Description
Memory Corruption when processing invalid HT40 channel layouts during dynamic channel switching operations.
Published: 2026-07-06
Score: 8.8 High
EPSS: < 1% Very Low
KEV: No
Impact: n/a
Action: n/a
AI Analysis

Impact

A stack‑based buffer overflow occurs in Qualcomm Snapdragon WLAN host code when it processes an invalid HT40 channel layout during dynamic channel switching operations. The overflow corrupts the stack, causing memory corruption. No evidence is provided that the vulnerability results in a crash or arbitrary code execution, but the corrupted memory could potentially be leveraged to influence system integrity if the vulnerable code runs with elevated privileges.

Affected Systems

Qualcomm Snapdragon wireless platforms that implement the described dynamic channel‑switching logic are affected. The CVE does not list precise firmware versions or device models, so any Snapdragon device that handles HT40 channel layouts in this manner may be at risk.

Risk and Exploitability

The CVSS score of 8.8 signifies a high severity. The EPSS score of < 1% indicates a very low probability of exploitation, and the vulnerability is not present in the CISA KEV catalog. Based on the description, the likely attack vector involves transmitting specially crafted Wi‑Fi frames that produce an invalid HT40 layout, which an attacker could arrange from a device in proximity or by exploiting an open wireless network, the memory corruption could enable privilege escalation or compromise of system integrity if the vulnerable code runs with sufficient privileges.

Generated by OpenCVE AI on July 29, 2026 at 16:06 UTC.

Remediation

No vendor fix or workaround currently provided.

OpenCVE Recommended Actions

  • Upgrade Qualcomm firmware to a patched release that corrects the buffer overflow in WLAN host code.
  • If no patch exists, disable dynamic channel switching or remove the related module in the wireless firmware to eliminate the vulnerable code path.
  • Segment network segments so that vulnerable devices are isolated from critical resources, reducing the potential impact of any memory corruption.

Generated by OpenCVE AI on July 29, 2026 at 16:06 UTC.

Tracking

Sign in to view the affected projects.

Advisories

No advisories yet.

History

Mon, 06 Jul 2026 21:30:00 +0000

Type Values Removed Values Added
Metrics ssvc

{'options': {'Automatable': 'no', 'Exploitation': 'none', 'Technical Impact': 'total'}, 'version': '2.0.3'}


Mon, 06 Jul 2026 20:30:00 +0000

Type Values Removed Values Added
Description Memory Corruption when processing invalid HT40 channel layouts during dynamic channel switching operations.
Title Stack-based Buffer Overflow in WLAN Host
Weaknesses CWE-121
References
Metrics cvssV3_1

{'score': 8.8, 'vector': 'CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H'}


Subscriptions

No data.

cve-icon MITRE

Status: PUBLISHED

Assigner: qualcomm

Published:

Updated: 2026-07-07T03:56:16.611Z

Reserved: 2026-02-02T04:19:00.940Z

Link: CVE-2026-25268

cve-icon Vulnrichment

Updated: 2026-07-06T20:56:15.191Z

cve-icon NVD

No data.

cve-icon Redhat

No data.

cve-icon OpenCVE Enrichment

Updated: 2026-07-29T16:15:03Z

Weaknesses
  • CWE-121

    Stack-based Buffer Overflow