Qualcomm Products Buffer Over-read Vulnerability in WLAN Host Communication

A buffer over-read vulnerability has been identified in various chipsets used in Qualcomm products. This vulnerability can lead to a transient denial-of-service condition by causing a device to reset during a video call, due to the receipt of a non-conforming RTCP packet that does not adhere to RFC standards. The issue arises while parsing extended information elements in beacons, particularly in the context of WLAN host communication.

Impact

Exploitation of this vulnerability can cause a temporary denial-of-service condition, where the device resets and disrupts ongoing activities, such as a video call.

Remediation

Qualcomm has released patches for this vulnerability, which can be applied by device manufacturers. Instructions for applying the patch are available in the Qualcomm April 2025 Security Bulletin.