What’s Vulnerable › Vulnerabilities

CVE-2025-23421: Qardio iOS and Android applications Files or Directories Accessible to External Parties

• Severity: medium (CVSS 6.4 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 0.2% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2025-02-13 · updated 2026-06-17
• Weakness: CWE-552

Description

An attacker could obtain firmware files and reverse engineer their intended use leading to loss of confidentiality and integrity of the hardware devices enabled by the Qardio iOS and Android applications.

Affected products

• Qardio Heart Health Android Mobile Application: 2.5.1
• Qardio Heart Health IOS Mobile Application: 2.7.4

References

• https://www.cisa.gov/news-events/ics-medical-advisories/icsma-25-044-01
• https://www.qardio.com/about-us/#contact

Get alerted when CVE-2025-23421 or the next vulnerability affects your stack