Qualcomm Windows WLAN Host Memory Corruption Vulnerability in Power-Save State

A memory corruption vulnerability has been identified in the Windows WLAN Host component of Qualcomm chipsets. This issue arises while processing IOCTL commands when the device is in a power-save state, potentially leading to unauthorized memory access or manipulation.

Impact

Exploitation of this vulnerability causes memory corruption, which can lead to undefined behavior in the application, such as crashing or executing arbitrary code.

Remediation

Qualcomm has notified device manufacturers about this vulnerability. Instructions for applying the patch can be found in the Qualcomm May 2026 Security Bulletin.