Volerion logoVolerion
Volerion logoVolerion

Qualcomm WLAN Host Buffer Over-read Vulnerability Allowing Memory Corruption

Vulnerability

A buffer over-read vulnerability has been identified in the WLAN Host component of Qualcomm chipsets. This vulnerability occurs when a Station (STA) connects to an Access Point (AP) and the AP initiates an ADD TS request to establish a TSpec session. The vulnerability leads to memory corruption by improperly handling the timing and size of the data being processed, which can cause a device to reset during a video call, disrupting the connection.

Impact

Exploitation of this vulnerability causes memory corruption, which can lead to a denial-of-service condition by causing the device to reset unexpectedly.

Reproduction

To reproduce this vulnerability, connect a device with the affected chipset to an Access Point (AP) that initiates an ADD TS request. This can be done by using a device that supports the IEEE 802.11 EHT (Extremely High Throughput) standard, which is capable of sending such requests. Once the ADD TS request is received, the device will process the request, leading to a buffer over-read and memory corruption.

Remediation

Qualcomm has released patches for this vulnerability. Instructions for applying the patch can be found in the Qualcomm April 2025 Security Bulletin.

Added: Jun 9, 2025, 7:46 PM
Updated: Jun 9, 2025, 7:46 PM

Vulnerability Rating

Custom Algorithm
spread
8.1
impact
2.5
exploitability
7.3
remediation
0.0
relevance
0.0
threat
1.6
urgency
2.9
incentive
5.0

Our algorithm analyzes dozens of metrics to generate these 8 key vulnerability categories, which are then combined to calculate the overall risk score.