Information Disclosure in Qualcomm MBN File Processing
CVE-2025-21465

6.5MEDIUM

Key Information:

Vendor

Qualcomm
Status
Snapdragon
Vendor
CVE Published:
6 August 2025

What is CVE-2025-21465?

This vulnerability allows an attacker to access sensitive information due to improper handling of hash segments in MBN files, potentially compromising system security. Exploration of this weakness could lead to unauthorized information access, highlighting the importance of prompt remediation in affected Qualcomm products.

Affected Version(s)

Snapdragon Snapdragon Auto 315 5G IoT Modem

Snapdragon Snapdragon Auto 9205 LTE Modem

Snapdragon Snapdragon Auto AQT1000

References

https://docs.qualcomm.com/product/publicresources/securit...

CVSS V3.1

Score:
6.5
Severity:
MEDIUM
Confidentiality:
High
Integrity:
None
Availability:
High
Attack Vector:
Local
Attack Complexity:
Low
Privileges Required:
Low
User Interaction:
None
Scope:
Changed

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.
CVE-2025-21465 : Information Disclosure in Qualcomm MBN File Processing