CVE-2026-25265 Creation of Temporary File with Insecure Permissions in Qualcomm Software Center

Privilege escalation due to weak configuration while temporary file handling...

CVE-2026-25265 Creation of Temporary File with Insecure Permissions in Qualcomm Software Center

Privilege escalation due to weak configuration while temporary file handling...

CVE-2026-25265

CVE-2026-25265 affects Qualcomm Software Center , where a privilege escalation is possible due to the creation of a temporary file with insecure permissions . The root cause is a weak configuration during temporary file handling, allowing a local attacker with low privileges to gain full control ...

CVE-2026-25264

Qualcomm Software Center is affected by an uncontrolled search path element vulnerability arising from weak configuration during its package extraction process. A local user with low privileges can exploit this to escalate privileges, with changed scope and high impact on confidentiality, integri...

CVE-2026-25264 Uncontrolled Search Path Element in Qualcomm Software Center

Privilege escalation due to weak configuration during package extraction process...

CVE-2026-25264 Uncontrolled Search Path Element in Qualcomm Software Center

Privilege escalation due to weak configuration during package extraction process...

CVE-2026-25255 Exposed function in Qualcomm Package Manager and Qualcomm Software Center.

Exposed dangerous function lead to privilege escalation via gRPC server...

CVE-2026-25254 Improper authorization in Qualcomm Software Center

Improper authorization leads to Remote Code Execution via SocketIO interface...

CVE-2026-25254

CVE-2026-25254 is a critical (CVSS 9.8) improper authorization vulnerability in Qualcomm Software Center (QSC family) , where deficiencies in the authentication process via the SocketIO interface allow a remote, unauthenticated attacker to achieve Remote Code Execution with high impact on confide...

CVE-2026-25254 Improper authorization in Qualcomm Software Center

Improper authorization leads to Remote Code Execution via SocketIO interface...

The vulnerability of embedded Qualcomm microprogramming software, related to buffer overflows in dynamic memory, allows attackers to cause memory corruption.

The vulnerability of embedded Qualcomm software is related to the overflow of buffers in dynamic memory. Exploiting this vulnerability can allow an attacker to cause memory corruption...

The vulnerability of embedded Qualcomm microprogramming software, related to reading data beyond the buffer in memory, allows attackers to disclose protected information.

The vulnerability of embedded Qualcomm software lies in the reading of data beyond the buffer in memory. Exploiting this vulnerability can allow an attacker to disclose protected information...

The vulnerability of embedded Qualcomm microprogramming software, related to reading data beyond the buffer in memory, allows attackers to disclose protected information.

The vulnerability of embedded Qualcomm software lies in the reading of data beyond the buffer in memory. Exploiting this vulnerability can allow an attacker to disclose protected information during the processing of the MBN file hash segment...

The vulnerability of embedded Qualcomm software-related microprogramming systems, related to unreliable pointer assignment during IOCTL processing, allows attackers to trigger service failures.

The vulnerability of embedded Qualcomm software lies in the unreliable way in which pointers are managed during the processing of IOCTLs. Exploiting this vulnerability can allow attackers to cause service failures...

The vulnerability of microprogramming software in embedded Qualcomm chips, related to writing beyond the buffer boundaries, allows a hacker to execute arbitrary code.

The vulnerability of embedded Qualcomm software is related to writing beyond the buffer boundaries. Exploiting this vulnerability can allow an attacker to execute arbitrary code...

The vulnerability of Core Services components in embedded Qualcomm software allows attackers to compromise the confidentiality, integrity, and accessibility of protected information.

The vulnerability of Core Services components in embedded Qualcomm software lies in the copying of buffers without checking the size of the input data. Exploiting this vulnerability can allow attackers to compromise the confidentiality, integrity, and accessibility of the protected information...

The vulnerability of embedded software developed by Qualcomm, related to unvalidated array indexing, allows attackers to influence the integrity, accessibility, and confidentiality of protected information.

The vulnerability of microprogramming software in embedded Qualcomm chips is related to unverified array indexing. Exploiting this vulnerability can allow attackers to influence the integrity, accessibility, and confidentiality of the protected information...

The vulnerability of the EXTN Element ID Parser component in Qualcomm’s embedded software allows a hacker to execute arbitrary code.

The vulnerability of the EXTN Element ID Parser component in Qualcomm’s embedded software lies in its ability to read data beyond the permitted range of memory. Exploiting this vulnerability could allow an attacker to execute arbitrary code...

PT-2025-19859 · Qualcomm · Snapdragon +10

Name of the Vulnerable Software and Affected Versions: The product name cannot be determined. Description: Memory corruption can occur during user context dumps due to inadequate checks on buffer length. This issue is related to improper handling of buffer lengths, which can lead to memory...

The vulnerability of embedded Qualcomm microprogramming software, related to the ability to read data beyond the buffer in memory, allows attackers to execute arbitrary code.

The vulnerability of embedded Qualcomm software relates to the ability to read data beyond the buffer in memory. Exploiting this vulnerability can allow a hacker to execute arbitrary code...