Primary

Context

Qualcomm Snapdragon Products WLAN Firmware Denial-of-Service Vulnerability via NDP Instance Creation

Vulnerability

A denial-of-service vulnerability has been identified in the WLAN firmware of various chipsets within Qualcomm Snapdragon products. This issue arises from a reachable assertion that occurs during the creation of Neighbor Discovery Protocol (NDP) instances, leading to a transient denial-of-service condition.

Impact

Exploitation of this vulnerability causes a temporary denial-of-service condition by disrupting the normal operation of the affected device's WLAN functionality.

Remediation

Qualcomm has notified customers about this vulnerability and is actively sharing patches with device manufacturers. Instructions for applying the patch can be found in the Qualcomm August 2025 Security Bulletin.

Added: Aug 6, 2025, 8:59 AM

Updated: Aug 6, 2025, 8:59 AM

Affected Products

Qualcomm FastConnect 6800

Moderate fix1 remedy

cpe:2.3:h:qualcomm:fastconnect_6800:*:*:*:*:*:*:*, +1 more

Moderate fix1 remedy

>= 12.1X46, < 12.1X46-D81

Qualcomm FastConnect 6900

Moderate fix1 remedy

cpe:2.3:h:qualcomm:fastconnect_6900:*:*:*:*:*:*:*, +1 more

Moderate fix1 remedy

>= 12.1X46, < 12.1X46-D81

Qualcomm FastConnect 7800

Moderate fix1 remedy

cpe:2.3:o:qualcomm:fastconnect_7800_firmware:*:*:*:*:*:*:*, +1 more

Moderate fix1 remedy

>= 12.1X46, < 12.1X46-D81

Qualcomm Immersive Home 214

Moderate fix1 remedy

cpe:2.3:h:qualcomm:immersive_home_214:*:*:*:*:*:*:*, +1 more

Moderate fix1 remedy

>= 12.1X46, < 12.1X46-D81

Qualcomm Immersive Home 216

Moderate fix1 remedy

cpe:2.3:h:qualcomm:immersive_home_216:*:*:*:*:*:*:*, +1 more

Moderate fix1 remedy

>= 12.1X46, < 12.1X46-D81

Qualcomm Immersive Home 316

Moderate fix1 remedy

cpe:2.3:h:qualcomm:immersive_home_316:*:*:*:*:*:*:*, +1 more

Moderate fix1 remedy

>= 12.1X46, < 12.1X46-D81

Qualcomm Immersive Home 318

Moderate fix1 remedy

cpe:2.3:h:qualcomm:immersive_home_318:*:*:*:*:*:*:*, +1 more

Moderate fix1 remedy

>= 12.1X46, < 12.1X46-D81

Qualcomm IPQ5010

0 remedies

cpe:2.3:h:qualcomm:ipq5010:*:*:*:*:*:*:*

0 remedies

Qualcomm IPQ5028

Moderate fix1 remedy

cpe:2.3:h:qualcomm:ipq5028:*:*:*:*:*:*:*, +2 more

Moderate fix1 remedy

>= 12.1X46, < 12.1X46-D81

Qualcomm IPQ6000

Moderate fix1 remedy

cpe:2.3:h:qualcomm:ipq6000:*:*:*:*:*:*:*, +1 more

Moderate fix1 remedy

>= 12.1X46, < 12.1X46-D81

Qualcomm IPQ6010

0 remedies

cpe:2.3:h:qualcomm:ipq6010:*:*:*:*:*:*:*

0 remedies

Qualcomm IPQ6018

Moderate fix1 remedy

cpe:2.3:o:qualcomm:ipq6018_firmware:*:*:*:*:*:*:*, +2 more

Moderate fix1 remedy

>= 12.1X46, < 12.1X46-D81

Qualcomm IPQ6028

Moderate fix1 remedy

cpe:2.3:o:qualcomm:ipq6028_firmware:*:*:*:*:*:*:*, +1 more

Moderate fix1 remedy

