Cryptographic Issue when using a static initialization vector for AES-GCM key wrapping, which requires a unique value for each call to ensure security.

No CVSS v4.0

Attack Vector Local

Attack Complexity Low

Privileges Required Low

Scope Unchanged

Confidentiality Impact High

Integrity Impact High

Availability Impact None

User Interaction None

No CVSS v3.0

No CVSS v2

This CVE is not in the KEV list.

The EPSS score is 0.00069.

Exploitation none

Automatable no

Technical Impact total

Default status is the baseline for the product, each version can override it (e.g. patched versions marked unaffected).

Vendor Product Default status Versions
Qualcomm, Inc. Snapdragon unaffected
Version Status Constraints
FastConnect 6900 affected —
FastConnect 7800 affected —
LeMans_AU_LGIT affected —
LeMansAU affected —
Pandeiro affected —
QAM8255P affected —
QAM8397P affected —
QAM8797P affected —
QAMSRV1H affected —
QAMSRV1M affected —
QCA6595AU affected —
QCA6696 affected —
QCA6698AQ affected —
QCA6797AQ affected —
QCA8695AU affected —
QDU1000 affected —
QDU1110 affected —
QDU1210 affected —
QDX1010 affected —
QDX1011 affected —
QLN1083BD affected —
QLN1086BD affected —
QPA1083BD affected —
QPA1086BD affected —
Qualcomm Dragonwing X100 Accelerator Card affected —
QXM1093 affected —
QXM1094 affected —
QXM1095 affected —
QXM1096 affected —
SA7255P affected —
SA7775P affected —
SA8255P affected —
SA8620P affected —
SA8770P affected —
SA9000P affected —
SAR1165P affected —
SAR2130P affected —
Snapdragon AR1 Gen 1 Platform affected —
Snapdragon AR1+ Gen 1 Platform affected —
SRV1H affected —
SRV1M affected —
SXR2230P affected —
SXR2250P affected —
WCD9380 affected —
WCD9385 affected —
WCN3950 affected —
WCN7860 affected —
WCN7861 affected —
WSA8830 affected —
WSA8832 affected —
WSA8835 affected —
XRV7209 affected —
XRV9209 affected —

Configuration 1 [-]

AND
cpe:2.3:o:qualcomm:fastconnect_6900_firmware:-:*:*:*:*:*:*:*
cpe:2.3:h:qualcomm:fastconnect_6900:-:*:*:*:*:*:*:*

Configuration 2 [-]

AND
cpe:2.3:o:qualcomm:fastconnect_7800_firmware:-:*:*:*:*:*:*:*
cpe:2.3:h:qualcomm:fastconnect_7800:-:*:*:*:*:*:*:*

Configuration 3 [-]

AND
cpe:2.3:o:qualcomm:lemans_au_lgit_firmware:-:*:*:*:*:*:*:*
cpe:2.3:h:qualcomm:lemans_au_lgit:-:*:*:*:*:*:*:*

Configuration 4 [-]

AND
cpe:2.3:o:qualcomm:lemansau_firmware:-:*:*:*:*:*:*:*
cpe:2.3:h:qualcomm:lemansau:-:*:*:*:*:*:*:*

Configuration 5 [-]

AND
cpe:2.3:o:qualcomm:pandeiro_firmware:-:*:*:*:*:*:*:*
cpe:2.3:h:qualcomm:pandeiro:-:*:*:*:*:*:*:*

Configuration 6 [-]

AND
cpe:2.3:o:qualcomm:qam8255p_firmware:-:*:*:*:*:*:*:*
cpe:2.3:h:qualcomm:qam8255p:-:*:*:*:*:*:*:*

Configuration 7 [-]

AND
cpe:2.3:o:qualcomm:qam8397p_firmware:-:*:*:*:*:*:*:*
cpe:2.3:h:qualcomm:qam8397p:-:*:*:*:*:*:*:*

Configuration 8 [-]

AND
cpe:2.3:o:qualcomm:qam8797p_firmware:-:*:*:*:*:*:*:*
cpe:2.3:h:qualcomm:qam8797p:-:*:*:*:*:*:*:*

Configuration 9 [-]

