CVE-2026-25255

Analyzed Analyzed - Analysis Complete

BaseFortify

Publication date: 2026-09-22

Last updated on: 2026-10-06

Assigner: Qualcomm, Inc.

Description

Exposed dangerous function lead to privilege escalation via gRPC server.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published

2026-09-22

Last Modified

2026-10-06

Generated

2026-10-12

AI Q&A

2026-09-22

EPSS Evaluated

2026-10-11

NVD

CVE-2026-25255

EUVD

EUVD-2026-84345

Affected Vendors & Products

Vendor	Product	Version / Range
qualcomm	software_center	1.17.1
qualcomm	software_center	1.19.1
qualcomm	software_center	1.21.0
qualcomm	package_manager	3.0.125.4
qualcomm	package_manager	3.0.126.7
qualcomm	package_manager	3.0.127.2

Helpful Resources

Exploitability

CWE

KEV

CWE ID	Description
CWE-749	The product provides an Applications Programming Interface (API) or similar interface for interaction with external actors, but the interface includes a dangerous method or function that is not properly restricted.

Attack-Flow Graph

Executive Summary

This vulnerability involves an exposed dangerous function that allows privilege escalation through a gRPC server. It has a high impact on confidentiality, integrity, and availability of the system.

Impact Analysis

An attacker could exploit this to gain elevated privileges on the system, potentially leading to unauthorized access, data breaches, or system compromise. The high CVSS score indicates significant risk.

Compliance Impact

This vulnerability could lead to unauthorized access or data breaches, which may violate GDPR (data protection) and HIPAA (health data privacy) requirements. Compliance could be compromised due to potential exposure of sensitive data.

Mitigation Strategies

Disable the gRPC server if not required. Apply vendor patches if available. Restrict network access to the gRPC server port. Monitor for unusual privilege escalation attempts.

Hi! I’m here to help you understand CVE-2026-25255. Ask me anything about the vulnerability, its impact, or mitigation strategies.

0/70