CVE-2025-59609 MEDIUM

CVE-2025-59609: Buffer Over-read in WLAN Host Communication

Vendor Qualcomm, Inc.
Product Snapdragon
Weakness CWE-126
Published June 1, 2026
Last update June 1, 2026

CVSS base score

5.5/10
Attack vector Network
Attack complexity High
Privileges required Low
User interaction Required
Confidentiality Low
Integrity Low

CVSS vector

CVSS:3.1/AV:N/AC:H/PR:L/UI:R/S:C/C:L/I:L/A:L

What the vulnerability does

01Description

Information Disclosure when processing advertisement frames with malformed MBSSID elements of insufficient length.

Key dates

02Disclosure timeline

June 1, 2026 CVE published
June 1, 2026 Record updated