Description
Transient DOS when processing a continuous receive command with a zero-sized global configuration override.
Published: 2026-10-06
Score: 7.5 High
EPSS: < 1% Very Low
KEV: No
Impact: Denial of Service (Crash)
Action: Immediate Patch
AI Analysis

Impact

This vulnerability is a buffer over-read that can trigger a transient denial of service when the WLAN HAL processes a continuous receive command with a zero-length global configuration override. The over-read can lead to a crash or temporary downgrade of the WLAN subsystem, potentially disrupting connectivity for affected devices.

Affected Systems

Qualcomm, Inc. Snapdragon devices are affected. No specific firmware versions are listed, so any build containing the vulnerable WLAN HAL is potentially impacted.

Risk and Exploitability

The CVSS score of 7.5 indicates a high severity. EPSS data is not available, so the exploitation probability cannot be quantified, but the lack of KEV listing does not preclude real-world attacks. Attackers are likely to need the ability to send malformed or specially crafted receive commands to the device, possibly through a local or remote network interface. Based on the description, the most probable vector involves manipulation of the WLAN stack via traffic that triggers continuous receive handling.

Generated by OpenCVE AI on October 6, 2026 at 08:27 UTC.

Remediation

No solution or workaround provided in the CVE record.

OpenCVE Recommended Actions

  • Update the device firmware to a version that includes the WLAN HAL fix provided by Qualcomm.
  • If a vendor patch is not yet available, reconfigure the WLAN subsystem to disable or limit continuous receive commands, and ensure any configuration overrides are validated for non-zero size.
  • Continuously monitor WLAN logs and system stability; if crashes or abnormal behavior occur, schedule a firmware upgrade as soon as it becomes available.

Generated by OpenCVE AI on October 6, 2026 at 08:27 UTC.

Tracking

Sign in to view the affected projects.

Advisories

No advisories yet.

History

Fri, 09 Oct 2026 14:30:00 +0000

Type Values Removed Values Added
First Time appeared Qualcomm congo
Qualcomm congo Firmware
Qualcomm fastconnect 7800
Qualcomm fastconnect 7800 Firmware
Qualcomm fastconnect 8800 Mobile Connectivity System
Qualcomm fastconnect 8800 Mobile Connectivity System Firmware
Qualcomm orne
Qualcomm orne Firmware
Qualcomm pandeiro
Qualcomm pandeiro Firmware
Qualcomm sm8950
Qualcomm sm8950 Firmware
Qualcomm sm8950p
Qualcomm sm8950p Firmware
Qualcomm sm8975
Qualcomm sm8975 Firmware
Qualcomm sm8975p
Qualcomm sm8975p Firmware
Qualcomm wcd9378
Qualcomm wcd9378 Firmware
Qualcomm wcd9395
Qualcomm wcd9395 Firmware
Qualcomm wcn7880
Qualcomm wcn7880 Firmware
Qualcomm wcn7881
Qualcomm wcn7881 Firmware
Qualcomm wcn8841
Qualcomm wcn8841 Firmware
CPEs cpe:2.3:h:qualcomm:congo:-:*:*:*:*:*:*:*
cpe:2.3:h:qualcomm:fastconnect_7800:-:*:*:*:*:*:*:*
cpe:2.3:h:qualcomm:fastconnect_8800_mobile_connectivity_system:-:*:*:*:*:*:*:*
cpe:2.3:h:qualcomm:orne:-:*:*:*:*:*:*:*
cpe:2.3:h:qualcomm:pandeiro:-:*:*:*:*:*:*:*
cpe:2.3:h:qualcomm:sm8950:-:*:*:*:*:*:*:*
cpe:2.3:h:qualcomm:sm8950p:-:*:*:*:*:*:*:*
cpe:2.3:h:qualcomm:sm8975:-:*:*:*:*:*:*:*
cpe:2.3:h:qualcomm:sm8975p:-:*:*:*:*:*:*:*
cpe:2.3:h:qualcomm:wcd9378:-:*:*:*:*:*:*:*
cpe:2.3:h:qualcomm:wcd9395:-:*:*:*:*:*:*:*
cpe:2.3:h:qualcomm:wcn7880:-:*:*:*:*:*:*:*
cpe:2.3:h:qualcomm:wcn7881:-:*:*:*:*:*:*:*
cpe:2.3:h:qualcomm:wcn8841:-:*:*:*:*:*:*:*
cpe:2.3:o:qualcomm:congo_firmware:-:*:*:*:*:*:*:*
cpe:2.3:o:qualcomm:fastconnect_7800_firmware:-:*:*:*:*:*:*:*
cpe:2.3:o:qualcomm:fastconnect_8800_mobile_connectivity_system_firmware:-:*:*:*:*:*:*:*
cpe:2.3:o:qualcomm:orne_firmware:-:*:*:*:*:*:*:*
cpe:2.3:o:qualcomm:pandeiro_firmware:-:*:*:*:*:*:*:*
cpe:2.3:o:qualcomm:sm8950_firmware:-:*:*:*:*:*:*:*
cpe:2.3:o:qualcomm:sm8950p_firmware:-:*:*:*:*:*:*:*
cpe:2.3:o:qualcomm:sm8975_firmware:-:*:*:*:*:*:*:*
cpe:2.3:o:qualcomm:sm8975p_firmware:-:*:*:*:*:*:*:*
cpe:2.3:o:qualcomm:wcd9378_firmware:-:*:*:*:*:*:*:*
cpe:2.3:o:qualcomm:wcd9395_firmware:-:*:*:*:*:*:*:*
cpe:2.3:o:qualcomm:wcn7880_firmware:-:*:*:*:*:*:*:*
cpe:2.3:o:qualcomm:wcn7881_firmware:-:*:*:*:*:*:*:*
cpe:2.3:o:qualcomm:wcn8841_firmware:-:*:*:*:*:*:*:*
Vendors & Products Qualcomm congo
Qualcomm congo Firmware
Qualcomm fastconnect 7800
Qualcomm fastconnect 7800 Firmware
Qualcomm fastconnect 8800 Mobile Connectivity System
Qualcomm fastconnect 8800 Mobile Connectivity System Firmware
Qualcomm orne
Qualcomm orne Firmware
Qualcomm pandeiro
Qualcomm pandeiro Firmware
Qualcomm sm8950
Qualcomm sm8950 Firmware
Qualcomm sm8950p
Qualcomm sm8950p Firmware
Qualcomm sm8975
Qualcomm sm8975 Firmware
Qualcomm sm8975p
Qualcomm sm8975p Firmware
Qualcomm wcd9378
Qualcomm wcd9378 Firmware
Qualcomm wcd9395
Qualcomm wcd9395 Firmware
Qualcomm wcn7880
Qualcomm wcn7880 Firmware
Qualcomm wcn7881
Qualcomm wcn7881 Firmware
Qualcomm wcn8841
Qualcomm wcn8841 Firmware

