary updates, your AGPS session could fail during crucial moments, leaving users lost and unable to navigate—like trying to get directions with a compass that hasn’t been calibrated for years! This could lead to frustrating user experiences and potentially impact safety in critical situations.

Put simply

Think of it like a hotel that only accepts certain types of credit cards and you have to check their list every single time you visit—so annoying! Just like that hotel, the hardcoded cyphersuites in the GNSS module require manual intervention to keep your GPS functionality up and running smoothly. This vulnerability arises from hardcoded cyphersuites in the GNSS module on specific Snapdragon versions, necessitating a manual update each time to ensure secure AGPS sessions.

What to do

Without the necessary updates, your AGPS session could fail during crucial moments, leaving users lost and unable to navigate—like trying to get directions with a compass that hasn’t been calibrated for years! This could lead to frustrating user experiences and potentially impact safety in critical situations. Users should regularly check for updates and apply any patches from the device manufacturers for the affected Snapdragon models (MDM9635M, MDM9645, MDM9650, MDM9655, MSM8909W, SD 835, SD 845, SD 850). Staying on top of these updates will help maintain your GPS functionality and security. You've got this! By keeping those updates in check, you’ll ensure your devices are running securely and smoothly. 🛡️

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.01269 · 69.6th percentile
Published
2019-01-18T22:00Z
EPSS history
Timeline
  • 18 JAN 22:00Z
    AGPS session failure in GNSS module due to cyphersuites are hardcoded and needed manual update everytime in snapdragon mobile and snapdragon wear in versions…
    cvelistv5