Cryptographic Issue when using a static initialization vector for AES-GCM key wrapping, which requires a unique value for each call to ensure security.
CVSS Vector
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:NQualcomm Fastconnect 6900
HWQualcommall versionsQualcomm Fastconnect 6900 Firmware
OSQualcommall versionsQualcomm Fastconnect 7800
HWQualcommall versionsQualcomm Fastconnect 7800 Firmware
OSQualcommall versionsQualcomm Lemansau
HWQualcommall versionsQualcomm Lemansau Firmware
OSQualcommall versionsQualcomm Lemans Au Lgit
HWQualcommall versionsQualcomm Lemans Au Lgit Firmware
OSQualcommall versionsQualcomm Pandeiro
HWQualcommall versionsQualcomm Pandeiro Firmware
OSQualcommall versionsQualcomm Qam8255p
HWQualcommall versionsQualcomm Qam8255p Firmware
OSQualcommall versionsQualcomm Qam8397p
HWQualcommall versionsQualcomm Qam8397p Firmware
OSQualcommall versionsQualcomm Qam8797p
HWQualcommall versionsQualcomm Qam8797p Firmware
OSQualcommall versionsQualcomm Qamsrv1h
HWQualcommall versionsQualcomm Qamsrv1h Firmware
OSQualcommall versionsQualcomm Qamsrv1m
HWQualcommall versionsQualcomm Qamsrv1m Firmware
OSQualcommall versionsQualcomm Qca6595au
HWQualcommall versionsQualcomm Qca6595au Firmware
OSQualcommall versionsQualcomm Qca6696
HWQualcommall versionsQualcomm Qca6696 Firmware
OSQualcommall versionsQualcomm Qca6698aq
HWQualcommall versionsQualcomm Qca6698aq Firmware
OSQualcommall versionsQualcomm Qca6797aq
HWQualcommall versionsQualcomm Qca6797aq Firmware
OSQualcommall versionsQualcomm Qca8695au
HWQualcommall versionsQualcomm Qca8695au Firmware
OSQualcommall versions
🔵
CHECK WITH VENDOR
No clear patch data available. Check vendor references.
CWE
Related vulnerabilities
CVE-2026-25289CRITICAL9.6PL ✓same product
Przepełnienie bufora stosu w NAN Service Discovery Frames — Qualcomm
CVE-2025-47372CRITICAL9.0PL ✓same product
Qualcomm: Memory Corruption przy ładowaniu uszkodzonego obrazu ELF
CVE-2025-27034CRITICAL9.8PL ✓same product
Qualcomm Firmware — memory corruption przy wyborze PLMN z listy SOR
CVE-2025-21483CRITICAL9.8PL ✓same product
Memory corruption w Qualcomm podczas składania pakietów RTP (NALUs)
CVE-2025-21450CRITICAL9.1PL ✓same product
Qualcomm: podatność kryptograficzna umożliwiająca Auth Bypass podczas pobierania