What is the CVSS score of CVE-2025-21433?

CVE-2025-21433 has a CVSS 3.1 base score of 6.2 (Medium). CVSS vector: CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H. EPSS exploitation probability: 0.0%.

How to fix or mitigate CVE-2025-21433?

Within 30 days: Identify affected systems and apply vendor patches as part of regular patch cycle. Monitor vendor channels for patch availability.

215 Mobile Firmware CVE-2025-21433

EUVD-2025-20490 MEDIUM

NULL Pointer Dereference (CWE-476)

2025-07-08 product-security@qualcomm.com

6.2

CVSS 3.1 · NVD

View

Vulnerability Assessment

Weakness	CWE CWE-476 OWASP Top 10:2025 A10:2025 - Mishandling of Exceptional Conditions ASVS 5.0 V16 - Security Logging and Error Handling Null pointer safety, defensive checks MITRE ATT&CK 1 technique across 1 tactic: Impact The technique list with ATT&CK links and the kill-chain view is part of the Basic plan and up. Sign in to read
Impact	Typically causes application crash (denial of service). In some cases, may be exploitable for code execution on systems without memory protection. With a CVSS score of 6.2 (MEDIUM), this represents a moderate risk.
Exploit ScenarioDerived	An attacker provides input that causes a code path where a pointer is dereferenced without a prior NULL check, crashing the application.

This Month Plan within 30 days. Why: MEDIUM severity (CVSS 4.0-6.9).

No patch listed yet 0.0% exploitation probability (EPSS)

Get an e-mail when this CVE is exploited, patched or re-scored. Free account.

Alert me

AnalysisAIv1 – Mar 16, 2026

Transient DOS when importing a PKCS#8-encoded RSA private key with a zero-sized modulus.

Earlier versions of this analysis (1)

v1 Mar 16, 2026 - 04:21 CVSS 6.2

RemediationAI

Add NULL checks before pointer dereference operations. Use static analysis to identify potential NULL pointer issues. Enable compiler warnings.

Affected VersionsENISA

Snapdragon QCN7606

Snapdragon QCS6490

Snapdragon QCM5430

Snapdragon QCS5430

Snapdragon QDU1110

Snapdragon Snapdragon 730G Mobile Platform (SM7150-AB)

Snapdragon Snapdragon AR1 Gen 1 Platform "Luna1"

Snapdragon Snapdragon Auto 5G Modem-RF Gen 2

Snapdragon Snapdragon 480 5G Mobile Platform

Snapdragon SD730

Snapdragon QCA6431

Snapdragon WCN3615

Snapdragon Snapdragon 695 5G Mobile Platform

Snapdragon WSA8830

Snapdragon SM6370

Snapdragon Snapdragon 7c+ Gen 3 Compute

Snapdragon QDU1000

Snapdragon Snapdragon 690 5G Mobile Platform

Snapdragon SM7315

Snapdragon Snapdragon 675 Mobile Platform

Snapdragon Snapdragon 730 Mobile Platform (SM7150-AA)

Snapdragon QCM4290

Snapdragon SM8750P

Snapdragon QSM8350

Snapdragon SSG2115P

Snapdragon FastConnect 6900

Snapdragon QCA6797AQ

Snapdragon QCS8550

Snapdragon QCM2150

Snapdragon QCA6696

Snapdragon SA8295P

Snapdragon SXR1230P

Snapdragon SM6250

Snapdragon Snapdragon 430 Mobile Platform

Snapdragon QDX1010

Snapdragon SA8530P

Snapdragon SA8155P

Snapdragon SW5100P

Snapdragon SSG2125P

Snapdragon SM7675P

Snapdragon WCN3610

Snapdragon QRU1052

Snapdragon Snapdragon 888 5G Mobile Platform

Snapdragon SXR2250P

Snapdragon WCN3680B

Snapdragon QRB5165M

Snapdragon Snapdragon X55 5G Modem-RF System

Snapdragon WCD9395

Snapdragon SG8275P

Snapdragon SM7250P

Snapdragon Snapdragon 425 Mobile Platform

Snapdragon QCS4490

Snapdragon Snapdragon 888+ 5G Mobile Platform (SM8350-AC)

