CVE-2026-25255: Exposed function in Qualcomm Package Manager and Qualcomm Software Center.
Published Sep 22, 2026
·Updated
Exposed dangerous function lead to privilege escalation via gRPC server.
Affected Software
2 affected components
Qualcomm Qualcomm Package Manager
Qualcomm Qualcomm Software Center
Event History
Sep 22, 2026
CVE Published
via MITRE·09:45 AM
Data Sourced
via MITRE·09:45 AM
DescriptionSeverityWeakness
Data Sourced
via NVD·10:17 AM
DescriptionSeverityWeakness
Frequently Asked Questions
1
What level of access does an attacker need to exploit this issue?
The attack vector is local and requires low privileges. No user interaction is required.
2
What is the potential impact of successful exploitation?
Successful exploitation can lead to privilege escalation through the gRPC server. The vulnerability is rated high severity with high confidentiality, integrity, and availability impact, and affects a changed security scope.