>= 12.1X46, < 12.1X46-D81

Qualcomm IPQ8070A

Moderate fix1 remedy

cpe:2.3:h:qualcomm:ipq8070a:*:*:*:*:*:*:*, +1 more

Moderate fix1 remedy

>= 12.1X46, < 12.1X46-D81

Qualcomm IPQ8071A

Moderate fix1 remedy

cpe:2.3:h:qualcomm:ipq8071a:*:*:*:*:*:*:*, +1 more

Moderate fix1 remedy

>= 12.1X46, < 12.1X46-D81

Qualcomm IPQ8072A

Moderate fix1 remedy

cpe:2.3:o:qualcomm:ipq8072a_firmware:*:*:*:*:*:*:*, +1 more

Moderate fix1 remedy

>= 12.1X46, < 12.1X46-D81

Qualcomm IPQ8074A

Moderate fix1 remedy

cpe:2.3:h:qualcomm:ipq8074a:*:*:*:*:*:*:*, +1 more

Moderate fix1 remedy

>= 12.1X46, < 12.1X46-D81

Qualcomm IPQ8076A

Moderate fix1 remedy

cpe:2.3:o:qualcomm:ipq8076a_firmware:*:*:*:*:*:*:*, +1 more

Moderate fix1 remedy

>= 12.1X46, < 12.1X46-D81

Qualcomm IPQ8078A

Moderate fix1 remedy

cpe:2.3:h:qualcomm:ipq8078a:*:*:*:*:*:*:*, +1 more

Moderate fix1 remedy

>= 12.1X46, < 12.1X46-D81

Qualcomm IPQ8173

0 remedies

cpe:2.3:h:qualcomm:ipq8173:*:*:*:*:*:*:*

0 remedies

Qualcomm IPQ8174

Moderate fix1 remedy

cpe:2.3:h:qualcomm:ipq8174:*:*:*:*:*:*:*, +2 more

Moderate fix1 remedy

>= 12.1X46, < 12.1X46-D81

Qualcomm IPQ9008

Moderate fix1 remedy

cpe:2.3:h:qualcomm:ipq9008:*:*:*:*:*:*:*, +1 more

Moderate fix1 remedy

>= 12.1X46, < 12.1X46-D81

Qualcomm IPQ9554

Moderate fix1 remedy

cpe:2.3:o:qualcomm:ipq9554_firmware:*:*:*:*:*:*:*, +1 more

Moderate fix1 remedy

>= 12.1X46, < 12.1X46-D81

Qualcomm IPQ9570

Moderate fix1 remedy

cpe:2.3:o:qualcomm:ipq9570_firmware:*:*:*:*:*:*:*, +1 more

Moderate fix1 remedy

>= 12.1X46, < 12.1X46-D81

Qualcomm IPQ9574

Moderate fix1 remedy

cpe:2.3:o:qualcomm:ipq9574_firmware:*:*:*:*:*:*:*, +1 more

Moderate fix1 remedy

>= 12.1X46, < 12.1X46-D81

Qualcomm QAM8255P

Moderate fix1 remedy

cpe:2.3:o:qualcomm:qam8255p_firmware:*:*:*:*:*:*:*, +1 more

Moderate fix1 remedy

>= 12.1X46, < 12.1X46-D81

Qualcomm QAM8650P

Moderate fix1 remedy

cpe:2.3:o:qualcomm:qam8650p_firmware:*:*:*:*:*:*:*, +1 more

Moderate fix1 remedy

>= 12.1X46, < 12.1X46-D81

Qualcomm QAM8775P

Moderate fix1 remedy

cpe:2.3:h:qualcomm:qam8775p:*:*:*:*:*:*:*, +1 more

Moderate fix1 remedy

>= 12.1X46, < 12.1X46-D81

Qualcomm QAMSRV1H

Moderate fix1 remedy

cpe:2.3:h:qualcomm:qamsrv1h:*:*:*:*:*:*:*, +1 more

Moderate fix1 remedy

>= 12.1X46, < 12.1X46-D81

Qualcomm QAMSRV1M

Moderate fix1 remedy

cpe:2.3:o:qualcomm:qamsrv1m_firmware:*:*:*:*:*:*:*, +1 more

Moderate fix1 remedy

>= 12.1X46, < 12.1X46-D81

Qualcomm QCA4024

Moderate fix1 remedy

cpe:2.3:o:qualcomm:qca4024_firmware:*:*:*:*:*:*:*, +1 more

Moderate fix1 remedy

>= 12.1X46, < 12.1X46-D81

Qualcomm QCA6391

Moderate fix1 remedy

cpe:2.3:h:qualcomm:qca6391:*:*:*:*:*:*:*, +1 more

Moderate fix1 remedy

>= 12.1X46, < 12.1X46-D81

Qualcomm QCA6426

Moderate fix1 remedy

