CVE-2026-21383CWE-323

Reusing a Nonce, Key Pair in Encryption in HLOS

High · published July 6, 2026

CVSS v3.1
7.1
EPSS
0%
Percentile
0.9
In the wild
Unconfirmed
What it is

Cryptographic Issue when using a static initialization vector for AES-GCM key wrapping, which requires a unique value for each call to ensure security.

The record
Technical detail
CVSS v3.1
7.1 · HIGH
Vector
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N
CVSS v4.0
Not supplied
EPSS
0.00101 · 0.9th percentile
Weakness
CWE-323 · Reusing a Nonce, Key Pair in Encryption
Published
2026-07-06T20:09Z
EPSS history
Timeline
  • 06 JUL 20:09Z
    Reusing a Nonce, Key Pair in Encryption in HLOS
    cvelistv5