AND
cpe:2.3:o:qualcomm:qamsrv1h_firmware:-:*:*:*:*:*:*:*
cpe:2.3:h:qualcomm:qamsrv1h:-:*:*:*:*:*:*:*

Configuration 10 [-]

AND
cpe:2.3:o:qualcomm:qamsrv1m_firmware:-:*:*:*:*:*:*:*
cpe:2.3:h:qualcomm:qamsrv1m:-:*:*:*:*:*:*:*

Configuration 11 [-]

AND
cpe:2.3:o:qualcomm:qca6595au_firmware:-:*:*:*:*:*:*:*
cpe:2.3:h:qualcomm:qca6595au:-:*:*:*:*:*:*:*

Configuration 12 [-]

AND
cpe:2.3:o:qualcomm:qca6696_firmware:-:*:*:*:*:*:*:*
cpe:2.3:h:qualcomm:qca6696:-:*:*:*:*:*:*:*

Configuration 13 [-]

AND
cpe:2.3:o:qualcomm:qca6698aq_firmware:-:*:*:*:*:*:*:*
cpe:2.3:h:qualcomm:qca6698aq:-:*:*:*:*:*:*:*

Configuration 14 [-]

AND
cpe:2.3:o:qualcomm:qca6797aq_firmware:-:*:*:*:*:*:*:*
cpe:2.3:h:qualcomm:qca6797aq:-:*:*:*:*:*:*:*

Configuration 15 [-]

AND
cpe:2.3:o:qualcomm:qca8695au_firmware:-:*:*:*:*:*:*:*
cpe:2.3:h:qualcomm:qca8695au:-:*:*:*:*:*:*:*

Configuration 16 [-]

AND
cpe:2.3:o:qualcomm:qdu1000_firmware:-:*:*:*:*:*:*:*
cpe:2.3:h:qualcomm:qdu1000:-:*:*:*:*:*:*:*

Configuration 17 [-]

AND
cpe:2.3:o:qualcomm:qdu1110_firmware:-:*:*:*:*:*:*:*
cpe:2.3:h:qualcomm:qdu1110:-:*:*:*:*:*:*:*

Configuration 18 [-]

AND
cpe:2.3:o:qualcomm:qdu1210_firmware:-:*:*:*:*:*:*:*
cpe:2.3:h:qualcomm:qdu1210:-:*:*:*:*:*:*:*

Configuration 19 [-]

AND
cpe:2.3:o:qualcomm:qdx1010_firmware:-:*:*:*:*:*:*:*
cpe:2.3:h:qualcomm:qdx1010:-:*:*:*:*:*:*:*

Configuration 20 [-]

AND
cpe:2.3:o:qualcomm:qdx1011_firmware:-:*:*:*:*:*:*:*
cpe:2.3:h:qualcomm:qdx1011:-:*:*:*:*:*:*:*

Configuration 21 [-]

AND
cpe:2.3:o:qualcomm:qln1083bd_firmware:-:*:*:*:*:*:*:*
cpe:2.3:h:qualcomm:qln1083bd:-:*:*:*:*:*:*:*

Configuration 22 [-]

AND
cpe:2.3:o:qualcomm:qln1086bd_firmware:-:*:*:*:*:*:*:*
cpe:2.3:h:qualcomm:qln1086bd:-:*:*:*:*:*:*:*

Configuration 23 [-]

AND
cpe:2.3:o:qualcomm:qpa1083bd_firmware:-:*:*:*:*:*:*:*
cpe:2.3:h:qualcomm:qpa1083bd:-:*:*:*:*:*:*:*

Configuration 24 [-]

AND
cpe:2.3:o:qualcomm:qpa1086bd_firmware:-:*:*:*:*:*:*:*
cpe:2.3:h:qualcomm:qpa1086bd:-:*:*:*:*:*:*:*

Configuration 25 [-]

AND
cpe:2.3:o:qualcomm:qualcomm_dragonwing_x100_accelerator_card_firmware:-:*:*:*:*:*:*:*
cpe:2.3:h:qualcomm:qualcomm_dragonwing_x100_accelerator_card:-:*:*:*:*:*:*:*

Configuration 26 [-]

AND
cpe:2.3:o:qualcomm:qxm1093_firmware:-:*:*:*:*:*:*:*
cpe:2.3:h:qualcomm:qxm1093:-:*:*:*:*:*:*:*