Tue, 06 Oct 2026 12:30:00 +0000

Type Values Removed Values Added
Metrics ssvc

{'options': {'Automatable': 'yes', 'Exploitation': 'none', 'Technical Impact': 'partial'}, 'version': '2.0.3'}


Tue, 06 Oct 2026 10:00:00 +0000

Type Values Removed Values Added
First Time appeared Qualcomm
Qualcomm snapdragon
Vendors & Products Qualcomm
Qualcomm snapdragon

Tue, 06 Oct 2026 07:00:00 +0000

Type Values Removed Values Added
Description Transient DOS when processing a continuous receive command with a zero-sized global configuration override.
Title Buffer Over-read in WLAN HAL
Weaknesses CWE-126
References
Metrics cvssV3_1

{'score': 7.5, 'vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H'}


Subscriptions

Qualcomm Congo Congo Firmware Fastconnect 7800 Fastconnect 7800 Firmware Fastconnect 8800 Mobile Connectivity System Fastconnect 8800 Mobile Connectivity System Firmware Orne Orne Firmware Pandeiro Pandeiro Firmware Sm8950 Sm8950 Firmware Sm8950p Sm8950p Firmware Sm8975 Sm8975 Firmware Sm8975p Sm8975p Firmware Snapdragon Wcd9378 Wcd9378 Firmware Wcd9395 Wcd9395 Firmware Wcn7880 Wcn7880 Firmware Wcn7881 Wcn7881 Firmware Wcn8841 Wcn8841 Firmware
cve-icon MITRE

Status: PUBLISHED

Assigner: qualcomm

Published:

Updated: 2026-10-06T12:04:33.709Z

Reserved: 2026-06-24T16:16:09.736Z

Link: CVE-2026-57546

cve-icon Vulnrichment

Updated: 2026-10-06T12:04:27.579Z

cve-icon NVD

Status : Analyzed

Published: 2026-10-06T07:16:58.630

Modified: 2026-10-09T14:12:27.940

Link: CVE-2026-57546

cve-icon Redhat

No data.

cve-icon OpenCVE Enrichment

Updated: 2026-10-06T09:45:13Z

Weaknesses