Skip to content
OpenAdvisories
High · 7.1 CVE-2026-21383 EUVD-2026-41930GHSA-3p8m-mr3f-jqg6

Reusing a Nonce, Key Pair in Encryption in HLOS

Published Jul 6, 2026 · Updated Jul 8, 2026 · Assigned by qualcomm

Description

Cryptographic Issue when using a static initialization vector for AES-GCM key wrapping, which requires a unique value for each call to ensure security.

Affected products

VendorProductAffectedFixed
Qualcomm Snapdragon FastConnect 6900, FastConnect 7800, LeMans_AU_LGIT, LeMansAU, Pandeiro, QAM8255P, QAM8397P, QAM8797P, QAMSRV1H, QAMSRV1M, QCA6595AU, QCA6696, QCA6698AQ, QCA6797AQ, QCA8695AU, QDU1000, QDU1110, QDU1210, QDX1010, QDX1011, QLN1083BD, QLN1086BD, QPA1083BD, QPA1086BD, Qualcomm Dragonwing X100 Accelerato… —

Advisories 1

References