Qualcomm WLAN Firmware Buffer Over-Read Vulnerability in Beacon Frame Processing

A buffer over-read vulnerability has been identified in the WLAN firmware of various chipsets, including those used in Qualcomm's 5G IoT Modem and several Snapdragon mobile platforms. This vulnerability can lead to a transient denial-of-service condition by causing memory corruption while processing received beacon frames, particularly when the frames contain invalid information elements.

Impact

Exploitation of this vulnerability can cause memory corruption, leading to a transient denial-of-service condition by disrupting normal processing and potentially causing a crash or similar interruption.

Remediation

Qualcomm has released patches for this vulnerability, which can be applied by device manufacturers. Instructions for applying the patch are available in the Qualcomm July 2025 Security Bulletin.