Vulnerabilities in QCA1990