Primary

Context

Qualcomm Snapdragon Products Buffer Over-Read Vulnerability in WLAN HAL

Vulnerability

Patched

A buffer over-read vulnerability has been identified in the WLAN Hardware Abstraction Layer (HAL) of various chipsets used in Qualcomm Snapdragon products. This vulnerability leads to a transient denial-of-service condition by improperly processing power control requests that contain invalid antenna or stream values.

Impact

Exploitation of this vulnerability causes a transient denial-of-service condition by disrupting normal power control processes, potentially leading to temporary communication or connectivity issues.

Remediation

Qualcomm has notified device manufacturers about this vulnerability and recommended that they deploy available patches. Instructions for applying the patch can be found in the Qualcomm September 2025 Security Bulletin.

Added: Sep 24, 2025, 4:23 PM

Updated: Sep 24, 2025, 7:20 PM

Affected Products

Qualcomm FastConnect 7800

Moderate fix1 remedy

cpe:2.3:h:qualcomm:fastconnect_7800:*:*:*:*:*:*:*, +1 more

Moderate fix1 remedy

>= 12.1X46, < 12.1X46-D81

Qualcomm Immersive Home 3210 Platform

Moderate fix1 remedy

cpe:2.3:h:qualcomm:immersive_home_3210_platform:*:*:*:*:*:*:*, +1 more

Moderate fix1 remedy

>= 12.1X46, < 12.1X46-D81

Qualcomm Immersive Home 326 Platform

Moderate fix1 remedy

cpe:2.3:h:qualcomm:immersive_home_326_platform:*:*:*:*:*:*:*, +1 more

Moderate fix1 remedy

>= 12.1X46, < 12.1X46-D81

Qualcomm IPQ5300

0 remedies

cpe:2.3:h:qualcomm:ipq5300:*:*:*:*:*:*:*

0 remedies

Qualcomm IPQ5302

Moderate fix1 remedy

cpe:2.3:h:qualcomm:ipq5302:*:*:*:*:*:*:*, +2 more

Moderate fix1 remedy

>= 12.1X46, < 12.1X46-D81

Qualcomm IPQ5312

Moderate fix1 remedy

cpe:2.3:h:qualcomm:ipq5312:*:*:*:*:*:*:*, +1 more

Moderate fix1 remedy

>= 12.1X46, < 12.1X46-D81

Qualcomm IPQ5332

Moderate fix1 remedy

cpe:2.3:h:qualcomm:ipq5332:*:*:*:*:*:*:*, +1 more

Moderate fix1 remedy

>= 12.1X46, < 12.1X46-D81

Qualcomm IPQ5424

Moderate fix1 remedy

>= 12.1X46, < 12.1X46-D81

Qualcomm IPQ9008

Moderate fix1 remedy

cpe:2.3:h:qualcomm:ipq9008:*:*:*:*:*:*:*, +1 more

Moderate fix1 remedy

>= 12.1X46, < 12.1X46-D81

Qualcomm IPQ9048

Moderate fix1 remedy

cpe:2.3:h:qualcomm:ipq9048:*:*:*:*:*:*:*, +1 more

Moderate fix1 remedy

>= 12.1X46, < 12.1X46-D81

Qualcomm IPQ9554

Moderate fix1 remedy

cpe:2.3:h:qualcomm:ipq9554:*:*:*:*:*:*:*, +1 more

Moderate fix1 remedy

>= 12.1X46, < 12.1X46-D81

Qualcomm IPQ9570

Moderate fix1 remedy

cpe:2.3:h:qualcomm:ipq9570:*:*:*:*:*:*:*, +1 more

Moderate fix1 remedy

>= 12.1X46, < 12.1X46-D81

Qualcomm IPQ9574

Moderate fix1 remedy

cpe:2.3:h:qualcomm:ipq9574:*:*:*:*:*:*:*, +1 more

Moderate fix1 remedy

>= 12.1X46, < 12.1X46-D81

Qualcomm QCA0000

Moderate fix1 remedy

cpe:2.3:h:qualcomm:qca0000:*:*:*:*:*:*:*, +1 more

Moderate fix1 remedy

>= 12.1X46, < 12.1X46-D81

