CVE-2026-25254 PUBLISHED

Improper authorization in Qualcomm Software Center

Assigner: qualcomm
Reserved: 02.02.2026 Published: 22.09.2026 Updated: 22.09.2026

Improper authorization leads to Remote Code Execution via SocketIO interface.

Metrics

CVSS Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
CVSS Score: 9.8

Product Status

Vendor Qualcomm, Inc.
Product Snapdragon
Versions Default: unaffected
  • Version QSCv1.17.1 is affected
  • Version QSCv1.19.1 is affected
  • Version QSCv1.21.0 is affected

References

Problem Types

  • CWE-285: Improper Authorization CWE