CVE-2025-59609: Buffer Over-read in WLAN Host Communication
Information Disclosure when processing advertisement frames with malformed MBSSID elements of insufficient length.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
android/:unknown:to a version that resolves this vulnerability.Fixed in SoCVersion:2026-06-05
Event History
Frequently Asked Questions
What is the severity of CVE-2025-59609?
The severity of CVE-2025-59609 is rated as medium with a score of 5.5.
How do I fix CVE-2025-59609?
To fix CVE-2025-59609, apply the available patch provided by Qualcomm for the affected firmware.
What types of devices are affected by CVE-2025-59609?
CVE-2025-59609 affects various Qualcomm firmware including the 5G Fixed Wireless Access Platform, Ar8035, Csr8811, Fastconnect 6700, Fastconnect 6900, Sxr2250p, Wcd9340, and Wcd9370.
What does CVE-2025-59609 exploit?
CVE-2025-59609 exploits a buffer over-read vulnerability that occurs when processing advertisement frames with malformed MBSSID elements that are of insufficient length.
What is the risk associated with CVE-2025-59609?
CVE-2025-59609 poses a risk of information disclosure due to improper handling of malformed data.