CVE-2025-21450

CVE-2025-21450 describes a cryptographic issue arising from the use of an insecure connection method during download, affecting Qualcomm closed‑source components. The entry is labeled critical (CVSS 3.1: 9.1) with network attack vector and high impact on confidentiality and integrity. Connected d...

CVE-2025-21422 Cryptographic Issues in Automotive

Cryptographic issue while processing crypto API calls, missing checks may lead to corrupted key usage or IV reuses...

CVE-2025-21422

Cryptographic issue while processing crypto API calls, missing checks may lead to corrupted key usage or IV reuses...

CVE-2025-21422

CVE-2025-21422 describes a cryptographic issue in Qualcomm chipsets where processing crypto API calls lacks certain checks, potentially leading to corrupted key usage or IV reuse. Connected sources tie this to Qualcomm Chipsets/Snapdragon families and classify the impact as high. Public exploit d...

PT-2025-28439 · Qualcomm · Qualcomm Chipsets

Name of the Vulnerable Software and Affected Versions: Qualcomm chipsets versions prior to the fixed version Description: A cryptographic issue occurs due to the use of an insecure connection method while downloading. This issue affects over 100 Qualcomm chipsets used in many Android devices...

PT-2025-28430 · Qualcomm · Snapdragon +189

Name of the Vulnerable Software and Affected Versions: The product name cannot be determined. Description: A cryptographic issue exists while processing crypto API calls. Missing checks may lead to corrupted key usage or IV reuses. Recommendations: At the moment, there is no information about a...

CVE-2023-33037

Cryptographic issue in Automotive while unwrapping the key secs2d and verifying with RPMB data...

CVE-2023-28556

Cryptographic issue in HLOS during key management...

CVE-2023-21626

Cryptographic issue in HLOS due to improper authentication while performing key velocity checks using more than one key...

CVE-2023-21652

Cryptographic issue in HLOS as derived keys used to encrypt/decrypt information is present on stack after use...

CVE-2023-33054

Cryptographic issue in GPS HLOS Driver while downloading Qualcomm GNSS assistance data...

PT-2025-22715 · Iridium · Iridium Certus 700

Name of the Vulnerable Software and Affected Versions: Iridium Certus 700 affected versions not specified Description: A cryptographic issue allows a user to retrieve the encryption key, which can lead to the loading of malicious firmware. Recommendations: At the moment, there is no information...

CVE-2022-45170

An issue was discovered in LIVEBOX Collaboration vDesk through v018. A Cryptographic Issue can occur under the /api/v1/vencrypt/decrypt/file endpoint. A malicious user, logged into a victim's account, is able to decipher a file without knowing the key set by the user...

Siemens SIRIUS 3RK3 Modular Safety System和Siemens SIRIUS Safety Relays 3SK2 加密问题漏洞

Siemens SIRIUS 3RK3 Modular Safety System and Siemens SIRIUS Safety Relays 3SK2 are both products of Siemens, Germany.Siemens SIRIUS 3RK3 Modular Safety System is a modular Siemens SIRIUS Safety Relays 3SK2 is a safety relay. Siemens SIRIUS 3RK3 Modular Safety System and Siemens SIRIUS Safety...

CVE-2024-45556

Cryptographic issue may arise because the access control configuration permits Linux to read key registers in TCSR...

CVE-2024-45551

Cryptographic issue occurs during PIN/password verification using Gatekeeper, where RPMB writes can be dropped on verification failure, potentially leading to a user throttling bypass...

CVE-2024-45556

Cryptographic issue may arise because the access control configuration permits Linux to read key registers in TCSR...

CVE-2024-45556 Improper Access Control for Register Interface in TZ Firmware

Cryptographic issue may arise because the access control configuration permits Linux to read key registers in TCSR...

CVE-2024-45556

CVE-2024-45556 describes an improper access control issue in TZ (TrustZone) firmware affecting Qualcomm chipsets, where the access configuration permits Linux to read key registers in the TCSR. This cryptographic vulnerability exposes confidential data due to unauthorized access to critical key r...

CVE-2024-45551 Weak Authentication in HLOS

Cryptographic issue occurs during PIN/password verification using Gatekeeper, where RPMB writes can be dropped on verification failure, potentially leading to a user throttling bypass...