Cryptographic Vulnerability in AES-GCM Key Wrapping for Qualcomm Products

CVE-2026-21383

What is CVE-2026-21383?

A cryptographic vulnerability exists in Qualcomm products where the AES-GCM key wrapping process utilizes a static initialization vector (IV). This implementation flaw requires that each key wrapping operation utilizes a unique and unpredictable IV to maintain the required security standards. Failure to do so could lead to potential exposure of sensitive information, as the same IV used multiple times can compromise the encryption integrity.

References