What is the CVSS score of CVE-2025-21422?

CVE-2025-21422 has a CVSS 3.1 base score of 7.1 (High). CVSS vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N. EPSS exploitation probability: 0.0%.

Which versions of Snapdragon 860 Mobile Firmware are affected by CVE-2025-21422?

Organizations using Cryptographic face moderate risk from CVE-2025-21422 rated CVSS 7.1. Exploitation could compromise the security of affected deployments.

How to fix or mitigate CVE-2025-21422?

Within 7 days: Identify all affected systems and apply vendor patches promptly. Monitor vendor channels for patch availability.

Snapdragon 860 Mobile Firmware CVE-2025-21422

EUVD-2025-20494 HIGH

Cryptographic Issues (CWE-310)

2025-07-08 product-security@qualcomm.com

7.1

CVSS 3.1 · NVD

Severity by source

NVD PRIMARY

7.1 HIGH

AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N

Primary rating from NVD · only source for this CVE.

CVSS VectorNVD

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N

Attack Vector

Local

Attack Complexity

Low

Privileges Required

Low

User Interaction

None

Scope

Unchanged

Confidentiality

High

Integrity

High

Availability

None

Lifecycle Timeline

EUVD ID Assigned

Mar 16, 2026 - 04:21 euvd

EUVD-2025-20494

Analysis Generated

Mar 16, 2026 - 04:21 vuln.today

CVE Published

Jul 08, 2025 - 13:15 nvd

HIGH 7.1

DescriptionCVE.org

Cryptographic issue while processing crypto API calls, missing checks may lead to corrupted key usage or IV reuses.

Analysis

Cryptographic issue while processing crypto API calls, missing checks may lead to corrupted key usage or IV reuses.

Technical ContextAI

This vulnerability is classified as Cryptographic Issues (CWE-310).

RemediationAI

Monitor vendor advisories for patches. Apply mitigations such as network segmentation, access restrictions, and monitoring.

More in Snapdragon 860 Mobile Firmware

View all

CVE-2025-21427 HIGH This Week

8.2 Jul 08

Information disclosure while decoding this RTP packet Payload when UE receives the RTP packet from the network.

CVE-2025-21453 HIGH This Week

7.8 May 06

Memory corruption while processing a data structure, when an iterator is accessed after it has been removed, potential f

CVE-2024-49841 HIGH This Week

7.8 May 06

Memory corruption during memory assignment to headless peripheral VM due to incorrect error code handling. Rated high se

CVE-2024-49835 HIGH This Week

7.8 May 06

Memory corruption while reading secure file. Rated high severity (CVSS 7.8), this vulnerability is low attack complexity

CVE-2024-49842 HIGH This Week

7.8 May 06

Memory corruption during memory mapping into protected VM address space due to incorrect API restrictions. Rated high se

CVE-2025-27061 HIGH This Week

7.8 Jul 08

Memory corruption whhile handling the subsystem failure memory during the parsing of video packets received from the vid

CVE-2025-27042 HIGH This Week

7.8 Jul 08

Memory corruption while processing video packets received from video firmware.

CVE-2025-21432 HIGH This Week

7.8 Jul 08

CVE-2025-21432 is a security vulnerability (CVSS 7.8). High severity vulnerability requiring prompt remediation.

CVE-2024-33060 HIGH This Week

7.8 Sep 02

Memory corruption when two threads try to map and unmap a single node simultaneously. Rated high severity (CVSS 7.8), th

CVE-2024-33052 HIGH This Week

7.8 Sep 02

Memory corruption when user provides data for FM HCI command control operations. Rated high severity (CVSS 7.8), this vu

CVE-2024-21475 HIGH This Week

7.8 May 06

Memory corruption when the payload received from firmware is not as per the expected protocol size. Rated high severity

CVE-2024-21468 HIGH This Week

7.8 Apr 01

Memory corruption when there is failed unmap operation in GPU. Rated high severity (CVSS 7.8), this vulnerability is low

Same weakness CWE-310 – Cryptographic Issues

View all

CVE-2015-0204 MEDIUM POC

4.3

CVE-2015-4000 LOW POC

3.7

CVE-2014-3566 LOW POC

3.4

CVE-2014-8684 CRITICAL POC

9.8

CVE-2012-1803 HIGH POC

8.5

CVE-2013-4787 CRITICAL POC

9.3

CVE-2014-8686 CRITICAL POC

9.8

CVE-2013-0137 CRITICAL

10.0

Same technique Information Disclosure

View all

CVE-2013-2251 CRITICAL POC

9.8

CVE-2017-5638 CRITICAL POC

9.8

CVE-2025-24813 CRITICAL POC

9.8

CVE-2015-1701 HIGH POC

7.8

CVE-2017-0147 HIGH POC

7.5

CVE-2014-6324 HIGH POC

8.8

CVE-2023-7028 CRITICAL POC

10.0

CVE-2017-0213 HIGH POC

7.3

CVE-2025-21422 vulnerability details – vuln.today

Back

Snapdragon 860 Mobile Firmware CVE-2025-21422

Severity by source

CVSS VectorNVD

Lifecycle Timeline

DescriptionCVE.org

Analysis

Technical ContextAI

RemediationAI

More in Snapdragon 860 Mobile Firmware

Same weakness CWE-310 – Cryptographic Issues

Same technique Information Disclosure

Share

External POC / Exploit Code