Cryptographic Issue in Qualcomm Products
CVE-2025-21450

9.1CRITICAL

Key Information:

Vendor

Qualcomm
Status
Snapdragon
Vendor
CVE Published:
8 July 2025

What is CVE-2025-21450?

A cryptographic vulnerability stems from the use of an insecure connection method during the downloading process in Qualcomm chipsets. This issue exposes devices to potential risks, as it can allow unauthorized access to sensitive data transmitted over unprotected channels. Users of affected Qualcomm products should review their configurations and apply any available patches to mitigate this risk.

Affected Version(s)

Snapdragon Snapdragon Auto AR8035

Snapdragon Snapdragon Auto FastConnect 6200

Snapdragon Snapdragon Auto FastConnect 6700

References

https://docs.qualcomm.com/product/publicresources/securit...

CVSS V3.1

Score:
9.1
Severity:
CRITICAL
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.
CVE-2025-21450 : Cryptographic Issue in Qualcomm Products