by Kastro
Paper/Archive/CVE-2025-21450

CVE-2025-21450

Qualcomm, Inc. Snapdragon — Improper Authentication in GPS_GNSS

EPSS 0.3%CVSS 9.1
critical.is priorityof 100
32
CVSS 9.1 (CNA)9.1 / 10 × 3027.3Not in CISA KEV+300.0EPSS percentile 24.6.246 × 204.9No public exploit+100.0SSVC exploitation: none+100.0
Description · from the CVE record

Cryptographic issue occurs due to use of insecure connection method while downloading.

Affected

ProductAffectedFixed inSource
SnapdragonAR8035–CNA
SnapdragonFastConnect 6200–CNA
SnapdragonFastConnect 6700–CNA
SnapdragonFastConnect 6900–CNA
SnapdragonFastConnect 7800–CNA
SnapdragonQCA6174A–CNA
SnapdragonQCA6391–CNA
SnapdragonQCA6574A–CNA
SnapdragonQCA6574AU–CNA
SnapdragonQCA6584AU–CNA
SnapdragonQCA6595AU–CNA
SnapdragonQCA6678AQ–CNA

Scores by source

qualcomm (CNA)9.1CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N
CISA ADPSSVCExploitation: none · Automatable: yes · Technical impact: total

References

refdocs.qualcomm.com/product/publicresources/securitybulletin/july-2025-bulletin.html