Description
Information Disclosure when processing advertisement frames with malformed MBSSID elements of insufficient length.
Affected products
qualcomm: 5g fixed wireless access platform firmware; qualcomm: 5g fixed wireless access platform; qualcomm: ar8035 firmware; qualcomm: ar8035; qualcomm: csr8811 firmware; qualcomm: csr8811; qualcomm: fastconnect 6700 firmware; qualcomm: fastconnect 6700; qualcomm: fastconnect 6900 firmware; qualcomm: fastconnect 6900; qualcomm: sxr2250p firmware; qualcomm: sxr2250p; qualcomm: wcd9340 firmware; qualcomm: wcd9340; qualcomm: wcd9370 firmware
References1
- docs.qualcomm.com/product/publicresources/securitybulletin/june… PatchVendor Advisory
Metrics
- CVSS 3.1
-
5.5
MEDIUM
Score source: CNA
CVSS:3.1/AV:N/AC:H/PR:L/UI:R/S:C/C:L/I:L/A:L - EPSS — exploit probability
- 0% percentile: 0 · as of 15 November 2026
- CWE
- CWE-126
Could this be exploited in your environment?
A patch closes the known hole. A penetration test shows what an attacker can still reach — with proof.