Abstract: Embodiments of the present application relate to the technical field of communication transmission security, and in particular, to a method and a device for mining a security vulnerability of an air interface protocol, and a mobile terminal. The method for mining the security vulnerability of the air interface protocol includes: obtaining mutation data, the mutation data being generated according to a fuzzing task; obtaining a service message of the air interface protocol; modifying the service message according to the mutation data; sending the modified service message to a base station; and monitoring a state of the base station, and recording a security vulnerability log according to the state of the base station.