Monthly
Qualcomm Snapdragon chipsets fail to verify the consistency of UE security capabilities against those replayed by the network during 3GPP cellular security mode negotiation, enabling a rogue base station operator to force downgraded cryptographic algorithm selection on unpatched devices. The flaw resides in the cellular modem firmware stack and affects all Snapdragon product lines per available CPE data, with no minimum version boundary published. Exploitation yields high confidentiality impact - a sophisticated attacker with radio interception equipment can potentially decrypt cellular communications. No public exploit code and no CISA KEV listing have been identified at time of analysis, though the underlying attack class (security capability bidding-down) is well-documented in cellular security research.
Qualcomm Snapdragon chipsets fail to verify the consistency of UE security capabilities against those replayed by the network during 3GPP cellular security mode negotiation, enabling a rogue base station operator to force downgraded cryptographic algorithm selection on unpatched devices. The flaw resides in the cellular modem firmware stack and affects all Snapdragon product lines per available CPE data, with no minimum version boundary published. Exploitation yields high confidentiality impact - a sophisticated attacker with radio interception equipment can potentially decrypt cellular communications. No public exploit code and no CISA KEV listing have been identified at time of analysis, though the underlying attack class (security capability bidding-down) is well-documented in cellular security research.