CVE-2025-21422

CVE-2025-21422 describes a cryptographic issue in Qualcomm chipsets where processing crypto API calls lacks certain checks, potentially leading to corrupted key usage or IV reuse. Connected sources tie this to Qualcomm Chipsets/Snapdragon families and classify the impact as high. Public exploit d...

CVE-2025-21422 Cryptographic Issues in Automotive

Cryptographic issue while processing crypto API calls, missing checks may lead to corrupted key usage or IV reuses...

PT-2025-28630

Name of the Vulnerable Software and Affected Versions: Office Developer Platform affected versions not specified Description: The issue concerns the use of a broken or risky cryptographic algorithm in the Office Developer Platform, which allows an authorized attacker to bypass a local security...

CVE-2025-49756: Use of a Broken or Risky Cryptographic Algorithm

Use of a broken or risky cryptographic algorithm in Office Developer Platform allows an authorized attacker to bypass a security feature locally...

PT-2025-28654 · Ibm · Ibm Openpages With Watson

Name of the Vulnerable Software and Affected Versions: IBM OpenPages with Watson versions 8.3 through 9.0 Description: The issue provides weaker than expected security in the storage of encrypted data. An authenticated remote attacker with access to the database or a local attacker with access to...

Qualcomm Chipsets encryption issues vulnerabilities

Qualcomm Chipsets are a family of chipsets from Qualcomm Incorporated USA. A cryptographic issue vulnerability exists in Qualcomm Chipsets that stems from an encryption issue when handling cryptographic API calls, which could lead to corrupted key usage or IV reuse...

Microsoft Windows Cryptographic Services security vulnerabilities

Microsoft Windows Cryptographic Services is a cryptographic service provider program from Microsoft Corporation USA. A security vulnerability exists in Microsoft Windows Cryptographic Services. An attacker exploiting this vulnerability could gain access to sensitive information. The following...

PT-2025-28439 · Qualcomm · Qualcomm Chipsets

Name of the Vulnerable Software and Affected Versions: Qualcomm chipsets versions prior to the fixed version Description: A cryptographic issue occurs due to the use of an insecure connection method while downloading. This issue affects over 100 Qualcomm chipsets used in many Android devices...

PT-2025-28554 · Microsoft · Windows Cryptographic Services +1

Name of the Vulnerable Software and Affected Versions: Windows Cryptographic Services affected versions not specified Description: The issue is related to cryptographic problems in Windows Cryptographic Services, allowing an unauthorized attacker to disclose information over a network...

A Formal Refutation of the Blockchain Trilemma

The so-called blockchain trilemma asserts the impossibility of simultaneously achieving scalability, security, and decentralisation within a single blockchain protocol. In this paper, we formally refute that proposition. Employing predicate logic, formal automata theory, computational complexity...

PT-2025-28430 · Qualcomm · Snapdragon +189

Name of the Vulnerable Software and Affected Versions: The product name cannot be determined. Description: A cryptographic issue exists while processing crypto API calls. Missing checks may lead to corrupted key usage or IV reuses. Recommendations: At the moment, there is no information about a...

CVE-2025-21450: Improper Authentication

Cryptographic issue occurs due to use of insecure connection method while downloading...

CVE-2025-41223: Use of a Broken or Risky Cryptographic Algorithm

A vulnerability has been identified in RUGGEDCOM i800 All versions, RUGGEDCOM i801 All versions, RUGGEDCOM i802 All versions, RUGGEDCOM i803 All versions, RUGGEDCOM M2100 All versions, RUGGEDCOM M2200 All versions, RUGGEDCOM M969 All versions, RUGGEDCOM RMC30 All versions, RUGGEDCOM RMC8388 V4.X...

CVE-2023-52236: Use of a Broken or Risky Cryptographic Algorithm

A vulnerability has been identified in RUGGEDCOM i800 All versions, RUGGEDCOM i801 All versions, RUGGEDCOM i802 All versions, RUGGEDCOM i803 All versions, RUGGEDCOM M2100 All versions, RUGGEDCOM M2200 All versions, RUGGEDCOM M969 All versions, RUGGEDCOM RMC30 All versions, RUGGEDCOM RMC8388 V4.X...

CVE-2025-48823: Inadequate Encryption Strength

Cryptographic issues in Windows Cryptographic Services allows an unauthorized attacker to disclose information over a network...

CVE-2025-21422: Undefined Security Weakness

Cryptographic issue while processing crypto API calls, missing checks may lead to corrupted key usage or IV reuses...

Ivanti Endpoint Manager security vulnerabilities

Ivanti Endpoint Manager is a comprehensive endpoint management solution developed by Ivanti to manage all endpoint devices in an enterprise network. Ivanti Endpoint Manager suffers from a cryptographic misuse vulnerability that stems from an incorrect cryptographic implementation, which can be...

GnuTLS Information Disclosure

The vulnerability of the GnuTLS transport layer security library is related to the use of cryptographic algorithms that contain vulnerabilities. Exploiting this vulnerability could allow a malicious actor to gain access to confidential data...

[SECURITY] Fedora 42 Update: mbedtls-3.6.4-1.fc42

Mbed TLS is a light-weight open source cryptographic and SSL/TLS library written in C. Mbed TLS makes it easy for developers to include cryptographic and SSL/TLS capabilities in their embedded applications with as little hassle as possible...

CVE-2025-5372 Libssh: incorrect return code handling in ssh_kdf() in libssh

A flaw was found in libssh versions built with OpenSSL versions older than 3.0, specifically in the sshkdf function responsible for key derivation. Due to inconsistent interpretation of return values where OpenSSL uses 0 to indicate failure and libssh uses 0 for success—the function may mistakenl...