Configuration 27 [-]

AND
cpe:2.3:o:qualcomm:qxm1094_firmware:-:*:*:*:*:*:*:*
cpe:2.3:h:qualcomm:qxm1094:-:*:*:*:*:*:*:*

Configuration 28 [-]

AND
cpe:2.3:o:qualcomm:qxm1095_firmware:-:*:*:*:*:*:*:*
cpe:2.3:h:qualcomm:qxm1095:-:*:*:*:*:*:*:*

Configuration 29 [-]

AND
cpe:2.3:o:qualcomm:qxm1096_firmware:-:*:*:*:*:*:*:*
cpe:2.3:h:qualcomm:qxm1096:-:*:*:*:*:*:*:*

Configuration 30 [-]

AND
cpe:2.3:o:qualcomm:sa7255p_firmware:-:*:*:*:*:*:*:*
cpe:2.3:h:qualcomm:sa7255p:-:*:*:*:*:*:*:*

Configuration 31 [-]

AND
cpe:2.3:o:qualcomm:sa7775p_firmware:-:*:*:*:*:*:*:*
cpe:2.3:h:qualcomm:sa7775p:-:*:*:*:*:*:*:*

Configuration 32 [-]

AND
cpe:2.3:o:qualcomm:sa8255p_firmware:-:*:*:*:*:*:*:*
cpe:2.3:h:qualcomm:sa8255p:-:*:*:*:*:*:*:*

Configuration 33 [-]

AND
cpe:2.3:o:qualcomm:sa8620p_firmware:-:*:*:*:*:*:*:*
cpe:2.3:h:qualcomm:sa8620p:-:*:*:*:*:*:*:*

Configuration 34 [-]

AND
cpe:2.3:o:qualcomm:sa8770p_firmware:-:*:*:*:*:*:*:*
cpe:2.3:h:qualcomm:sa8770p:-:*:*:*:*:*:*:*

Configuration 35 [-]

AND
cpe:2.3:o:qualcomm:sa9000p_firmware:-:*:*:*:*:*:*:*
cpe:2.3:h:qualcomm:sa9000p:-:*:*:*:*:*:*:*

Configuration 36 [-]

AND
cpe:2.3:o:qualcomm:sar1165p_firmware:-:*:*:*:*:*:*:*
cpe:2.3:h:qualcomm:sar1165p:-:*:*:*:*:*:*:*

Configuration 37 [-]

AND
cpe:2.3:o:qualcomm:sar2130p_firmware:-:*:*:*:*:*:*:*
cpe:2.3:h:qualcomm:sar2130p:-:*:*:*:*:*:*:*

Configuration 38 [-]

AND
cpe:2.3:o:qualcomm:snapdragon_ar1_gen_1_platform_firmware:-:*:*:*:*:*:*:*
cpe:2.3:h:qualcomm:snapdragon_ar1_gen_1_platform:-:*:*:*:*:*:*:*

Configuration 39 [-]

AND
cpe:2.3:o:qualcomm:snapdragon_ar1\+_gen_1_platform_firmware:-:*:*:*:*:*:*:*
cpe:2.3:h:qualcomm:snapdragon_ar1\+_gen_1_platform:-:*:*:*:*:*:*:*

Configuration 40 [-]

AND
cpe:2.3:o:qualcomm:srv1h_firmware:-:*:*:*:*:*:*:*
cpe:2.3:h:qualcomm:srv1h:-:*:*:*:*:*:*:*

Configuration 41 [-]

AND
cpe:2.3:o:qualcomm:srv1m_firmware:-:*:*:*:*:*:*:*
cpe:2.3:h:qualcomm:srv1m:-:*:*:*:*:*:*:*

Configuration 42 [-]

AND
cpe:2.3:o:qualcomm:sxr2230p_firmware:-:*:*:*:*:*:*:*
cpe:2.3:h:qualcomm:sxr2230p:-:*:*:*:*:*:*:*

Configuration 43 [-]

AND
cpe:2.3:o:qualcomm:sxr2250p_firmware:-:*:*:*:*:*:*:*
cpe:2.3:h:qualcomm:sxr2250p:-:*:*:*:*:*:*:*

