CVE-2025-24836mediumCWE-248

CVE-2025-24836: falha de média gravidade em QardioARM

Qardio Heart Health IOS and Android Application and QardioARM A100 Uncaught Exception

Publicada em · Atualizada em

Seguir esta CVE+ Monitorar Heart Health IOS Mobile Application+ Monitorar Heart Health Android Mobile Application

Aviso por e-mail quando ela entrar no KEV, ganhar PoC pública ou subir de nota.

13Vexday Risk Score

Sem sinal de exploração. Nenhum artefato público de exploração conhecido até agora.

ssvc Trackcvss 6.1epss 0.2%
With a specially crafted Python script, an attacker could send continuous startMeasurement commands over an unencrypted Bluetooth connection to the affected device. This would prevent the device from connecting to a clinician's app to take patient readings and ostensibly flood it with requests, resulting in a denial-of-service condition.
CVSS:4.0/AV:A/AC:H/AT:N/PR:N/UI:N/VC:L/VI:H/VA:H/SC:N/SI:N/SA:N
Produtos afetados
Qardio · Heart Health Android Mobile ApplicationQardio · Heart Health IOS Mobile ApplicationQardio · QardioARM
CVEs relacionadas — QardioARM

No mesmo produto, das mais perigosas para as menos.

CVE-2025-20615MEDIUMQardio Heart Health IOS Mobile Application Exposure of Private Personal Information to an Unauthorized ActorEPSS 0.2%CVE-2025-23421MEDIUMQardio iOS and Android applications Files or Directories Accessible to External PartiesEPSS 0.2%