CVE-2025-59609
Analyzed
Analyzed - Analysis Complete
Information Disclosure in Qualcomm Chipset Firmware
Publication date: 2026-06-01
Last updated on: 2026-06-02
Assigner: Qualcomm, Inc.
Description
Description
Information Disclosure when processing advertisement frames with malformed MBSSID elements of insufficient length.
CVSS Scores
EPSS Scores
| Probability: | |
| Percentile: |
Meta Information
Affected Vendors & Products
| Vendor | Product | Version / Range |
|---|---|---|
| qualcomm | 5g_fixed_wireless_access_platform_firmware | * |
| qualcomm | ar8035_firmware | * |
| qualcomm | csr8811_firmware | * |
| qualcomm | fastconnect_6700_firmware | * |
| qualcomm | fastconnect_6900_firmware | * |
| qualcomm | sxr2250p_firmware | * |
| qualcomm | wcd9340_firmware | * |
| qualcomm | wcd9370_firmware | * |
| qualcomm | wcd9371_firmware | * |
| qualcomm | wcd9375_firmware | * |
| qualcomm | wcd9378_firmware | * |
| qualcomm | wcd9380_firmware | * |
| qualcomm | wcd9385_firmware | * |
| qualcomm | wcd9390_firmware | * |
| qualcomm | wcd9395_firmware | * |
| qualcomm | wcn3950_firmware | * |
| qualcomm | wcn3988_firmware | * |
| qualcomm | wcn6650_firmware | * |
| qualcomm | wcn6755_firmware | * |
| qualcomm | wsa8810_firmware | * |
| qualcomm | wsa8815_firmware | * |
| qualcomm | wsa8830_firmware | * |
| qualcomm | wsa8832_firmware | * |
| qualcomm | wsa8835_firmware | * |
| qualcomm | wsa8840_firmware | * |
| qualcomm | wsa8845_firmware | * |
| qualcomm | wsa8845h_firmware | * |
| qualcomm | fastconnect_7800_firmware | * |
| qualcomm | flight_rb5_5g_platform_firmware | * |
| qualcomm | fwa_gen_3_ultra_firmware | * |
| qualcomm | g3x_gen_2_firmware | * |
| qualcomm | immersive_home_214_platform_firmware | * |
| qualcomm | immersive_home_216_platform_firmware | * |
| qualcomm | immersive_home_316_platform_firmware | * |
| qualcomm | immersive_home_318_platform_firmware | * |
| qualcomm | immersive_home_3210_platform_firmware | * |
| qualcomm | immersive_home_326_platform_firmware | * |
| qualcomm | ipq5010_firmware | * |
| qualcomm | ipq5028_firmware | * |
| qualcomm | ipq5300_firmware | * |
| qualcomm | ipq5302_firmware | * |
| qualcomm | ipq5312_firmware | * |
| qualcomm | ipq5332_firmware | * |
| qualcomm | ipq6000_firmware | * |
| qualcomm | ipq6010_firmware | * |
| qualcomm | ipq6018_firmware | * |
| qualcomm | ipq8076_firmware | * |
| qualcomm | ipq8078_firmware | * |
| qualcomm | ipq9008_firmware | * |
| qualcomm | ipq9554_firmware | * |
| qualcomm | ipq9570_firmware | * |
| qualcomm | ipq9574_firmware | * |
| qualcomm | iq-615_firmware | * |
| qualcomm | iq-8275_firmware | * |
| qualcomm | iq-9075_firmware | * |
| qualcomm | lemans_au_lgit_firmware | * |
| qualcomm | lemansau_firmware | * |
| qualcomm | marina_firmware | * |
| qualcomm | milos_firmware | * |
| qualcomm | monaco_iot_firmware | * |
| qualcomm | networking_pro_1200_platform_firmware | * |
| qualcomm | networking_pro_1210_platform_firmware | * |
| qualcomm | networking_pro_1610_platform_firmware | * |
| qualcomm | networking_pro_400_platform_firmware | * |
| qualcomm | networking_pro_600_platform_firmware | * |
| qualcomm | networking_pro_610_platform_firmware | * |
| qualcomm | networking_pro_800_platform_firmware | * |
| qualcomm | qcf8000_firmware | * |
| qualcomm | qcf8001_firmware | * |
| qualcomm | qcm5430_firmware | * |
| qualcomm | qcm6490_firmware | * |
| qualcomm | qcn5022_firmware | * |
| qualcomm | qcn5024_firmware | * |
| qualcomm | qcn5052_firmware | * |
| qualcomm | qcn5122_firmware | * |
| qualcomm | qcn5124_firmware | * |
| qualcomm | qcn5152_firmware | * |
| qualcomm | qcn5154_firmware | * |
| qualcomm | qcn5164_firmware | * |
| qualcomm | qcn5224_firmware | * |
| qualcomm | qcn6023_firmware | * |
| qualcomm | qcn6024_firmware | * |
| qualcomm | qcn6112_firmware | * |
| qualcomm | qcn6122_firmware | * |
| qualcomm | qcn6132_firmware | * |
| qualcomm | qcn6224_firmware | * |
| qualcomm | qcn6274_firmware | * |
| qualcomm | qcn6402_firmware | * |
| qualcomm | qcn6412_firmware | * |
| qualcomm | qcn6422_firmware | * |
| qualcomm | qcn6432_firmware | * |
