CVE-2025-24836 — Qardio Heart Health IOS and Android Application and QardioARM A100 Uncaught Exception
With a specially crafted Python script, an attacker could send continuous startMeasurement commands over an unencrypted Bluetooth connection to the affected device. This would…
Published: 2025-02-13 · CVSS: 6.1 · CVSS 4.0
With a specially crafted Python script, an attacker could send continuous startMeasurement commands over an unencrypted Bluetooth connection to the affected device. This would prevent the device from connecting to a clinician's app to take patient readings and ostensibly flood it with requests, resulting in a denial-of-service condition.
Source: CVE Program · Revision 8b16575c39f1e1810c5e863010da073d2d3285e7