CVE-2025-59609
Received
Received - Intake
Information Disclosure in Qualcomm Chipset Firmware
Publication date: 2026-06-01
Last updated on: 2026-06-01
Assigner: Qualcomm, Inc.
Description
Description
Information Disclosure when processing advertisement frames with malformed MBSSID elements of insufficient length.
CVSS Scores
EPSS Scores
| Probability: | |
| Percentile: |
Meta Information
Affected Vendors & Products
Currently, no data is known.
Helpful Resources
Exploitability
CWE
KEV
| CWE ID | Description |
|---|---|
| CWE-126 | The product reads from a buffer using buffer access mechanisms such as indexes or pointers that reference memory locations after the targeted buffer. |
Attack-Flow Graph
AI Powered Q&A
Can you explain this vulnerability to me?
This vulnerability involves information disclosure that occurs when processing advertisement frames containing malformed MBSSID elements that are of insufficient length.
How can this vulnerability impact me? :
The vulnerability can lead to partial information disclosure, potentially allowing an attacker to gain some level of unauthorized access to information. The CVSS score indicates a moderate impact with possible consequences to confidentiality, integrity, and availability.
Ask Our AI Assistant
Need more information? Ask your question to get an AI reply (Powered by our expertise)
0/70