Qualcomm WLAN Firmware Buffer Over-read Vulnerability Allowing Transient Denial-of-Service

A buffer over-read vulnerability has been identified in Qualcomm WLAN firmware, specifically in chipsets such as FastConnect 6800, 6900, and 7800, as well as several Snapdragon mobile platforms. This vulnerability leads to memory corruption by processing frames with malformed shared-key descriptors, causing a transient denial-of-service condition.

Impact

Exploitation of this vulnerability causes a transient denial-of-service condition by disrupting normal WLAN firmware operations, potentially leading to temporary loss of connectivity or functionality.

Remediation

Qualcomm has notified customers about this vulnerability and shared patch instructions. The patch can be applied by following the instructions available in the Qualcomm August 2025 Security Bulletin.