8.8High

CVE-2026-25264Uncontrolled Search Path Element in Qualcomm Software Center

Qualcomm, Inc. Snapdragon Published: (1 month ago)

Description

Privilege escalation due to weak configuration during package extraction process.

Weakness (CWE): CWE-427

Data: CVE.org, NVD, CISA KEV, FIRST EPSS, Ubuntu. Published as the sources state it, in English.

Affected products and versions

VendorProductVersions
Qualcomm, Inc. Snapdragon QSCv1.17.1, QSCv1.19.1, QSCv1.21.0, QSCv1.22.1, QSCv1.25.1, QSCv1.26.0 on Windows
qualcomm software center 1.17.1

References and patches

CPE matches (NVD) (6)

  • cpe:2.3:a:qualcomm:software_center:1.17.1:*:*:*:*:*:*:*
  • cpe:2.3:a:qualcomm:software_center:1.19.1:*:*:*:*:*:*:*
  • cpe:2.3:a:qualcomm:software_center:1.21.0:*:*:*:*:*:*:*
  • cpe:2.3:a:qualcomm:software_center:1.22.1:*:*:*:*:*:*:*
  • cpe:2.3:a:qualcomm:software_center:1.25.1:*:*:*:*:*:*:*
  • cpe:2.3:a:qualcomm:software_center:1.26.0:*:*:*:*:*:*:*