Volerion logoVolerion
Volerion logoVolerion

Qualcomm Snapdragon Products Buffer Over-Read Vulnerability in WLAN Firmware Allowing Denial-of-Service

Vulnerability

A buffer over-read vulnerability has been identified in the WLAN firmware of various chipsets used in Qualcomm Snapdragon products. This vulnerability can lead to a transient denial-of-service condition by causing memory corruption when the firmware processes vendor-specific information elements in WLAN frames, particularly for BTM requests. The issue arises from improper handling of length fields, which can create inconsistencies in how data is read and processed, potentially leading to memory being accessed out of bounds.

Impact

Exploitation of this vulnerability can cause a temporary denial-of-service condition by disrupting normal WLAN operations, such as processing beacon frames or handling BTM requests, which can lead to increased latency or dropped connections.

Remediation

Qualcomm has released patches for this vulnerability, which can be applied by device manufacturers. Instructions for applying the patch are available in the Qualcomm July 2025 Security Bulletin.

Added: Jul 8, 2025, 2:46 PM
Updated: Jul 8, 2025, 2:46 PM

Vulnerability Rating

Custom Algorithm
spread
7.8
impact
0.6
exploitability
3.3
remediation
0.0
relevance
0.2
threat
0.0
urgency
2.9
incentive
0.8

Our algorithm analyzes dozens of metrics to generate these 8 key vulnerability categories, which are then combined to calculate the overall risk score.