Configuration 44 [-]

AND
cpe:2.3:o:qualcomm:wcd9380_firmware:-:*:*:*:*:*:*:*
cpe:2.3:h:qualcomm:wcd9380:-:*:*:*:*:*:*:*

Configuration 45 [-]

AND
cpe:2.3:o:qualcomm:wcd9385_firmware:-:*:*:*:*:*:*:*
cpe:2.3:h:qualcomm:wcd9385:-:*:*:*:*:*:*:*

Configuration 46 [-]

AND
cpe:2.3:o:qualcomm:wcn3950_firmware:-:*:*:*:*:*:*:*
cpe:2.3:h:qualcomm:wcn3950:-:*:*:*:*:*:*:*

Configuration 47 [-]

AND
cpe:2.3:o:qualcomm:wcn7860_firmware:-:*:*:*:*:*:*:*
cpe:2.3:h:qualcomm:wcn7860:-:*:*:*:*:*:*:*

Configuration 48 [-]

AND
cpe:2.3:o:qualcomm:wcn7861_firmware:-:*:*:*:*:*:*:*
cpe:2.3:h:qualcomm:wcn7861:-:*:*:*:*:*:*:*

Configuration 49 [-]

AND
cpe:2.3:o:qualcomm:wsa8830_firmware:-:*:*:*:*:*:*:*
cpe:2.3:h:qualcomm:wsa8830:-:*:*:*:*:*:*:*

Configuration 50 [-]

AND
cpe:2.3:o:qualcomm:wsa8832_firmware:-:*:*:*:*:*:*:*
cpe:2.3:h:qualcomm:wsa8832:-:*:*:*:*:*:*:*

Configuration 51 [-]

AND
cpe:2.3:o:qualcomm:wsa8835_firmware:-:*:*:*:*:*:*:*
cpe:2.3:h:qualcomm:wsa8835:-:*:*:*:*:*:*:*

Configuration 52 [-]

AND
cpe:2.3:o:qualcomm:xrv7209_firmware:-:*:*:*:*:*:*:*
cpe:2.3:h:qualcomm:xrv7209:-:*:*:*:*:*:*:*

Configuration 53 [-]

AND
cpe:2.3:o:qualcomm:xrv9209_firmware:-:*:*:*:*:*:*:*
cpe:2.3:h:qualcomm:xrv9209:-:*:*:*:*:*:*:*

No data.

OpenCVE Enrichment is a feature of OpenCVE that uses AI to automatically link vendors and products to CVEs. Learn more on GitHub.

No data.