Qualcomm QCA8075

Moderate fix1 remedy

cpe:2.3:h:qualcomm:qca8075:*:*:*:*:*:*:*, +1 more

Moderate fix1 remedy

>= 12.1X46, < 12.1X46-D81

Qualcomm QCA8080

Moderate fix1 remedy

>= 12.1X46, < 12.1X46-D81

Qualcomm QCA8081

Moderate fix1 remedy

cpe:2.3:h:qualcomm:qca8081:*:*:*:*:*:*:*, +1 more

Moderate fix1 remedy

>= 12.1X46, < 12.1X46-D81

Qualcomm QCA8082

Moderate fix1 remedy

cpe:2.3:h:qualcomm:qca8082:*:*:*:*:*:*:*, +1 more

Moderate fix1 remedy

>= 12.1X46, < 12.1X46-D81

Qualcomm QCA8084

Moderate fix1 remedy

cpe:2.3:h:qualcomm:qca8084:*:*:*:*:*:*:*, +1 more

Moderate fix1 remedy

>= 12.1X46, < 12.1X46-D81

Qualcomm QCA8085

Moderate fix1 remedy

cpe:2.3:h:qualcomm:qca8085:*:*:*:*:*:*:*, +1 more

Moderate fix1 remedy

>= 12.1X46, < 12.1X46-D81

Qualcomm QCA8101

Moderate fix1 remedy

>= 12.1X46, < 12.1X46-D81

Qualcomm QCA8102

Moderate fix1 remedy

>= 12.1X46, < 12.1X46-D81

Qualcomm QCA8111

Moderate fix1 remedy

>= 12.1X46, < 12.1X46-D81

Qualcomm QCA8112

Moderate fix1 remedy

>= 12.1X46, < 12.1X46-D81

Qualcomm QCA8337

Moderate fix1 remedy

cpe:2.3:h:qualcomm:qca8337:*:*:*:*:*:*:*, +1 more

Moderate fix1 remedy

>= 12.1X46, < 12.1X46-D81

Qualcomm QCA8384

Moderate fix1 remedy

>= 12.1X46, < 12.1X46-D81

Qualcomm QCA8385

Moderate fix1 remedy

>= 12.1X46, < 12.1X46-D81

Qualcomm QCA8386

Moderate fix1 remedy

cpe:2.3:h:qualcomm:qca8386:*:*:*:*:*:*:*, +1 more

Moderate fix1 remedy

>= 12.1X46, < 12.1X46-D81

Qualcomm QCA9888

Moderate fix1 remedy

cpe:2.3:h:qualcomm:qca9888:*:*:*:*:*:*:*, +1 more

Moderate fix1 remedy

>= 12.1X46, < 12.1X46-D81

Qualcomm QCA9889

Moderate fix1 remedy

cpe:2.3:h:qualcomm:qca9889:*:*:*:*:*:*:*, +1 more

Moderate fix1 remedy

>= 12.1X46, < 12.1X46-D81

Qualcomm QCC710

Moderate fix1 remedy

cpe:2.3:h:qualcomm:qcc710:*:*:*:*:*:*:*, +1 more

Moderate fix1 remedy

>= 12.1X46, < 12.1X46-D81

Qualcomm QCF8000

Moderate fix1 remedy

cpe:2.3:h:qualcomm:qcf8000:*:*:*:*:*:*:*, +1 more

Moderate fix1 remedy

>= 12.1X46, < 12.1X46-D81

Qualcomm QCF8000SFP

Moderate fix1 remedy

cpe:2.3:h:qualcomm:qcf8000sfp:*:*:*:*:*:*:*, +1 more

Moderate fix1 remedy

>= 12.1X46, < 12.1X46-D81

Qualcomm QCF8001

Moderate fix1 remedy

cpe:2.3:h:qualcomm:qcf8001:*:*:*:*:*:*:*, +1 more

Moderate fix1 remedy

>= 12.1X46, < 12.1X46-D81

Qualcomm QCN5022

Moderate fix1 remedy

cpe:2.3:h:qualcomm:qcn5022:*:*:*:*:*:*:*, +1 more

Moderate fix1 remedy

>= 12.1X46, < 12.1X46-D81

Qualcomm QCN5024

Moderate fix1 remedy

cpe:2.3:h:qualcomm:qcn5024:*:*:*:*:*:*:*, +1 more

Moderate fix1 remedy

>= 12.1X46, < 12.1X46-D81

Qualcomm QCN5052

Moderate fix1 remedy

cpe:2.3:h:qualcomm:qcn5052:*:*:*:*:*:*:*, +1 more

Moderate fix1 remedy

>= 12.1X46, < 12.1X46-D81

Qualcomm QCN5122

Moderate fix1 remedy

cpe:2.3:h:qualcomm:qcn5122:*:*:*:*:*:*:*, +1 more

Moderate fix1 remedy

>= 12.1X46, < 12.1X46-D81

