Volerion logoVolerion
Volerion logoVolerion

Qualcomm WLAN Host Buffer Over-read Vulnerability Leading to Transient Denial-of-Service

Vulnerability

A buffer over-read vulnerability has been identified in the WLAN Host component of Qualcomm chipsets. This vulnerability can lead to a transient denial-of-service condition by causing a device to reset during a video call, due to the receipt of a non-conforming RTCP packet that violates RFC standards. The issue arises when a station (STA) connects to an access point (AP) and the AP initiates an ADD TS request to establish a TSpec session, creating a scenario where the vulnerability can be exploited.

Impact

Exploitation of this vulnerability can cause a temporary denial-of-service condition, disrupting active video calls by causing the device to reset.

Reproduction

To reproduce this vulnerability, connect a station to an access point and initiate an ADD TS request from the access point to establish a TSpec session. During this process, a non-conforming RTCP packet that does not adhere to RFC standards can be introduced, causing the device to reset and disrupt the video call.

Remediation

Qualcomm has released patches for this vulnerability. Instructions for applying the patch can be found in the Qualcomm April 2025 Security Bulletin.

Added: Jun 9, 2025, 7:46 PM
Updated: Jun 9, 2025, 7:46 PM

Vulnerability Rating

Custom Algorithm
spread
8.1
impact
0.6
exploitability
8.1
remediation
0.0
relevance
0.0
threat
1.6
urgency
2.9
incentive
10.0

Our algorithm analyzes dozens of metrics to generate these 8 key vulnerability categories, which are then combined to calculate the overall risk score.