Snapdragon Snapdragon 678 Mobile Platform (SM6150-AC)

Snapdragon Snapdragon 865 5G Mobile Platform

Snapdragon QCN6274

Snapdragon WCN3988

Snapdragon SA7255P

Snapdragon QCN9012

Snapdragon Snapdragon 8cx Gen 3 Compute Platform (SC8280XP-AB, BB)

Snapdragon Snapdragon 778G 5G Mobile Platform

Snapdragon QAM8775P

Snapdragon QCA9379

Snapdragon QCA6698AU

Snapdragon Snapdragon 480+ 5G Mobile Platform (SM4350-AC)

Snapdragon SM6650

Snapdragon QCA6421

Snapdragon Vision Intelligence 100 Platform (APQ8053-AA)

Snapdragon QMP1000

Snapdragon QCS615

Snapdragon WCN7750

Snapdragon QCA6574

Snapdragon Snapdragon 710 Mobile Platform

Snapdragon QCM6125

Snapdragon WCN3990

Snapdragon SC8380XP

Snapdragon SM8650Q

Snapdragon Qualcomm 215 Mobile Platform

Snapdragon Snapdragon 662 Mobile Platform

Snapdragon CSRA6640

Snapdragon Snapdragon W5+ Gen 1 Wearable Platform

Snapdragon QCN9274

Snapdragon Snapdragon X65 5G Modem-RF System

Snapdragon SM4635

Snapdragon Snapdragon 768G 5G Mobile Platform (SM7250-AC)

Snapdragon SRV1H

Snapdragon SA8150P

Snapdragon WCN3980

Snapdragon Qualcomm Video Collaboration VC3 Platform

Snapdragon SM8550P

Snapdragon Snapdragon 765G 5G Mobile Platform (SM7250-AB)

Snapdragon QDU1010

Snapdragon Snapdragon 670 Mobile Platform

Snapdragon FastConnect 6700

Snapdragon SA8650P

Snapdragon WSA8832

Snapdragon QCM8550

Snapdragon QCM4490

Snapdragon TalynPlus

Snapdragon WSA8810

Snapdragon QCA6574A

Snapdragon SDM429W

Snapdragon SA8775P

Snapdragon Snapdragon 665 Mobile Platform

Snapdragon QEP8111

Snapdragon SW5100

Snapdragon Snapdragon 439 Mobile Platform

Snapdragon SA4150P

Snapdragon QCM2290

Snapdragon Snapdragon 782G Mobile Platform (SM7325-AF)

Snapdragon QCN9011

Snapdragon WCD9335

Snapdragon Snapdragon 865+ 5G Mobile Platform (SM8250-AB)

Snapdragon QAM8255P

Snapdragon SA8155

Snapdragon SRV1L

Snapdragon Snapdragon X32 5G Modem-RF System

Snapdragon QCN9024

Snapdragon QCA6420

Snapdragon SD855

Snapdragon APQ8017

Snapdragon AQT1000

Snapdragon Snapdragon 685 4G Mobile Platform (SM6225-AD)

Snapdragon WCD9370

Snapdragon QAM8650P

Snapdragon SM6650P

Snapdragon SXR1120

Snapdragon WCN7881

Snapdragon QCA6584AU

Snapdragon SA8255P

Snapdragon QAMSRV1M

Snapdragon Snapdragon 435 Mobile Platform

Snapdragon WCN6650

Snapdragon QCS6125

Snapdragon WCD9341

Snapdragon WCN6450

Snapdragon SD670

Snapdragon QCA6391

Snapdragon SA6150P

Snapdragon WCN7861

Snapdragon SM7325P

Snapdragon Snapdragon X72 5G Modem-RF System

Snapdragon SM8635

Snapdragon QCM4325

Snapdragon Vision Intelligence 200 Platform (APQ8053-AC)