Qualcomm QCN5124

Moderate fix1 remedy

cpe:2.3:h:qualcomm:qcn5124:*:*:*:*:*:*:*, +1 more

Moderate fix1 remedy

>= 12.1X46, < 12.1X46-D81

Qualcomm QCN5152

Moderate fix1 remedy

cpe:2.3:h:qualcomm:qcn5152:*:*:*:*:*:*:*, +1 more

Moderate fix1 remedy

>= 12.1X46, < 12.1X46-D81

Qualcomm QCN5164

Moderate fix1 remedy

cpe:2.3:h:qualcomm:qcn5164:*:*:*:*:*:*:*, +1 more

Moderate fix1 remedy

>= 12.1X46, < 12.1X46-D81

Qualcomm QCN5224

Moderate fix1 remedy

>= 12.1X46, < 12.1X46-D81

Qualcomm QCN6023

Moderate fix1 remedy

cpe:2.3:h:qualcomm:qcn6023:*:*:*:*:*:*:*, +1 more

Moderate fix1 remedy

>= 12.1X46, < 12.1X46-D81

Qualcomm QCN6024

Moderate fix1 remedy

cpe:2.3:h:qualcomm:qcn6024:*:*:*:*:*:*:*, +1 more

Moderate fix1 remedy

>= 12.1X46, < 12.1X46-D81

Qualcomm QCN6112

Moderate fix1 remedy

cpe:2.3:h:qualcomm:qcn6112:*:*:*:*:*:*:*, +1 more

Moderate fix1 remedy

>= 12.1X46, < 12.1X46-D81

Qualcomm QCN6224

Moderate fix1 remedy

cpe:2.3:h:qualcomm:qcn6224:*:*:*:*:*:*:*, +1 more

Moderate fix1 remedy

>= 12.1X46, < 12.1X46-D81

Qualcomm QCN6274

Moderate fix1 remedy

cpe:2.3:h:qualcomm:qcn6274:*:*:*:*:*:*:*, +1 more

Moderate fix1 remedy

>= 12.1X46, < 12.1X46-D81

Qualcomm QCN6402

Moderate fix1 remedy

cpe:2.3:h:qualcomm:qcn6402:*:*:*:*:*:*:*, +1 more

Moderate fix1 remedy

>= 12.1X46, < 12.1X46-D81

Qualcomm QCN6412

Moderate fix1 remedy

cpe:2.3:h:qualcomm:qcn6412:*:*:*:*:*:*:*, +1 more

Moderate fix1 remedy

>= 12.1X46, < 12.1X46-D81

Qualcomm QCN6422

Moderate fix1 remedy

cpe:2.3:h:qualcomm:qcn6422:*:*:*:*:*:*:*, +1 more

Moderate fix1 remedy

>= 12.1X46, < 12.1X46-D81

Qualcomm QCN6432

Moderate fix1 remedy

cpe:2.3:h:qualcomm:qcn6432:*:*:*:*:*:*:*, +1 more

Moderate fix1 remedy

>= 12.1X46, < 12.1X46-D81

Qualcomm QCN9000

Moderate fix1 remedy

cpe:2.3:h:qualcomm:qcn9000:*:*:*:*:*:*:*, +1 more

Moderate fix1 remedy

>= 12.1X46, < 12.1X46-D81

Qualcomm QCN9012

Moderate fix1 remedy

cpe:2.3:h:qualcomm:qcn9012:*:*:*:*:*:*:*, +1 more

Moderate fix1 remedy

>= 12.1X46, < 12.1X46-D81

Qualcomm QCN9022

Moderate fix1 remedy

cpe:2.3:h:qualcomm:qcn9022:*:*:*:*:*:*:*, +1 more

Moderate fix1 remedy

>= 12.1X46, < 12.1X46-D81

Qualcomm QCN9024

Moderate fix1 remedy

cpe:2.3:h:qualcomm:qcn9024:*:*:*:*:*:*:*, +1 more

Moderate fix1 remedy

>= 12.1X46, < 12.1X46-D81

Qualcomm QCN9070

Moderate fix1 remedy

cpe:2.3:h:qualcomm:qcn9070:*:*:*:*:*:*:*, +1 more

Moderate fix1 remedy

>= 12.1X46, < 12.1X46-D81

Qualcomm QCN9072

Moderate fix1 remedy

cpe:2.3:h:qualcomm:qcn9072:*:*:*:*:*:*:*, +1 more

Moderate fix1 remedy

>= 12.1X46, < 12.1X46-D81

Qualcomm QCN9074

Moderate fix1 remedy

cpe:2.3:h:qualcomm:qcn9074:*:*:*:*:*:*:*, +1 more

Moderate fix1 remedy

>= 12.1X46, < 12.1X46-D81

Qualcomm QCN9100

Moderate fix1 remedy

cpe:2.3:h:qualcomm:qcn9100:*:*:*:*:*:*:*, +1 more

Moderate fix1 remedy

>= 12.1X46, < 12.1X46-D81

Qualcomm QCN9160

