CVE-2026-57546: Buffer Over-read in WLAN HAL
Published Oct 6, 2026
·Updated
Transient DOS when processing a continuous receive command with a zero-sized global configuration override.
Affected Software
29 affected components
WLAN HAL
All of the following
Qualcomm Congo Firmware
Qualcomm Congo
All of the following
Qualcomm Fastconnect 7800 Firmware
Qualcomm Fastconnect 7800
All of the following
Qualcomm Orne Firmware
Qualcomm Orne
All of the following
Qualcomm Pandeiro Firmware
Qualcomm Pandeiro
All of the following
Qualcomm Fastconnect 8800 Mobile Connectivity System Firmware
Qualcomm Fastconnect 8800 Mobile Connectivity System
All of the following
Qualcomm Sm8950 Firmware
Qualcomm Sm8950
All of the following
Qualcomm Sm8950p Firmware
Qualcomm Sm8950p
All of the following
Qualcomm Sm8975 Firmware
Qualcomm Sm8975
All of the following
Qualcomm Sm8975p Firmware
Qualcomm Sm8975p
All of the following
Qualcomm Wcd9378 Firmware
Qualcomm Wcd9378
All of the following
Qualcomm Wcd9395 Firmware
Qualcomm Wcd9395
All of the following
Qualcomm Wcn7880 Firmware
Qualcomm Wcn7880
All of the following
Qualcomm Wcn7881 Firmware
Qualcomm Wcn7881
All of the following
Qualcomm Wcn8841 Firmware
Qualcomm Wcn8841
Event History
Oct 6, 2026
CVE Published
via MITRE·06:30 AM
Data Sourced
via MITRE·06:30 AM
DescriptionSeverityWeakness
Data Sourced
via NVD·07:16 AM
DescriptionSeverityWeaknessAffected Software
Frequently Asked Questions
1
What conditions are required to trigger the denial of service?
The issue is triggered when WLAN HAL processes a continuous receive command while a zero-sized global configuration override is present. The provided data does not state that authentication, local access, or user interaction is required.
2
What is the expected impact of successful exploitation?
Successful exploitation causes a transient denial of service. The supplied severity vector indicates network reachability, low attack complexity, no privileges required, no user interaction, and impact limited to availability.