Skip to content
OpenAdvisories

Weakness (CWE)

CWE-1294: Insecure Security Identifier Mechanism

Class Incomplete

The System-on-Chip (SoC) implements a Security Identifier mechanism to differentiate what actions are allowed or disallowed when a transaction originates from an entity. However, the Security Identifiers are not correctly implemented.

How to prevent it (2 mitigations)

  1. Architecture and Design

    Security Identifier Decoders must be reviewed for design inconsistency and common weaknesses.

  2. Implementation

    Access and programming flows must be tested in pre-silicon and post-silicon testing.

Source: MITRE CWE-1294

All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • High 7.5
    CVE-2026-24084

    Insecure Security Identifier Mechanism in Multi-Mode Call Processor

    Weak configuration when UE does not verify the consistency of its additional security capabilities with the replayed capabilities.

    Qualcomm Snapdragon