Moderate fix1 remedy

cpe:2.3:h:qualcomm:qcn9160:*:*:*:*:*:*:*, +1 more

Moderate fix1 remedy

>= 12.1X46, < 12.1X46-D81

Qualcomm QCN9274

Moderate fix1 remedy

cpe:2.3:h:qualcomm:qcn9274:*:*:*:*:*:*:*, +1 more

Moderate fix1 remedy

>= 12.1X46, < 12.1X46-D81

Qualcomm QFW7114

Moderate fix1 remedy

cpe:2.3:h:qualcomm:qfw7114:*:*:*:*:*:*:*, +1 more

Moderate fix1 remedy

>= 12.1X46, < 12.1X46-D81

Qualcomm QFW7124

Moderate fix1 remedy

cpe:2.3:h:qualcomm:qfw7124:*:*:*:*:*:*:*, +1 more

Moderate fix1 remedy

>= 12.1X46, < 12.1X46-D81

Qualcomm QMP1000

0 remedies

Qualcomm QXM8083

0 remedies

cpe:2.3:h:qualcomm:qxm8083:*:*:*:*:*:*:*

0 remedies

Qualcomm SDX55

0 remedies

cpe:2.3:h:qualcomm:sdx55:*:*:*:*:*:*:*

0 remedies

Qualcomm SDX65M

0 remedies

cpe:2.3:h:qualcomm:sdx65m:*:*:*:*:*:*:*

0 remedies

Qualcomm SM6650

0 remedies

cpe:2.3:h:qualcomm:sm6650:*:*:*:*:*:*:*

0 remedies

Qualcomm SM7635

0 remedies

cpe:2.3:h:qualcomm:sm7635:*:*:*:*:*:*:*

0 remedies

Qualcomm SM8735

0 remedies

cpe:2.3:h:qualcomm:sm8750:*:*:*:*:*:*:*

0 remedies

Qualcomm SM8750P

0 remedies

cpe:2.3:h:qualcomm:sm8750p:*:*:*:*:*:*:*

0 remedies

Qualcomm Snapdragon X65 5G Modem-RF System

0 remedies

cpe:2.3:h:qualcomm:snapdragon_x65_5g_modem-rf_system:*:*:*:*:*:*:*

0 remedies

Qualcomm Snapdragon X72 5G Modem-RF System

0 remedies

cpe:2.3:h:qualcomm:snapdragon_x72_5g_modem-rf_system:*:*:*:*:*:*:*

0 remedies

Qualcomm Snapdragon X75 5G Modem-RF System

0 remedies

cpe:2.3:h:qualcomm:snapdragon_x75_5g_modem-rf_system:*:*:*:*:*:*:*

0 remedies

Qualcomm SW-only

Moderate fix1 remedy

>= 12.1X46, < 12.1X46-D81

Qualcomm WCD9340

0 remedies

cpe:2.3:h:qualcomm:wcd9340:*:*:*:*:*:*:*

0 remedies

Qualcomm WCD9378

0 remedies

cpe:2.3:h:qualcomm:wcd9378:*:*:*:*:*:*:*

0 remedies

Qualcomm WCD9395

0 remedies

cpe:2.3:h:qualcomm:wcd9395:*:*:*:*:*:*:*

0 remedies

Qualcomm WCN6650

0 remedies

cpe:2.3:h:qualcomm:wcn6650:*:*:*:*:*:*:*

0 remedies

Qualcomm WCN6755

0 remedies

cpe:2.3:h:qualcomm:wcn6755:*:*:*:*:*:*:*

0 remedies

Qualcomm WCN7750

0 remedies

Qualcomm WCN7861

0 remedies

cpe:2.3:h:qualcomm:wcn7860:*:*:*:*:*:*:*

0 remedies

Qualcomm WCN7880

0 remedies

cpe:2.3:h:qualcomm:wcn7880:*:*:*:*:*:*:*

0 remedies

Vulnerability Rating

Custom Algorithm

spread

7.8

impact

0.6

exploitability

5.4

remediation

7.7

relevance

0.6

threat

0.0

urgency

2.9

incentive

5.8

Our algorithm analyzes dozens of metrics to generate these 8 key vulnerability categories, which are then combined to calculate the overall risk score.

Vulnerability Rating

Custom Algorithm

spread

7.8

impact

0.6

exploitability

5.4

remediation

7.7

relevance

0.6

threat

0.0

urgency

2.9

incentive

5.8

Our algorithm analyzes dozens of metrics to generate these 8 key vulnerability categories, which are then combined to calculate the overall risk score.