IP-DB.com
Türkçe English Deutsch Español
Log In Get API Key
8.8High

CVE-2026-25255Exposed function in Qualcomm Package Manager and Qualcomm Software Center.

Qualcomm, Inc. Snapdragon Published: (1 month ago)

Description

Exposed dangerous function lead to privilege escalation via gRPC server.

Weakness (CWE): CWE-749

Data: CVE.org, NVD, CISA KEV, FIRST EPSS, Ubuntu. Published as the sources state it, in English.

Affected products and versions

VendorProductVersions
qualcomm package manager 3.0.125.4
Qualcomm, Inc. Snapdragon QSCv1.17.1, QSCv1.19.1, QSCv1.21.0, QPMv3.0.125.4, QPMv3.0.126.7, QPMv3.0.127.2
qualcomm software center 1.17.1

References and patches

CPE matches (NVD) (6)
  • cpe:2.3:a:qualcomm:package_manager:3.0.125.4:*:*:*:*:*:*:*
  • cpe:2.3:a:qualcomm:package_manager:3.0.126.7:*:*:*:*:*:*:*
  • cpe:2.3:a:qualcomm:package_manager:3.0.127.2:*:*:*:*:*:*:*
  • cpe:2.3:a:qualcomm:software_center:1.17.1:*:*:*:*:*:*:*
  • cpe:2.3:a:qualcomm:software_center:1.19.1:*:*:*:*:*:*:*
  • cpe:2.3:a:qualcomm:software_center:1.21.0:*:*:*:*:*:*:*