Snapdragon SA9000P

Snapdragon CSRA6620

Snapdragon QCA6688AQ

Snapdragon Snapdragon 460 Mobile Platform

Snapdragon QCA6698AQ

Snapdragon QAM8295P

Snapdragon WCD9390

Snapdragon SM7675

Snapdragon WCN3910

Snapdragon SM4125

Snapdragon Snapdragon XR1 Platform

Snapdragon QFW7114

Snapdragon QCS7230

Snapdragon QCA6574AU

Snapdragon Snapdragon 429 Mobile Platform

Snapdragon SD626

Snapdragon SD 8 Gen1 5G

Snapdragon SA6145P

Snapdragon Snapdragon 855+/860 Mobile Platform (SM8150-AC)

Snapdragon QCA6595

Snapdragon QCS2290

Snapdragon Snapdragon 632 Mobile Platform

Snapdragon SA8540P

Snapdragon WCN6740

Snapdragon Robotics RB5 Platform

Snapdragon WSA8835

Snapdragon Snapdragon XR2 5G Platform

Snapdragon QCA6430

Snapdragon SM7635

Snapdragon QCS8300

Snapdragon QCA8337

Snapdragon QCC710

Snapdragon WCD9326

Snapdragon Snapdragon 8+ Gen 2 Mobile Platform

Snapdragon Snapdragon X50 5G Modem-RF System

Snapdragon QCA6678AQ

Snapdragon FastConnect 6200

Snapdragon WCN7880

Snapdragon Smart Display 200 Platform (APQ5053-AA)

Snapdragon SA4155P

Snapdragon SM7635P

Snapdragon Snapdragon 4 Gen 2 Mobile Platform

Snapdragon SA6155

Snapdragon Snapdragon 427 Mobile Platform

Snapdragon Snapdragon 720G Mobile Platform

Snapdragon Snapdragon X35 5G Modem-RF System

Snapdragon Snapdragon 855 Mobile Platform

Snapdragon Snapdragon AR2 Gen 1 Platform

Snapdragon Robotics RB2 Platform

Snapdragon WCD9380

Snapdragon QDX1011

Snapdragon Snapdragon 450 Mobile Platform

Snapdragon QRU1032

Snapdragon QCN6224

Snapdragon SA7775P

Snapdragon SD888

Snapdragon WCN3950

Snapdragon Snapdragon 780G 5G Mobile Platform

Snapdragon QCA6174A

Snapdragon AR8035

Snapdragon QDU1210

Snapdragon SA8620P

Snapdragon QCS9100

Snapdragon WSA8845

Snapdragon FastConnect 7800

Snapdragon Snapdragon 732G Mobile Platform (SM7150-AC)

Snapdragon QCN6024

Snapdragon QRU1062

Snapdragon PM8937

Snapdragon SG4150P

Snapdragon SDX61

Snapdragon Flight RB5 5G Platform

Snapdragon SD865 5G

Snapdragon Snapdragon 8 Gen 1 Mobile Platform

Snapdragon SRV1M

Snapdragon SM8635P

Snapdragon Snapdragon 680 4G Mobile Platform

Snapdragon Snapdragon 625 Mobile Platform

Snapdragon Snapdragon 4 Gen 1 Mobile Platform

Snapdragon QCM6490

Snapdragon WCN3660

Snapdragon SM8735

Snapdragon WCN7860

Snapdragon QCS4290

Snapdragon QRB5165N

Snapdragon Snapdragon 626 Mobile Platform

Snapdragon QAMSRV1H

Snapdragon SXR2330P

Snapdragon QFW7124

Snapdragon SA8145P

Snapdragon Snapdragon 8 Gen 2 Mobile Platform

Snapdragon Home Hub 100 Platform

Snapdragon WCN3660B

Snapdragon WCN3620

Snapdragon Snapdragon 8 Gen 3 Mobile Platform

Snapdragon Qualcomm Video Collaboration VC5 Platform

Snapdragon WSA8845H

Snapdragon Qualcomm Video Collaboration VC1 Platform

Snapdragon WCD9385

Snapdragon FastConnect 6800

Snapdragon Snapdragon 778G+ 5G Mobile Platform (SM7325-AE)

