AI and data stack advisories

Severe, 6 weeks1496Projects326

1496 severe, 6 weeks · 326 projects

QualcommCVE-2026-25254

Qualcomm Snapdragon: improper authorization

Qualcomm

CVE-2026-25254 · Published Sep 22, 2026 · updated Sep 25, 2026

Critical9.8
No fix yet
Qualcomm advisory

Improper authorization leads to Remote Code Execution via SocketIO interface.

Affected versions

PackageAffectedFixed in
Snapdragon
Product
<= QSCv1.17.1No fix yet
<= QSCv1.19.1No fix yet
<= QSCv1.21.0No fix yet
Details and references
CVSS 3.1
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Severity from
the vendor (its own CVE record or advisory)
Weakness
CWE-285

More Qualcomm advisories

All Qualcomm
High 8.8Sep 22Qualcomm Snapdragon: privilege escalationCVE-2026-25264no fix yetHigh 8.8Sep 22Qualcomm Snapdragon: privilege escalationCVE-2026-25265no fix yetHigh 8.8Sep 22Qualcomm Snapdragon: privilege escalationCVE-2026-25255no fix yetMedium 6.9Sep 22Qualcomm Snapdragon: memory corruptionCVE-2026-25262no fix yetHigh 7.4Sep 17Qualcomm Snapdragon: resource exhaustionCVE-2026-25281no fix yetHigh 7.9Sep 17Qualcomm Snapdragon: out-of-bounds readCVE-2026-25282no fix yet