cpe:2.3:h:qualcomm:qca6426:*:*:*:*:*:*:*, +1 more

Moderate fix1 remedy

>= 12.1X46, < 12.1X46-D81

Qualcomm QCA6436

Moderate fix1 remedy

cpe:2.3:h:qualcomm:qca6436:*:*:*:*:*:*:*, +1 more

Moderate fix1 remedy

>= 12.1X46, < 12.1X46-D81

Qualcomm QCA6554A

Moderate fix1 remedy

cpe:2.3:o:qualcomm:qca6554a_firmware:*:*:*:*:*:*:*, +1 more

Moderate fix1 remedy

>= 12.1X46, < 12.1X46-D81

Qualcomm QCA6564AU

Moderate fix1 remedy

cpe:2.3:h:qualcomm:qca6564au:*:*:*:*:*:*:*, +1 more

Moderate fix1 remedy

>= 12.1X46, < 12.1X46-D81

Qualcomm QCA6574

Moderate fix1 remedy

cpe:2.3:h:qualcomm:qca6574:*:*:*:*:*:*:*, +1 more

Moderate fix1 remedy

>= 12.1X46, < 12.1X46-D81

Qualcomm QCA6574A

Moderate fix1 remedy

cpe:2.3:h:qualcomm:qca6574a:*:*:*:*:*:*:*, +1 more

Moderate fix1 remedy

>= 12.1X46, < 12.1X46-D81

Qualcomm QCA6574AU

Moderate fix1 remedy

cpe:2.3:o:qualcomm:qca6574au_firmware:*:*:*:*:*:*:*, +1 more

Moderate fix1 remedy

>= 12.1X46, < 12.1X46-D81

Qualcomm QCA6584AU

Moderate fix1 remedy

cpe:2.3:h:qualcomm:qca6584au:*:*:*:*:*:*:*, +1 more

Moderate fix1 remedy

>= 12.1X46, < 12.1X46-D81

Qualcomm QCA6595

Moderate fix1 remedy

cpe:2.3:h:qualcomm:qca6595:*:*:*:*:*:*:*, +1 more

Moderate fix1 remedy

>= 12.1X46, < 12.1X46-D81

Qualcomm QCA6595AU

Moderate fix1 remedy

cpe:2.3:o:qualcomm:qca6595au_firmware:*:*:*:*:*:*:*, +1 more

Moderate fix1 remedy

>= 12.1X46, < 12.1X46-D81

Qualcomm QCA6678AQ

Moderate fix1 remedy

cpe:2.3:h:qualcomm:qca6678aq:*:*:*:*:*:*:*, +1 more

Moderate fix1 remedy

>= 12.1X46, < 12.1X46-D81

Qualcomm QCA6688AQ

Moderate fix1 remedy

cpe:2.3:h:qualcomm:qca6688aq:*:*:*:*:*:*:*, +1 more

Moderate fix1 remedy

>= 12.1X46, < 12.1X46-D81

Qualcomm QCA6696

Moderate fix1 remedy

cpe:2.3:o:qualcomm:qca6696_firmware:*:*:*:*:*:*:*, +1 more

Moderate fix1 remedy

>= 12.1X46, < 12.1X46-D81

Qualcomm QCA6698AQ

Moderate fix1 remedy

cpe:2.3:h:qualcomm:qca6698aq:*:*:*:*:*:*:*, +1 more

Moderate fix1 remedy

>= 12.1X46, < 12.1X46-D81

Qualcomm QCA6777AQ

Moderate fix1 remedy

cpe:2.3:h:qualcomm:qca6777aq:*:*:*:*:*:*:*, +1 more

Moderate fix1 remedy

>= 12.1X46, < 12.1X46-D81

Qualcomm QCA6787AQ

Moderate fix1 remedy

cpe:2.3:h:qualcomm:qca6787aq:*:*:*:*:*:*:*, +1 more

Moderate fix1 remedy

>= 12.1X46, < 12.1X46-D81

Qualcomm QCA6797AQ

Moderate fix1 remedy

cpe:2.3:h:qualcomm:qca6797aq:*:*:*:*:*:*:*, +1 more

Moderate fix1 remedy

>= 12.1X46, < 12.1X46-D81

Qualcomm QCA8072

Moderate fix1 remedy

cpe:2.3:h:qualcomm:qca8072:*:*:*:*:*:*:*, +1 more

Moderate fix1 remedy

>= 12.1X46, < 12.1X46-D81

Qualcomm QCA8075

Moderate fix1 remedy

cpe:2.3:o:qualcomm:qca8075_firmware:*:*:*:*:*:*:*, +1 more

Moderate fix1 remedy

>= 12.1X46, < 12.1X46-D81

Qualcomm QCA8081

Moderate fix1 remedy

cpe:2.3:h:qualcomm:qca8081:*:*:*:*:*:*:*, +1 more

