Qualcomm GPS Chipsets Improper Authentication Vulnerability Allowing Cryptographic Issues

A cryptographic vulnerability has been identified in various chipsets by Qualcomm, including those in the Snapdragon 8 Gen 1 and 8 Gen 2 mobile platforms, as well as several other platforms and modems. The issue arises from the use of an insecure connection method for downloading, which could potentially lead to improper authentication and corrupted key usage.

Impact

Exploitation of this vulnerability could cause cryptographic issues, such as the misuse of keys or initialization vectors, which are crucial for secure communications and data integrity.

Remediation

Qualcomm has notified customers about this vulnerability and is actively sharing patches. Instructions for applying the patch can be found in the Qualcomm July 2025 Security Bulletin.