First day on Intigriti: our agent harness found and proved a remote code execution bug in Odoo's program.

CVE-2025-21450

CriticalCVSS 9.1/10Last modified Jun 17, 2026

Description

Cryptographic issue occurs due to use of insecure connection method while downloading.

Metrics

CVSS 3.1 9.1/10CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N

Weakness enumeration

CWE-287 CWE-863

Affected software

Vendor	Product	Versions
Qualcomm, Inc.	Snapdragon	AR8035; FastConnect 6200; FastConnect 6700; FastConnect 6900; FastConnect 7800; QCA6174A; QCA6391; QCA6574A; QCA6574AU; QCA6584AU; QCA6595AU; QCA6678AQ; QCA6688AQ; QCA6696; QCA6698AQ; QCA6698AU; QCA6797AQ; QCA8081; QCA8337; QCC710

References

https://docs.qualcomm.com/product/publicresources/securitybulletin/july-2025-bulletin.htmlVendor Advisory

Timeline

Published: Jul 8, 2025
Last modified: Jun 17, 2026
NVD status: Analyzed

Related CVEs from 2025

CVE-2025-214527.5Transient DOS while processing a random-access response (RAR) with an invalid PDU length on LTE network.CVE-2025-214537.8Memory corruption while processing a data structure, when an iterator is accessed after it has been removed, potential failures occur.CVE-2025-214547.5Transient DOS while processing received beacon frame.CVE-2025-214557.8Memory corruption while submitting blob data to kernel space though IOCTL.CVE-2025-214567.8Memory corruption while processing IOCTL command when multiple threads are called to map/unmap buffer concurrently.CVE-2025-214576.1Information disclosure while opening a fastrpc session when domain is not sanitized.CVE-2025-214587.8Memory corruption when IOCTL interface is called to map and unmap buffers simultaneously.CVE-2025-214597.5Transient DOS while parsing per STA profile in ML IE.CVE-2025-21469.8Buffer overflow in WebService Authentication processing of Small Office Multifunction Printers and Laser Printers(*) which may allow an atta CVE-2025-214607.8Memory corruption while processing a message, when the buffer is controlled by a Guest VM, the value can be changed continuously.CVE-2025-214617.8Memory corruption when programming registers through virtual CDM.CVE-2025-214627.8Memory corruption while processing an IOCTL request, when buffer significantly exceeds the command argument limit.

CVE-2025-21450: Critical severity, CVSS 9.1 | Vulnix