CVE-2026-25255: package manager 3.0.125.4, 3.0.126.7, 3.0.127.2; +2 more affected products

Affected technology

package manager · 3.0.125.4
qualcomm

package manager · 3.0.126.7
qualcomm

package manager · 3.0.127.2
qualcomm

software center · 1.17.1
qualcomm

software center · 1.19.1
qualcomm

software center · 1.21.0
qualcomm

Snapdragon · QSCv1.17.1, QSCv1.19.1, QSCv1.21.0, QPMv3.0.125.4, QPMv3.0.126.7, QPMv3.0.127.2
Qualcomm, Inc.

Component: Not specified by the source
Function: lead

Attack conditions (Vendor/CNA, CVSS 3.1): Local · Low privileges required · No user interaction required

Attack conditions (NVD, CVSS 3.1): Local · Low privileges required · No user interaction required

What an attacker can do

The source reports that an attacker could gain higher privileges. Vendor/CNA’s CVSS 3.1 assessment (base score 8.8/10) rates confidentiality, integrity and availability impact as high. NVD’s CVSS 3.1 assessment (base score 7.8/10) rates confidentiality, integrity and availability impact as high.