Volerion logoVolerion
Volerion logoVolerion

Qualcomm WLAN Host Buffer Over-read Vulnerability Allowing Memory Corruption

Vulnerability

A buffer over-read vulnerability has been identified in the WLAN Host component of Qualcomm chipsets. This vulnerability occurs when a Station (STA) connects to an Access Point (AP) and an ADD TS request is initiated from the AP to establish a TSpec session. The vulnerability leads to memory corruption by improperly handling the timing or content of the transmitted data.

Impact

Exploitation of this vulnerability causes memory corruption, which can lead to arbitrary code execution or local denial-of-service conditions.

Reproduction

To reproduce this vulnerability, connect a device to an Access Point (AP) and initiate an ADD TS request from the AP to the device. This process can be done using standard Wi-Fi management tools or scripts that automate the connection and request initiation.

Remediation

Qualcomm has released patches for this vulnerability. Instructions for applying the patch can be found in the Qualcomm April 2025 Security Bulletin.

Added: Jun 9, 2025, 7:46 PM
Updated: Jun 9, 2025, 7:46 PM

Vulnerability Rating

Custom Algorithm
spread
8.1
impact
2.5
exploitability
7.3
remediation
7.7
relevance
0.0
threat
1.6
urgency
2.9
incentive
5.8

Our algorithm analyzes dozens of metrics to generate these 8 key vulnerability categories, which are then combined to calculate the overall risk score.