Project Subscriptions

Vendors Products
Qualcomm Subscribe
Fastconnect 6900 Subscribe
Fastconnect 6900 Firmware Subscribe
Fastconnect 7800 Subscribe
Fastconnect 7800 Firmware Subscribe
Lemans Au Lgit Subscribe
Lemans Au Lgit Firmware Subscribe
Lemansau Subscribe
Lemansau Firmware Subscribe
Pandeiro Subscribe
Pandeiro Firmware Subscribe
Qam8255p Subscribe
Qam8255p Firmware Subscribe
Qam8397p Subscribe
Qam8397p Firmware Subscribe
Qam8797p Subscribe
Qam8797p Firmware Subscribe
Qamsrv1h Subscribe
Qamsrv1h Firmware Subscribe
Qamsrv1m Subscribe
Qamsrv1m Firmware Subscribe
Qca6595au Subscribe
Qca6595au Firmware Subscribe
Qca6696 Subscribe
Qca6696 Firmware Subscribe
Qca6698aq Subscribe
Qca6698aq Firmware Subscribe
Qca6797aq Subscribe
Qca6797aq Firmware Subscribe
Qca8695au Subscribe
Qca8695au Firmware Subscribe
Qdu1000 Subscribe
Qdu1000 Firmware Subscribe
Qdu1110 Subscribe
Qdu1110 Firmware Subscribe
Qdu1210 Subscribe
Qdu1210 Firmware Subscribe
Qdx1010 Subscribe
Qdx1010 Firmware Subscribe
Qdx1011 Subscribe
Qdx1011 Firmware Subscribe
Qln1083bd Subscribe
Qln1083bd Firmware Subscribe
Qln1086bd Subscribe
Qln1086bd Firmware Subscribe
Qpa1083bd Subscribe
Qpa1083bd Firmware Subscribe
Qpa1086bd Subscribe
Qpa1086bd Firmware Subscribe
Qualcomm Dragonwing X100 Accelerator Card Subscribe
Qualcomm Dragonwing X100 Accelerator Card Firmware Subscribe
Qxm1093 Subscribe
Qxm1093 Firmware Subscribe
Qxm1094 Subscribe
Qxm1094 Firmware Subscribe
Qxm1095 Subscribe
Qxm1095 Firmware Subscribe
Qxm1096 Subscribe
Qxm1096 Firmware Subscribe
Sa7255p Subscribe
Sa7255p Firmware Subscribe
Sa7775p Subscribe
Sa7775p Firmware Subscribe
Sa8255p Subscribe
Sa8255p Firmware Subscribe
Sa8620p Subscribe
Sa8620p Firmware Subscribe
Sa8770p Subscribe
Sa8770p Firmware Subscribe
Sa9000p Subscribe
Sa9000p Firmware Subscribe
Sar1165p Subscribe
Sar1165p Firmware Subscribe
Sar2130p Subscribe
Sar2130p Firmware Subscribe
Snapdragon Ar1\+ Gen 1 Platform Subscribe
Snapdragon Ar1\+ Gen 1 Platform Firmware Subscribe
Snapdragon Ar1 Gen 1 Platform Subscribe
Snapdragon Ar1 Gen 1 Platform Firmware Subscribe
Srv1h Subscribe
Srv1h Firmware Subscribe
Srv1m Subscribe
Srv1m Firmware Subscribe
Sxr2230p Subscribe
Sxr2230p Firmware Subscribe
Sxr2250p Subscribe
Sxr2250p Firmware Subscribe
Wcd9380 Subscribe
Wcd9380 Firmware Subscribe
Wcd9385 Subscribe
Wcd9385 Firmware Subscribe
Wcn3950 Subscribe
Wcn3950 Firmware Subscribe
Wcn7860 Subscribe
Wcn7860 Firmware Subscribe
Wcn7861 Subscribe
Wcn7861 Firmware Subscribe
Wsa8830 Subscribe
Wsa8830 Firmware Subscribe
Wsa8832 Subscribe
Wsa8832 Firmware Subscribe
Wsa8835 Subscribe
Wsa8835 Firmware Subscribe
Xrv7209 Subscribe
Xrv7209 Firmware Subscribe
Xrv9209 Subscribe
Xrv9209 Firmware Subscribe
Advisories

No advisories yet.

Fixes

Solution

No solution given by the vendor.

Workaround

No workaround given by the vendor.

References
Link Providers
https://docs.qualcomm.com/product/publicresources/securitybulletin/july-2026-bulletin.html cve-icon cve-icon
History

Mon, 06 Jul 2026 21:30:00 +0000

Type Values Removed Values Added
Metrics ssvc

{'options': {'Automatable': 'no', 'Exploitation': 'none', 'Technical Impact': 'total'}, 'version': '2.0.3'}

Mon, 06 Jul 2026 20:30:00 +0000

Type Values Removed Values Added
Description Cryptographic Issue when using a static initialization vector for AES-GCM key wrapping, which requires a unique value for each call to ensure security.
Title Reusing a Nonce, Key Pair in Encryption in HLOS
Weaknesses CWE-323
References
Metrics cvssV3_1

{'score': 7.1, 'vector': 'CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N'}

Projects

Sign in to view the affected projects.

cve-icon MITRE

Status: PUBLISHED

Assigner: qualcomm

Published:

Updated: 2026-07-08T03:56:37.495Z

Reserved: 2025-12-17T04:35:45.743Z

Link: CVE-2026-21383

cve-icon Vulnrichment

Updated: 2026-07-06T20:55:30.938Z

cve-icon NVD

Status : Analyzed

Published: 2026-07-06T21:16:53.973

Modified: 2026-07-08T05:16:27.107

Link: CVE-2026-21383

cve-icon Redhat

No data.

cve-icon OpenCVE Enrichment

Updated: 2026-07-31T14:30:04Z

Weaknesses