CVE-2023-21626: Qualcomm APQ8009 Firmware

High severity, CVSS 7.1. EPSS: 0.1% chance of exploitation in the next 30 days.

Cryptographic issue in HLOS due to improper authentication while performing key velocity checks using more than one key.

Affected products

• Qualcomm APQ8009 Firmware: affected versions not specified
• Qualcomm APQ8017 Firmware: affected versions not specified
• Qualcomm APQ8037 Firmware: affected versions not specified
• Qualcomm AQT1000 Firmware: affected versions not specified
• Qualcomm AR8035 Firmware: affected versions not specified
• Qualcomm CSRA6620 Firmware: affected versions not specified
• Qualcomm CSRA6640 Firmware: affected versions not specified
• Qualcomm CSRB31024 Firmware: affected versions not specified
• Qualcomm FSM10056 Firmware: affected versions not specified
• Qualcomm MDM8207 Firmware: affected versions not specified
• Qualcomm MDM9205 Firmware: affected versions not specified
• Qualcomm MDM9206 Firmware: affected versions not specified
• Qualcomm MDM9207 Firmware: affected versions not specified
• Qualcomm MDM9607 Firmware: affected versions not specified
• Qualcomm MDM9628 Firmware: affected versions not specified
• Qualcomm MSM8108 Firmware: affected versions not specified
• Qualcomm MSM8208 Firmware: affected versions not specified
• Qualcomm MSM8209 Firmware: affected versions not specified
• Qualcomm MSM8608 Firmware: affected versions not specified
• Qualcomm MSM8917 Firmware: affected versions not specified
• Qualcomm MSM8920 Firmware: affected versions not specified
• Qualcomm MSM8937 Firmware: affected versions not specified
• Qualcomm MSM8940 Firmware: affected versions not specified
• Qualcomm PM8937 Firmware: affected versions not specified
• Qualcomm QAM8295P Firmware: affected versions not specified
• and 160 more

Published 2023-08-08. Last modified 2026-06-17.