8.8High

CVE-2026-25265Creation of Temporary File with Insecure Permissions in Qualcomm Software Center

Qualcomm, Inc. Snapdragon Published: (1 month ago)

Description

Privilege escalation due to weak configuration while temporary file handling.

Weakness (CWE): CWE-378

Data: CVE.org, NVD, CISA KEV, FIRST EPSS, Ubuntu. Published as the sources state it, in English.

Affected products and versions

VendorProductVersions
Qualcomm, Inc. Snapdragon QSCv1.17.1, QSCv1.19.1, QSCv1.21.0, QSCv1.22.1, QSCv1.25.1, QSCv1.26.0 on Windows
qualcomm software center 1.17.1

References and patches

CPE matches (NVD) (6)

  • cpe:2.3:a:qualcomm:software_center:1.17.1:*:*:*:*:*:*:*
  • cpe:2.3:a:qualcomm:software_center:1.19.1:*:*:*:*:*:*:*
  • cpe:2.3:a:qualcomm:software_center:1.21.0:*:*:*:*:*:*:*
  • cpe:2.3:a:qualcomm:software_center:1.22.1:*:*:*:*:*:*:*
  • cpe:2.3:a:qualcomm:software_center:1.25.1:*:*:*:*:*:*:*
  • cpe:2.3:a:qualcomm:software_center:1.26.0:*:*:*:*:*:*:*