| qualcomm | qcn9000_firmware | * |
| qualcomm | qcn9012_firmware | * |
| qualcomm | qcn9013_firmware | * |
| qualcomm | qcn9022_firmware | * |
| qualcomm | qcn9024_firmware | * |
| qualcomm | qcn9070_firmware | * |
| qualcomm | qcn9100_firmware | * |
| qualcomm | qcn9274_firmware | * |
| qualcomm | qcs8550_firmware | * |
| qualcomm | qfw7114_firmware | * |
| qualcomm | qfw7124_firmware | * |
| qualcomm | qrb5165n_firmware | * |
| qualcomm | video_collaboration_vc3_platform_firmware | * |
| qualcomm | video_collaboration_vc5_platform_firmware | * |
| qualcomm | robotics_rb5_platform_firmware | * |
| qualcomm | sa6155p_firmware | * |
| qualcomm | networking_pro_810_platform_firmware | * |
| qualcomm | qam8255p_firmware | * |
| qualcomm | qam8295p_firmware | * |
| qualcomm | qam8397p_firmware | * |
| qualcomm | qam8797p_firmware | * |
| qualcomm | qamsrv1h_firmware | * |
| qualcomm | qamsrv1m_firmware | * |
| qualcomm | qca0000_firmware | * |
| qualcomm | qca4024_firmware | * |
| qualcomm | qca6391_firmware | * |
| qualcomm | qca6554a_firmware | * |
| qualcomm | qca6564au_firmware | * |
| qualcomm | qca6574_firmware | * |
| qualcomm | qca6574a_firmware | * |
| qualcomm | qca6574au_firmware | * |
| qualcomm | qca6584au_firmware | * |
| qualcomm | qca6595_firmware | * |
| qualcomm | qca6595au_firmware | * |
| qualcomm | qca6678aq_firmware | * |
| qualcomm | qca6688aq_firmware | * |
| qualcomm | qca6696_firmware | * |
| qualcomm | qca6698aq_firmware | * |
| qualcomm | qca6777aq_firmware | * |
| qualcomm | qca6787aq_firmware | * |
| qualcomm | qca6797aq_firmware | * |
| qualcomm | qca8075_firmware | * |
| qualcomm | qca8080_firmware | * |
| qualcomm | qca8081_firmware | * |
| qualcomm | qca8082_firmware | * |
| qualcomm | qca8084_firmware | * |
| qualcomm | qca8085_firmware | * |
| qualcomm | qca8101_firmware | * |
| qualcomm | qca8337_firmware | * |
| qualcomm | qca8384_firmware | * |
| qualcomm | qca8385_firmware | * |
| qualcomm | qca8386_firmware | * |
| qualcomm | qca8695au_firmware | * |
| qualcomm | qca9888_firmware | * |
| qualcomm | qca9889_firmware | * |
| qualcomm | qcc710_firmware | * |
| qualcomm | sa7255p_firmware | * |
| qualcomm | sa7775p_firmware | * |
| qualcomm | sa8155p_firmware | * |
| qualcomm | sa8195p_firmware | * |
| qualcomm | sa8255p_firmware | * |
| qualcomm | sa8295p_firmware | * |
| qualcomm | sa8620p_firmware | * |
| qualcomm | sa8770p_firmware | * |
| qualcomm | sa9000p_firmware | * |
| qualcomm | sar2130p_firmware | * |
| qualcomm | sd865_5g_firmware | * |
| qualcomm | sdx65m_firmware | * |
| qualcomm | sm6650p_firmware | * |
| qualcomm | sm7525_firmware | * |
| qualcomm | sm7550_firmware | * |
| qualcomm | sm7550p_firmware | * |
| qualcomm | sm7635p_firmware | * |
| qualcomm | sm7675_firmware | * |
| qualcomm | sm7675p_firmware | * |
| qualcomm | sm8550p_firmware | * |
| qualcomm | sm8635_firmware | * |
| qualcomm | sm8635p_firmware | * |
| qualcomm | sm8650q_firmware | * |
| qualcomm | snapdragon_460_mobile_platform_firmware | * |
| qualcomm | snapdragon_6_gen_4_mobile_platform_firmware | * |
| qualcomm | snapdragon_662_mobile_platform_firmware | * |
| qualcomm | snapdragon_7s_gen_3_mobile_platform_firmware | * |
| qualcomm | snapdragon_8_gen_2_mobile_platform_firmware | * |
| qualcomm | snapdragon_8_gen_3_mobile_platform_firmware | * |
| qualcomm | snapdragon_8+_gen_2_mobile_platform_firmware | * |
| qualcomm | snapdragon_ar1_gen_1_platform_firmware | * |
| qualcomm | snapdragon_x65_5g_modem-rf_system_firmware | * |
| qualcomm | snapdragon_x72_5g_modem-rf_system_firmware | * |
| qualcomm | snapdragon_x75_5g_modem-rf_system_firmware | * |
| qualcomm | snapdragon_xr2_5g_platform_firmware | * |
| qualcomm | snapdragon_xr2+_gen_1_platform_firmware | * |
| qualcomm | srv1h_firmware | * |
| qualcomm | srv1m_firmware | * |
| qualcomm | sw-only_firmware | * |
| qualcomm | sxr2230p_firmware | * |
Helpful Resources
Exploitability
| CWE ID | Description |
|---|---|
| CWE-126 | The product reads from a buffer using buffer access mechanisms such as indexes or pointers that reference memory locations after the targeted buffer. |