Moderate fix1 remedy

>= 12.1X46, < 12.1X46-D81

Qualcomm QCA8082

Moderate fix1 remedy

cpe:2.3:h:qualcomm:qca8082:*:*:*:*:*:*:*, +1 more

Moderate fix1 remedy

>= 12.1X46, < 12.1X46-D81

Qualcomm QCA8084

Moderate fix1 remedy

cpe:2.3:h:qualcomm:qca8084:*:*:*:*:*:*:*, +1 more

Moderate fix1 remedy

>= 12.1X46, < 12.1X46-D81

Qualcomm QCA8085

Moderate fix1 remedy

cpe:2.3:h:qualcomm:qca8085:*:*:*:*:*:*:*, +1 more

Moderate fix1 remedy

>= 12.1X46, < 12.1X46-D81

Qualcomm QCA8337

Moderate fix1 remedy

cpe:2.3:o:qualcomm:qca8337_firmware:*:*:*:*:*:*:*, +1 more

Moderate fix1 remedy

>= 12.1X46, < 12.1X46-D81

Qualcomm QCA8384

Moderate fix1 remedy

>= 12.1X46, < 12.1X46-D81

Qualcomm QCA8385

Moderate fix1 remedy

>= 12.1X46, < 12.1X46-D81

Qualcomm QCA8386

Moderate fix1 remedy

cpe:2.3:h:qualcomm:qca8386:*:*:*:*:*:*:*, +1 more

Moderate fix1 remedy

>= 12.1X46, < 12.1X46-D81

Qualcomm QCA9886

Moderate fix1 remedy

cpe:2.3:o:qualcomm:qca9886_firmware:*:*:*:*:*:*:*, +1 more

Moderate fix1 remedy

>= 12.1X46, < 12.1X46-D81

Qualcomm QCA9888

Moderate fix1 remedy

cpe:2.3:h:qualcomm:qca9888:*:*:*:*:*:*:*, +1 more

Moderate fix1 remedy

>= 12.1X46, < 12.1X46-D81

Qualcomm QCA9889

Moderate fix1 remedy

cpe:2.3:o:qualcomm:qca9889_firmware:*:*:*:*:*:*:*, +1 more

Moderate fix1 remedy

>= 12.1X46, < 12.1X46-D81

Qualcomm QCA9898

Moderate fix1 remedy

cpe:2.3:o:qualcomm:qca9898_firmware:*:*:*:*:*:*:*, +1 more

Moderate fix1 remedy

>= 12.1X46, < 12.1X46-D81

Qualcomm QCA9980

Moderate fix1 remedy

cpe:2.3:h:qualcomm:qca9980:*:*:*:*:*:*:*, +1 more

Moderate fix1 remedy

>= 12.1X46, < 12.1X46-D81

Qualcomm QCA9984

Moderate fix1 remedy

cpe:2.3:h:qualcomm:qca9984:*:*:*:*:*:*:*, +1 more

Moderate fix1 remedy

>= 12.1X46, < 12.1X46-D81

Qualcomm QCA9985

Moderate fix1 remedy

cpe:2.3:h:qualcomm:qca9985:*:*:*:*:*:*:*, +1 more

Moderate fix1 remedy

>= 12.1X46, < 12.1X46-D81

Qualcomm QCA9986

Moderate fix1 remedy

cpe:2.3:h:qualcomm:qca9986:*:*:*:*:*:*:*, +1 more

Moderate fix1 remedy

>= 12.1X46, < 12.1X46-D81

Qualcomm QCA9990

Moderate fix1 remedy

cpe:2.3:h:qualcomm:qca9990:*:*:*:*:*:*:*, +1 more

Moderate fix1 remedy

>= 12.1X46, < 12.1X46-D81

Qualcomm QCA9992

Moderate fix1 remedy

cpe:2.3:h:qualcomm:qca9992:*:*:*:*:*:*:*, +1 more

Moderate fix1 remedy

>= 12.1X46, < 12.1X46-D81

Qualcomm QCA9994

Moderate fix1 remedy

cpe:2.3:o:qualcomm:qca9994_firmware:*:*:*:*:*:*:*, +1 more

Moderate fix1 remedy

>= 12.1X46, < 12.1X46-D81

Qualcomm QCC2073

Moderate fix1 remedy

cpe:2.3:h:qualcomm:qcc2073:*:*:*:*:*:*:*, +1 more

Moderate fix1 remedy

>= 12.1X46, < 12.1X46-D81

Qualcomm QCC2076

Moderate fix1 remedy

cpe:2.3:o:qualcomm:qcc2076_firmware:*:*:*:*:*:*:*, +1 more

Moderate fix1 remedy

>= 12.1X46, < 12.1X46-D81

