CVE-2026-21383
Cryptographic Issue when using a static initialization vector for AES-GCM key wrapping, which requires a unique value for each call to ensure security.
- CVSS 3.1
- 7.1
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N - EPSS
- 0.1% chance of exploitation in the next 30 days; higher than 0% of CVEs (scores of 2026-10-25)
- CWE
- CWE-323
- Published
- Modified
- Record from
- the NVD, synced
Affected
- qualcomm:fastconnect_6900_firmware
- qualcomm:fastconnect_7800_firmware
- qualcomm:lemans_au_lgit_firmware
- qualcomm:lemansau_firmware
- qualcomm:pandeiro_firmware
- qualcomm:qam8255p_firmware
- qualcomm:qam8397p_firmware
- qualcomm:qam8797p_firmware
- qualcomm:qamsrv1h_firmware
- qualcomm:qamsrv1m_firmware
- qualcomm:qca6595au_firmware
- qualcomm:qca6696_firmware
- qualcomm:qca6698aq_firmware
- qualcomm:qca6797aq_firmware
- qualcomm:qca8695au_firmware
- qualcomm:qdu1000_firmware
- qualcomm:qdu1110_firmware
- qualcomm:qdu1210_firmware
- qualcomm:qdx1010_firmware
- qualcomm:qdx1011_firmware
- qualcomm:qln1083bd_firmware
- qualcomm:qln1086bd_firmware
- qualcomm:qpa1083bd_firmware
- qualcomm:qpa1086bd_firmware
- qualcomm:qualcomm_dragonwing_x100_accelerator_card_firmware
- qualcomm:qxm1093_firmware
- qualcomm:qxm1094_firmware
- qualcomm:qxm1095_firmware
- qualcomm:qxm1096_firmware
- qualcomm:sa7255p_firmware
- qualcomm:sa7775p_firmware
- qualcomm:sa8255p_firmware
- qualcomm:sa8620p_firmware
- qualcomm:sa8770p_firmware
- qualcomm:sa9000p_firmware
- qualcomm:sar1165p_firmware
- qualcomm:sar2130p_firmware
- qualcomm:snapdragon_ar1\+_gen_1_platform_firmware
- qualcomm:snapdragon_ar1_gen_1_platform_firmware
- qualcomm:srv1h_firmware
- qualcomm:srv1m_firmware
- qualcomm:sxr2230p_firmware
- qualcomm:sxr2250p_firmware
- qualcomm:wcd9380_firmware
- qualcomm:wcd9385_firmware
- qualcomm:wcn3950_firmware
- qualcomm:wcn7860_firmware
- qualcomm:wcn7861_firmware
- qualcomm:wsa8830_firmware
- qualcomm:wsa8832_firmware