CVE:CVE-2017-18160
CNNVD:CNNVD-201812-419
Qualcomm MDM9206等都是美国高通（Qualcomm）公司应用于不同平台的中央处理器（CPU）产品。GPS是其中的一个全球定位系统组件。
多款Qualcomm产品中的GPS存在加密问题漏洞，该漏洞源于程序使用了硬编码cyphersuites并且每次需要进行手动更新。攻击者可利用该漏洞执行未授权的操作。以下产品（用于移动和可穿戴设备）受到影响：Qualcomm MDM9206；MDM9607；MDM9640；MDM9650；MSM8909W；SD 210；SD 212；SD 205；SD 425；SD 430；SD 450；SD 615/16；SD 415；SD 617；SD 625；SD 650/52；SD 810；SD 820；SD 820A；SD 835；SD 845。
solution:Upgrade qualcomm mdm9635m_firmware to a higher version than -; Upgrade qualcomm mdm9645_firmware to a higher version than -; Upgrade qualcomm mdm9650_firmware to a higher version than -; Upgrade qualcomm mdm9655_firmware to a higher version than -; Upgrade qualcomm msm8909w_firmware to a higher version than -; Upgrade qualcomm sd_835_firmware to a higher version than -; Upgrade qualcomm sd_845_firmware to a higher version than -; Upgrade qualcomm sd_850_firmware to a higher version than -