Impact
This vulnerability is a buffer over-read that can trigger a transient denial of service when the WLAN HAL processes a continuous receive command with a zero-length global configuration override. The over-read can lead to a crash or temporary downgrade of the WLAN subsystem, potentially disrupting connectivity for affected devices.
Affected Systems
Qualcomm, Inc. Snapdragon devices are affected. No specific firmware versions are listed, so any build containing the vulnerable WLAN HAL is potentially impacted.
Risk and Exploitability
The CVSS score of 7.5 indicates a high severity. EPSS data is not available, so the exploitation probability cannot be quantified, but the lack of KEV listing does not preclude real-world attacks. Attackers are likely to need the ability to send malformed or specially crafted receive commands to the device, possibly through a local or remote network interface. Based on the description, the most probable vector involves manipulation of the WLAN stack via traffic that triggers continuous receive handling.
OpenCVE Enrichment