CVE-2026-21383

תיאור (מקור, אנגלית)

Cryptographic Issue when using a static initialization vector for AES-GCM key wrapping, which requires a unique value for each call to ensure security.

מדדים

CVSS 3.1

7.1 (HIGH) מקור הציון: CNA CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N

EPSS — סבירות ניצול

0% (אחוזון 000) נכון ל-16/8/2026

CWE

CWE-323

מוצרים מושפעים

qualcomm: fastconnect 6900 firmware; qualcomm: fastconnect 6900; qualcomm: fastconnect 7800 firmware; qualcomm: fastconnect 7800; qualcomm: lemans au lgit firmware; qualcomm: lemans au lgit; qualcomm: lemansau firmware; qualcomm: lemansau; qualcomm: pandeiro firmware; qualcomm: pandeiro; qualcomm: qam8255p firmware; qualcomm: qam8255p; qualcomm: qam8397p firmware; qualcomm: qam8397p; qualcomm: qam8797p firmware

קישורים

• https://docs.qualcomm.com/product/publicresources/securitybulletin/july-2026-b‮… Vendor Advisory