EUVD-2026-41930
GHSA-3p8m-mr3f-jqg6
Severity by source
AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N
Local low-privilege access (AV:L/PR:L); nonce-reuse recovery requires capturing multiple ciphertexts and cryptanalysis so AC:H; key confidentiality and integrity forgery give C:H/I:H, no availability impact (A:N).
Primary rating from Vendor (qualcomm).
CVSS VectorVendor: qualcomm
Lifecycle Timeline
1DescriptionCVE.org
Cryptographic Issue when using a static initialization vector for AES-GCM key wrapping, which requires a unique value for each call to ensure security.
AnalysisAI
Sensitive key material can be exposed in Qualcomm Snapdragon platforms because AES-GCM key wrapping is performed with a hardcoded/static initialization vector instead of a unique per-call nonce. A local, low-privileged attacker who can collect multiple wrapped outputs can exploit the resulting IV/nonce reuse to recover confidentiality and forge integrity of wrapped keys. There is no public exploit identified at time of analysis, and the issue is disclosed via Qualcomm's July 2026 security bulletin.
Technical ContextAI
AES-GCM is an authenticated encryption mode whose security depends critically on a unique initialization vector (nonce) for every encryption performed under a given key; here it is used specifically for key wrapping (encrypting/protecting other cryptographic keys). Reusing the same IV across multiple GCM operations under the same key is the classic 'catastrophic nonce reuse' failure: it lets an attacker XOR ciphertexts to cancel the keystream and, more damagingly, recover the GHASH authentication subkey (H), which enables authentication-tag forgery. This maps directly to CWE-323 (Reusing a Nonce/Key Pair in Encryption). The affected component is identified by CPE cpe:2.3:a:qualcomm,_inc.:snapdragon:*:*:*:*:*:*:*:* - i.e., the Snapdragon platform software/crypto implementation rather than a single application version.
RemediationAI
Patch available per vendor advisory: apply the Qualcomm-supplied fixes referenced in the July 2026 Security Bulletin (https://docs.qualcomm.com/product/publicresources/securitybulletin/july-2026-bulletin.html), which are typically delivered to device OEMs and reach end users through downstream firmware/OS updates - so also track and apply the corresponding OEM/carrier security update once available. The underlying fix is to generate a unique IV/nonce for each AES-GCM key-wrap operation (e.g., a random or strictly counter-based nonce), so no configuration workaround fully substitutes for the code fix. As compensating controls until updates land, restrict the ability of untrusted or low-privilege local code to invoke the affected key-wrapping interface and to observe its outputs, and consider rotating any keys that may have been wrapped under the static-IV implementation since their protection cannot be assumed intact; the trade-off is that access restrictions and key rotation may disrupt applications or services that legitimately rely on the wrapping service.
More in Snapdragon
View allMemory corruption in Qualcomm Snapdragon Wi-Fi/NAN firmware allows an attacker within wireless range to overflow a stack
Buffer overflow in Qualcomm Snapdragon firmware enables authentication bypass on adjacent networks, allowing remote unau
Local privilege escalation and memory corruption in Qualcomm Snapdragon WLAN firmware occurs when the driver parses malf
Memory corruption in Qualcomm Snapdragon Strongbox component allows local low-privileged attackers to trigger a buffer o
Local privilege escalation in Qualcomm Snapdragon chipsets stems from an out-of-bounds memory access in the Strongbox tr
Memory corruption in Qualcomm Snapdragon chipsets allows adjacent network attackers to achieve arbitrary code execution
Bootloader integrity bypass in Qualcomm Snapdragon platforms allows a high-privileged local attacker to write to a speci
Authentication bypass in Qualcomm Snapdragon SoCs allows adjacent network attackers to exploit a cryptographic flaw duri
Memory corruption in Qualcomm Snapdragon IOCTL device driver handling enables a local low-privilege attacker to achieve
Memory corruption in Qualcomm Snapdragon's fingerprint Trusted Application (TA) allows a local low-privileged attacker t
Memory corruption in Qualcomm Snapdragon platforms occurs when a packet with a size value near the maximum allowable lim
Local privilege escalation via memory corruption affects Qualcomm Snapdragon platforms, where allocating memory with siz
Same weakness CWE-323 – Reusing a Nonce, Key Pair in Encryption
View allSame technique Information Disclosure
View allShare
External POC / Exploit Code
Leaving vuln.today