Qualcomm QCC710

Moderate fix1 remedy

cpe:2.3:o:qualcomm:qcc710_firmware:*:*:*:*:*:*:*, +1 more

Moderate fix1 remedy

>= 12.1X46, < 12.1X46-D81

Qualcomm QCM8550

Moderate fix1 remedy

cpe:2.3:h:qualcomm:qcm8550:*:*:*:*:*:*:*, +1 more

Moderate fix1 remedy

>= 12.1X46, < 12.1X46-D81

Qualcomm QCN5022

Moderate fix1 remedy

cpe:2.3:o:qualcomm:qcn5022_firmware:*:*:*:*:*:*:*, +1 more

Moderate fix1 remedy

>= 12.1X46, < 12.1X46-D81

Qualcomm QCN5052

Moderate fix1 remedy

cpe:2.3:h:qualcomm:qcn5052:*:*:*:*:*:*:*, +1 more

Moderate fix1 remedy

>= 12.1X46, < 12.1X46-D81

Qualcomm QCN5054

Moderate fix1 remedy

cpe:2.3:h:qualcomm:qcn5054:*:*:*:*:*:*:*, +1 more

Moderate fix1 remedy

>= 12.1X46, < 12.1X46-D81

Qualcomm QCN5122

Moderate fix1 remedy

cpe:2.3:h:qualcomm:qcn5122:*:*:*:*:*:*:*, +1 more

Moderate fix1 remedy

>= 12.1X46, < 12.1X46-D81

Qualcomm QCN5124

Moderate fix1 remedy

cpe:2.3:h:qualcomm:qcn5124:*:*:*:*:*:*:*, +1 more

Moderate fix1 remedy

>= 12.1X46, < 12.1X46-D81

Qualcomm QCN5152

Moderate fix1 remedy

cpe:2.3:h:qualcomm:qcn5152:*:*:*:*:*:*:*, +1 more

Moderate fix1 remedy

>= 12.1X46, < 12.1X46-D81

Qualcomm QCN5154

Moderate fix1 remedy

cpe:2.3:h:qualcomm:qcn5154:*:*:*:*:*:*:*, +1 more

Moderate fix1 remedy

>= 12.1X46, < 12.1X46-D81

Qualcomm QCN6023

Moderate fix1 remedy

cpe:2.3:o:qualcomm:qcn6023_firmware:*:*:*:*:*:*:*, +1 more

Moderate fix1 remedy

>= 12.1X46, < 12.1X46-D81

Qualcomm QCN6024

Moderate fix1 remedy

cpe:2.3:h:qualcomm:qcn6024:*:*:*:*:*:*:*, +1 more

Moderate fix1 remedy

>= 12.1X46, < 12.1X46-D81

Qualcomm QCN6100

Moderate fix1 remedy

cpe:2.3:h:qualcomm:qcn6100:*:*:*:*:*:*:*, +1 more

Moderate fix1 remedy

>= 12.1X46, < 12.1X46-D81

Qualcomm QCN6102

Moderate fix1 remedy

cpe:2.3:h:qualcomm:qcn6102:*:*:*:*:*:*:*, +1 more

Moderate fix1 remedy

>= 12.1X46, < 12.1X46-D81

Qualcomm QCN6112

Moderate fix1 remedy

cpe:2.3:o:qualcomm:qcn6112_firmware:*:*:*:*:*:*:*, +1 more

Moderate fix1 remedy

>= 12.1X46, < 12.1X46-D81

Qualcomm QCN6122

Moderate fix1 remedy

cpe:2.3:o:qualcomm:qcn6122_firmware:*:*:*:*:*:*:*, +1 more

Moderate fix1 remedy

>= 12.1X46, < 12.1X46-D81

Vulnerability Rating

Custom Algorithm

spread

8.1

impact

0.6

exploitability

7.0

remediation

7.7

relevance

0.3

threat

0.0

urgency

2.9

incentive

5.8

Our algorithm analyzes dozens of metrics to generate these 8 key vulnerability categories, which are then combined to calculate the overall risk score.

Vulnerability Rating

Custom Algorithm

spread

8.1

impact

0.6

exploitability

7.0

remediation

7.7

relevance

0.3

threat

0.0

urgency

2.9

incentive

5.8

Our algorithm analyzes dozens of metrics to generate these 8 key vulnerability categories, which are then combined to calculate the overall risk score.