Snapdragon SM8750

Snapdragon SXR2130

Snapdragon Snapdragon AR1 Gen 1 Platform

Snapdragon Snapdragon XR2+ Gen 1 Platform

Snapdragon SA6155P

Snapdragon WCN6755

Snapdragon SA8770P

Snapdragon WCN3680

Snapdragon SXR2230P

Snapdragon QAM8620P

Snapdragon APQ8037

Snapdragon WCD9378

Snapdragon SA8195P

Snapdragon QCA6426

Snapdragon QCA8081

Snapdragon WCD9375

Snapdragon Snapdragon X62 5G Modem-RF System

Snapdragon WSA8815

Snapdragon QCA6436

Snapdragon Snapdragon 765 5G Mobile Platform (SM7250-AA)

Snapdragon Snapdragon 870 5G Mobile Platform (SM8250-AC)

Snapdragon Snapdragon 750G 5G Mobile Platform

Snapdragon WSA8840

Snapdragon WCD9340

Snapdragon Snapdragon X75 5G Modem-RF System

Snapdragon QCA6595AU

Snapdragon Snapdragon 8+ Gen 1 Mobile Platform

Snapdragon Smart Audio 400 Platform

Snapdragon QCS8250

Affects your stack

Find out whether the stacks and servers you run are on an affected version.

Checking this CVE against your own stacks and servers is part of the Basic plan and up.

Technical ContextAI · show details

A NULL pointer dereference occurs when the application attempts to use a pointer that has not been initialized or has been set to NULL.

Know when 215 Mobile Firmware gets its next vulnerability

Watch products and get an email when something new is published
Check this CVE against your own stack and servers
Exploit and PoC references, threat intelligence from 22 sources

Continue with Google Continue with GitHub

No credit card · 7-day full trial

Severity by source

NVD PRIMARY 6.2 MEDIUM

AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Primary rating from NVD · only source for this CVE.

CVSS VectorNVD

Attack Vector

Local

Attack Complexity

Low

Privileges Required

None

User Interaction

None

Scope

Unchanged

Confidentiality

None

Integrity

None

Availability

High

Executive ViewAI

Why It Matters

CVE-2025-21433 presents moderate security risk, a null pointer dereference vulnerability rated CVSS 6.2. Exploitation could compromise the security of affected deployments. Organizations should apply vendor updates when available and monitor for exploitation.

Business Impact: Low

Compensating Controls

Apply vendor patch. If patching is delayed: enable ASLR/DEP, apply network segmentation.

Threat Intelligence Overview

EPSS Score

0.0%

Top 96% exploitable

Data Quality

4 sources

Confidence: Medium

EUVD

NVD

CVE.org

EPSS

How this decision was reached

The engine reads each signal below and applies a fixed list of rules from top to bottom. The first rule that matches sets the recommended action – like a statement, every line is shown.

SignalValue

Severity MEDIUM

CISA KEV No

Public POC No

EPSS 0.0%

Patch available No

Active threat No

Deciding rule

MEDIUM severity (CVSS 4.0-6.9)

What every action level means

Emergency Immediate action required. Criteria: CRITICAL + in CISA KEV (actively exploited) without patch, OR CRITICAL + EPSS > 30% without patch, OR CRITICAL + active threat signals without patch.

Act Now Prioritize within 24-48h. Criteria: in KEV with patch available, OR CRITICAL + public POC, OR HIGH + EPSS > 10%, OR CRITICAL + active threat, OR any CRITICAL severity.

This Week Schedule remediation this week. Criteria: HIGH severity (CVSS 7.0-8.9). Patch within normal change window.

This Month Plan within 30 days. Criteria: MEDIUM severity (CVSS 4.0-6.9), lower exploitation probability. Include in regular patch cycle.

Monitor Track and reassess. Criteria: LOW severity (CVSS 0.1-3.9), minimal exploitation risk. No immediate action needed.