CVE-2026-25254

Name of the Vulnerable Software and Affected Versions Qualcomm QSC family (affected versions not specified)

Description Improper authorization in the firmware of the Qualcomm QSC integrated circuit family allows a remote attacker to achieve Remote Code Execution (RCE), which is the ability to execute arbitrary commands on a target machine. This issue occurs via the SocketIO interface.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.