CVE-2026-25265: Creation of Temporary File with Insecure Permissions in Qualcomm Software Center
Published Sep 22, 2026
·Updated
Privilege escalation due to weak configuration while temporary file handling.
Affected Software
8 affected components
Qualcomm Software Center
All of the following
Any of the following
Qualcomm Software Center=1.17.1
Qualcomm Software Center=1.19.1
Qualcomm Software Center=1.21.0
Qualcomm Software Center=1.22.1
Qualcomm Software Center=1.25.1
Qualcomm Software Center=1.26.0
Microsoft Windows
Event History
Sep 22, 2026
CVE Published
via MITRE·09:45 AM
Data Sourced
via MITRE·09:45 AM
DescriptionSeverityWeakness
Data Sourced
via NVD·10:17 AM
DescriptionSeverityWeaknessAffected Software
Frequently Asked Questions
1
What level of access does an attacker need to exploit this issue?
The attack vector is local and requires low privileges. No user interaction is required.
2
What is the potential impact of successful exploitation?
Successful exploitation can lead to privilege escalation, with high impact to confidentiality, integrity, and availability. The scope is changed, indicating impacts may extend beyond the initially vulnerable security authority.