Qualcomm WLAN Firmware Buffer Over-read Vulnerability Leading to Denial-of-Service

A buffer over-read vulnerability has been identified in Qualcomm's WLAN firmware, specifically in various chipsets, including those used in mobile platforms and automotive applications. This vulnerability causes a transient denial-of-service by mishandling malformed Fast Transition response frames with invalid header structures during wireless roaming, disrupting normal network operations.

Impact

Exploitation of this vulnerability causes a temporary denial-of-service by disrupting wireless connectivity, particularly during roaming processes.

Remediation

Qualcomm has notified device manufacturers about this vulnerability and is actively sharing patch information. Instructions for applying the patch can be found in the Qualcomm May 2026 Security Bulletin.