Qualcomm WLAN Firmware Buffer Over-Read Vulnerability Leading to Denial-of-Service

A buffer over-read vulnerability has been identified in the WLAN firmware of various chipsets, including those in the Snapdragon mobile platform and several other Qualcomm platforms. This vulnerability can cause a transient denial-of-service by mishandling nonstandard FILS Discovery Frames with excessive action sizes during initial scans. The issue arises from inadequate validation of buffer sizes, allowing for memory corruption.

Impact

Exploitation of this vulnerability leads to a temporary denial-of-service condition, causing the device to become unresponsive or unavailable for a period of time.