AI and data stack advisories

Severe, 6 weeks1496Projects326

1496 severe, 6 weeks · 326 projects

QualcommCVE-2026-25264

Qualcomm Snapdragon: privilege escalation

Qualcomm

CVE-2026-25264 · Published Sep 22, 2026 · updated Sep 25, 2026

High8.8
No fix yet
Qualcomm advisory

Privilege escalation due to weak configuration during package extraction process.

Affected versions

PackageAffectedFixed in
Snapdragon
Product
<= QSCv1.17.1No fix yet
<= QSCv1.19.1No fix yet
<= QSCv1.21.0No fix yet
<= QSCv1.22.1No fix yet
Details and references
CVSS 3.1
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H
Severity from
the vendor (its own CVE record or advisory)
Weakness
CWE-427

More Qualcomm advisories

All Qualcomm
High 8.8Sep 22Qualcomm Snapdragon: privilege escalationCVE-2026-25265no fix yetCritical 9.8Sep 22Qualcomm Snapdragon: improper authorizationCVE-2026-25254no fix yetHigh 8.8Sep 22Qualcomm Snapdragon: privilege escalationCVE-2026-25255no fix yetMedium 6.9Sep 22Qualcomm Snapdragon: memory corruptionCVE-2026-25262no fix yetHigh 7.4Sep 17Qualcomm Snapdragon: resource exhaustionCVE-2026-25281no fix yetHigh 7.9Sep 17Qualcomm Snapdragon: out-of-bounds readCVE-2026-25282no fix yet