CVE-2025-59609

MediumCVSS 5.5/10Last modified Jul 22, 2026

Description

Information Disclosure when processing advertisement frames with malformed MBSSID elements of insufficient length.

Metrics

CVSS 3.1 5.5/10CVSS:3.1/AV:N/AC:H/PR:L/UI:R/S:C/C:L/I:L/A:L

Weakness enumeration

CWE-126

Affected software

Vendor	Product	Versions
Qualcomm, Inc.	Snapdragon	AR8035; CSR8811; CSRA6620; CSRA6640; FastConnect 6700; FastConnect 6900; FastConnect 7800; Flight RB5 5G Platform; FWA Gen 3 Ultra Platform; Immersive Home 214 Platform; Immersive Home 216 Platform; Immersive Home 316 Platform; Immersive Home 318 Platform; Immersive Home 3210 Platform; Immersive Home 326 Platform; IPQ5010; IPQ5028; IPQ5300; IPQ5302; IPQ5312

References

https://docs.qualcomm.com/product/publicresources/securitybulletin/june-2026-bulletin.htmlPatch, Vendor Advisory

Timeline

Published: Jun 1, 2026
Last modified: Jul 22, 2026
NVD status: Analyzed

Related CVEs from 2025

CVE-2025-59617.2The Migration, Backup, Staging – WPvivid Backup & Migration plugin for WordPress is vulnerable to arbitrary file uploads due to missing file CVE-2025-596106.4Memory Corruption when processing IOCTL requests with mismatched API versions due to concurrent modification of user-space buffer.CVE-2025-596116.7Memory corruption in diagnostic services due to absence of input validation CVE-2025-596126.7Memory corruption in windows drivers while sending incorrect trusted application request CVE-2025-596136.7Memory Corruption when output buffer size is smaller than input buffer size during data copying operation.CVE-2025-596146.7Memory Corruption when sending random number generator command with insufficient output buffer size.CVE-2025-596157.8Memory Corruption when invoking device input/output control operations for mapping and unmapping persistent memory buffers due to improper s CVE-2025-596167.8Memory Corruption when processing multiple IOCTL calls with the same buffer file descriptor input due to accessing already freed memory.CVE-2025-596177.3Memory Corruption when processing multiple IOCTL calls with the same buffer file descriptor input.CVE-2025-59627.7A flaw was found in the Lightspeed history service. Insufficient access controls allow a local, unprivileged user to access and manipulate t CVE-2025-59634.8The Postbox's configuration on macOS, specifically the presence of entitlements: "com.apple.security.cs.allow-dyld-environment-variables" an CVE-2025-59646.5A path traversal issue in the API endpoint in M-Files Server before version 25.6.14925.0 allows an authenticated user to read files in the s