Skip to content
CVE PROGRAM SOURCE RECORD7.1 High

CVE-2026-21383

Reusing a Nonce, Key Pair in Encryption in HLOS

Description

Cryptographic Issue when using a static initialization vector for AES-GCM key wrapping, which requires a unique value for each call to ensure security.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Qualcomm, Inc. Snapdragon

Default version status: unaffected

  • FastConnect 6900affected
  • FastConnect 7800affected
  • LeMans_AU_LGITaffected
  • LeMansAUaffected
  • Pandeiroaffected
  • QAM8255Paffected
  • QAM8397Paffected
  • QAM8797Paffected
  • QAMSRV1Haffected
  • QAMSRV1Maffected
  • QCA6595AUaffected
  • QCA6696affected
  • QCA6698AQaffected
  • QCA6797AQaffected
  • QCA8695AUaffected
  • QDU1000affected
  • QDU1110affected
  • QDU1210affected
  • QDX1010affected
  • QDX1011affected
  • QLN1083BDaffected
  • QLN1086BDaffected
  • QPA1083BDaffected
  • QPA1086BDaffected
  • Qualcomm Dragonwing X100 Accelerator Cardaffected
  • QXM1093affected
  • QXM1094affected
  • QXM1095affected
  • QXM1096affected
  • SA7255Paffected
  • SA7775Paffected
  • SA8255Paffected
  • SA8620Paffected
  • SA8770Paffected
  • SA9000Paffected
  • SAR1165Paffected
  • SAR2130Paffected
  • Snapdragon AR1 Gen 1 Platformaffected
  • Snapdragon AR1+ Gen 1 Platformaffected
  • SRV1Haffected
  • SRV1Maffected
  • SXR2230Paffected
  • SXR2250Paffected
  • WCD9380affected
  • WCD9385affected
  • WCN3950affected
  • WCN7860affected
  • WCN7861affected
  • WSA8830affected
  • WSA8832affected
  • WSA8835affected
  • XRV7209affected
  • XRV9209affected

References