Strix
26.1K

CVE-2025-21465

MEDIUMCVSS 6.5/10EPSS 0.08%

Last modified

CVE-2025-21465 is a medium-severity vulnerability rated 6.5/10 on the CVSS scale. Information disclosure while processing the hash segment in an MBN file.. EPSS estimates a 0.08% chance of exploitation in the next 30 days.

Description

Information disclosure while processing the hash segment in an MBN file.

Metrics

CVSS 3.1
6.5/10

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:N/A:N

EPSS Probability
0.08%

0.2th percentile

Probability of exploitation in the next 30 days. Learn more

Weakness Enumeration

Affected Software

VendorProductVersions
Qualcomm315 5g Iot Modem FirmwareAll versions
Qualcomm9205 Lte Modem FirmwareAll versions
QualcommAqt1000 FirmwareAll versions
QualcommAr8031 FirmwareAll versions
QualcommAr8035 FirmwareAll versions
QualcommQcm2290 FirmwareAll versions
QualcommQcm4290 FirmwareAll versions
QualcommQcm4325 FirmwareAll versions
QualcommQcm4490 FirmwareAll versions
QualcommQcm5430 FirmwareAll versions
QualcommQcm6125 FirmwareAll versions
QualcommQcm6490 FirmwareAll versions
QualcommQcm8550 FirmwareAll versions
QualcommQcn5021 FirmwareAll versions
QualcommQcn5022 FirmwareAll versions
QualcommQcn5052 FirmwareAll versions
QualcommQcn5121 FirmwareAll versions
QualcommQcn5122 FirmwareAll versions
QualcommQcn5124 FirmwareAll versions
QualcommQcn5152 FirmwareAll versions
QualcommQcn6023 FirmwareAll versions
QualcommQcn6024 FirmwareAll versions
QualcommQcn6224 FirmwareAll versions
QualcommQcn6274 FirmwareAll versions
QualcommQcn6402 FirmwareAll versions
QualcommQcn6412 FirmwareAll versions
QualcommQcn6422 FirmwareAll versions
QualcommQcn6432 FirmwareAll versions
QualcommQcn7606 FirmwareAll versions
QualcommQcn9000 FirmwareAll versions
QualcommQcn9011 FirmwareAll versions
QualcommQcn9012 FirmwareAll versions
QualcommQcn9013 FirmwareAll versions
QualcommQcn9022 FirmwareAll versions
QualcommQcn9024 FirmwareAll versions
QualcommQcn9070 FirmwareAll versions
QualcommQcn9072 FirmwareAll versions
QualcommQcn9074 FirmwareAll versions
QualcommQcn9160 FirmwareAll versions
QualcommQcn9274 FirmwareAll versions
QualcommQcs2290 FirmwareAll versions
QualcommQcs410 FirmwareAll versions
QualcommQcs4290 FirmwareAll versions
QualcommQcs4490 FirmwareAll versions
QualcommQcs5430 FirmwareAll versions
QualcommSnapdragon 778g\+ 5g Mobile Platform \(Sm7325-Ae\) FirmwareAll versions
QualcommSnapdragon 780g 5g Mobile Platform FirmwareAll versions
QualcommSnapdragon 782g Mobile Platform \(Sm7325-Af\) FirmwareAll versions
QualcommSnapdragon 7c Compute Platform \(Sc7180-Ac\) FirmwareAll versions
QualcommSnapdragon 7c Gen 2 Compute Platform \(Sc7180-Ad\) \"Rennell Pro\" FirmwareAll versions

Showing 50 of 349 affected configurations. See NVD for the full list.

References

Timeline

Published
Last Modified
Status
Analyzed

Frequently Asked Questions

What is CVE-2025-21465?
Information disclosure while processing the hash segment in an MBN file.
How severe is CVE-2025-21465?
CVE-2025-21465 has a CVSS score of 6.5/10 (MEDIUM severity). The EPSS model estimates a 0.08% probability of exploitation in the next 30 days.
How do I fix CVE-2025-21465?
Check the vendor references and advisories linked above for patched versions and mitigation guidance. You can also run a Strix scan to test if your systems are affected.

Are you affected by CVE-2025-21465?

Run a free Strix scan to check your systems for this vulnerability.

Scan your code now

Source: NVD / NIST