Qualcomm VoWiFi Call Cryptographic Vulnerability in Data Modem

A vulnerability has been identified in the data modem of various chipsets, where a weak configuration may lead to cryptographic issues during Voice over WiFi (VoWiFi) calls initiated from the user equipment (UE). This vulnerability affects several chipsets across different Qualcomm platforms.

Impact

Exploitation of this vulnerability could result in cryptographic failures, potentially compromising the security of VoWiFi communications.

Remediation

Qualcomm has notified device manufacturers about this vulnerability and is actively sharing patches. Instructions for applying the patch can be obtained from the device manufacturer.