CVE-2025-23421mediumCWE-552

CVE-2025-23421: medium-severity vulnerability in Qardio Heart Health Android Mobile Application

Qardio iOS and Android applications Files or Directories Accessible to External Parties

Published · Updated

Follow this CVE+ Monitor Heart Health IOS Mobile Application+ Monitor Heart Health Android Mobile Application

E-mail alert when it lands in KEV, gets a public PoC or its score goes up.

13Vexday Risk Score

No sign of exploitation. No public exploitation artifact known so far.

ssvc Trackcvss 6.9epss 0.2%
An attacker could obtain firmware files and reverse engineer their intended use leading to loss of confidentiality and integrity of the hardware devices enabled by the Qardio iOS and Android applications.
CVSS:4.0/AV:P/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:L/SC:N/SI:N/SA:N
Affected products
Qardio · Heart Health Android Mobile ApplicationQardio · Heart Health IOS Mobile Application
Related CVEs — Qardio Heart Health Android Mobile Application

In the same product, most dangerous first.

CVE-2025-24836MEDIUMQardio Heart Health IOS and Android Application and QardioARM A100 Uncaught ExceptionEPSS 0.2%CVE-2025-20615MEDIUMQardio Heart Health IOS Mobile Application Exposure of Private Personal Information to an Unauthorized ActorEPSS 0.2%