CVE-2023-28540 Improper Authentication in Data Modem

Cryptographic issue in Data Modem due to improper authentication during TLS handshake...

CVE-2023-21626

Cryptographic issue in HLOS due to improper authentication while performing key velocity checks using more than one key...

CVE-2023-21652

Cryptographic issue in HLOS as derived keys used to encrypt/decrypt information is present on stack after use...

Stack overflow

Cryptographic issue in HLOS as derived keys used to encrypt/decrypt information is present on stack after use...

Authentication flaw

Cryptographic issue in HLOS due to improper authentication while performing key velocity checks using more than one key...

CVE-2023-21652 Key Management Errors in HLOS

Cryptographic issue in HLOS as derived keys used to encrypt/decrypt information is present on stack after use...

CVE-2023-21652

CVE-2023-21652 describes a cryptographic issue in HLOS where derived keys used to encrypt/decrypt information remain on the stack after use. The vulnerability is noted across multiple sources (e.g., Red Hat, NVD, PRION/Vuln enrichment) with the CVSS v3.1 base metrics indicating HIGH impact for co...

CVE-2023-21652 Key Management Errors in HLOS

Cryptographic issue in HLOS as derived keys used to encrypt/decrypt information is present on stack after use...

CVE-2023-21626

CVE-2023-21626 describes a cryptographic issue in HLOS caused by improper authentication during key velocity checks when multiple keys are used. Connected sources indicate the vulnerability affects Qualcomm closed‑source components in Android’s HLOS, with a high impact on confidentiality and inte...

CVE-2023-21626 Improper Authentication in HLOS.

Cryptographic issue in HLOS due to improper authentication while performing key velocity checks using more than one key...

CVE-2023-21626 Improper Authentication in HLOS.

Cryptographic issue in HLOS due to improper authentication while performing key velocity checks using more than one key...

PT-2023-18289 · Hlos · Hlos

Name of the Vulnerable Software and Affected Versions: HLOS affected versions not specified Description: The issue is related to a cryptographic problem in HLOS due to improper authentication during key velocity checks when using more than one key. Recommendations: At the moment, there is no...

PT-2023-18315 · Hlos · Hlos

Name of the Vulnerable Software and Affected Versions: HLOS affected versions not specified Description: A cryptographic issue exists where derived keys used for encryption and decryption remain present on the stack after use. Recommendations: At the moment, there is no information about a newer...

CVE-2022-22076

information disclosure due to cryptographic issue in Core during RPMB read request...

Cross site request forgery (csrf)

information disclosure due to cryptographic issue in Core during RPMB read request...

CVE-2022-22076 Cryptographic issue in Core

information disclosure due to cryptographic issue in Core during RPMB read request...

CVE-2022-22076 Cryptographic issue in Core

information disclosure due to cryptographic issue in Core during RPMB read request...

CVE-2022-22076

CVE-2022-22076 describes information disclosure caused by a cryptographic issue in the Core during RPMB read requests. Public sources in the provided documents (NVD, Red Hat Security Advisory, and other aggregations) state this cryptographic flaw leads to information leakage in Qualcomm-related c...

PT-2023-12679 · Core · Core

Name of the Vulnerable Software and Affected Versions: Core affected versions not specified Description: The issue is related to an information disclosure due to a cryptographic problem in Core during RPMB read requests. Recommendations: At the moment, there is no information about a newer versio...

IBM Global Security Kit Encryption Issues Vulnerability

IBM Global Security Kit is a library and utility program for SSL or TLS communications from International Business Machines IBM. The IBM Global Security Kit suffers from a cryptographic issue vulnerability that stems from a time-based side-channel in the RSA decryption implementation, which could...