Privilege Escalation Vulnerability in Qualcomm Products
CVE-2026-25264

8.8HIGH

Key Information:

Vendor

Qualcomm
Status
Snapdragon
Vendor
CVE Published:
22 September 2026

What is CVE-2026-25264?

A vulnerability has been identified in Qualcomm's software products stemming from a weak configuration during the package extraction process. This flaw can potentially allow an attacker to escalate privileges, compromising the security of the affected systems. It is crucial for users of Qualcomm software to apply necessary patches and follow security best practices to mitigate any risks associated with this vulnerability.

Affected Version(s)

Snapdragon Qualcomm Software Center QSCv1.17.1

Snapdragon Qualcomm Software Center QSCv1.19.1

Snapdragon Qualcomm Software Center QSCv1.21.0

References

https://docs.qualcomm.com/product/publicresources/securit...

CVSS V3.1

Score:
8.8
Severity:
HIGH
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Local
Attack Complexity:
Low
Privileges Required:
Low
User Interaction:
None
Scope:
Changed

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.