CVE-2025-21450
9.1 criticalEPSS 0.3%
Critical (9.1) in qualcomm. EPSS 0.3% chance of exploitation in the next 30 days.
Cryptographic issue occurs due to use of insecure connection method while downloading.
Severity
CVSS 3.1
9.1 criticalCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N- EPSS
- 0.3% chance of exploitation in the next 30 days; higher than 24% of CVEs (scores of 2026-10-31)
- CWEs
- CWE-863, CWE-287
- Published
- Modified
- Record from
- the NVD, synced
Affected
- qualcomm:ar8035_firmware
- qualcomm:fastconnect_6200_firmware
- qualcomm:fastconnect_6700_firmware
- qualcomm:fastconnect_6900_firmware
- qualcomm:fastconnect_7800_firmware
- qualcomm:qca6174a_firmware
- qualcomm:qca6391_firmware
- qualcomm:qca6574a_firmware
- qualcomm:qca6574au_firmware
- qualcomm:qca6584au_firmware
- qualcomm:qca6595au_firmware
- qualcomm:qca6678aq_firmware
- qualcomm:qca6688aq_firmware
- qualcomm:qca6696_firmware
- qualcomm:qca6698aq_firmware
- qualcomm:qca6698au_firmware
- qualcomm:qca6797aq_firmware
- qualcomm:qca8081_firmware
- qualcomm:qca8337_firmware
- qualcomm:qcc710_firmware
- qualcomm:qcm4490_firmware
- qualcomm:qcm5430_firmware
- qualcomm:qcm6490_firmware
- qualcomm:qcm8550_firmware
- qualcomm:qcn6024_firmware
- qualcomm:qcn6224_firmware
- qualcomm:qcn6274_firmware
- qualcomm:qcn9011_firmware
- qualcomm:qcn9012_firmware
- qualcomm:qcn9024_firmware
- qualcomm:qcs4490_firmware
- qualcomm:qcs5430_firmware
- qualcomm:qcs6490_firmware
- qualcomm:qcs8550_firmware
- qualcomm:qep8111_firmware
- qualcomm:qfw7114_firmware
- qualcomm:qfw7124_firmware
- qualcomm:sd_8_gen1_5g_firmware
- qualcomm:sdx55_firmware
- qualcomm:sdx61_firmware
- qualcomm:sdx80m_firmware
- qualcomm:sg8275p_firmware
- qualcomm:sm4635_firmware
- qualcomm:sm6370_firmware
- qualcomm:sm6650_firmware
- qualcomm:sm6650p_firmware
- qualcomm:sm7325p_firmware
- qualcomm:sm7635_firmware
- qualcomm:sm7635p_firmware
- qualcomm:sm7675_firmware
References
Check your stackJSON