What is CVE-2025-23421?

CVE-2025-23421 is a medium-severity vulnerability in Qardio Heart Health Android Mobile Application, classified under Files or Directories Accessible to External Parties. CVSS score: 6.4/10. Published 2025-02-13.

How severe is CVE-2025-23421?

Medium severity. CVSS v3 base score is 6.4 out of 10.

Vulnerability in Qardio Heart Health Android Mobile Application

CVE-2025-23421

An attacker could obtain firmware files and reverse engineer their intended use leading to loss of confidentiality and integrity of the hardware devices enabled by the Qardio iOS and Android applications.

EPSS: 0.002 (11.2th percentile) — read the EPSS interpretation.

CVSS v3 metric

CVSS v3 base score 6.4 (Medium). Vector: CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:L.

Affected products

Qardio Heart Health Android Mobile Application — versions 2.5.1
Qardio Heart Health Ios Mobile Application — versions 2.7.4

Weakness classification (CWE)

CWE-552 — Files or Directories Accessible to External Parties

References

Frequently asked questions

What is CVE-2025-23421?: CVE-2025-23421 is a medium-severity vulnerability in Qardio Heart Health Android Mobile Application, classified under Files or Directories Accessible to External Parties. CVSS score: 6.4/10. Published 2025-02-13.
How severe is CVE-2025-23421?: Medium severity. CVSS v3 base score is 6.4 out of 10.