Vulnerabilities ›

CVE-2025-59605

High

CWE-787 — Weakness Type

                    Published: Jun 1, 2026                      ·  Modified: Jun 8, 2026                      ·  Source: NVD                

CVSS v3

7.8

🔗 NVD Official

📄 Description (English)

Memory Corruption when processing device identifier strings that exceed the expected maximum length.

🤖 AI Executive Summary

CVE-2025-59605 is a high-severity memory corruption vulnerability (CVSS 7.8) affecting multiple Qualcomm wireless and gaming platform firmware components through improper handling of oversized device identifier strings. Without available patches, this vulnerability poses significant risk to Saudi organizations relying on Qualcomm chipsets in networking, IoT, and mobile infrastructure. The lack of exploit availability provides a narrow window for defensive preparation before potential weaponization.

📄 Description (Arabic)

🤖 AI Intelligence Analysis Analyzed: Jun 6, 2026 12:33

🇸🇦 Saudi Arabia Impact Assessment

This vulnerability primarily impacts Saudi telecommunications operators (STC, Mobily, Zain) using Qualcomm FastConnect chipsets in network infrastructure and 5G equipment. Banking sector exposure is moderate through IoT and mobile banking devices utilizing affected Snapdragon platforms. Government and critical infrastructure entities face risk through wireless networking equipment. Energy sector (ARAMCO) exposure exists in industrial IoT and remote monitoring systems. Healthcare institutions using wireless medical devices and connected healthcare infrastructure are at risk. The AR8035 and FastConnect series are particularly prevalent in Saudi enterprise networking environments.

🏢 Affected Saudi Sectors

Telecommunications (STC, Mobily, Zain) Banking and Financial Services Government and Public Administration Energy and Utilities (ARAMCO) Healthcare Critical Infrastructure Manufacturing and Industrial IoT

🎯 MITRE ATT&CK Techniques

T1190 - Exploit Public-Facing Application T1203 - Exploitation for Client Execution T1499 - Endpoint Denial of Service T1040 - Network Sniffing T1548 - Abuse Elevation Control Mechanism T1055 - Process Injection

⚖️ Saudi Risk Score (AI)

7.8

/ 10.0

🔧 Remediation Steps (English)

Immediate Actions:

1. Inventory all devices and systems using affected Qualcomm firmware (Snapdragon G1 Gen 2, AR8035, CSRA66xx, FastConnect 6200/6700/6800/6900/7800, G2 Gen 1)

2. Isolate or restrict network access to devices with confirmed vulnerable firmware until patches are available

3. Implement network segmentation to limit lateral movement from compromised devices

4. Enable enhanced logging and monitoring on affected systems



Compensating Controls:

5. Deploy intrusion detection/prevention systems (IDS/IPS) with rules detecting oversized device identifier strings

6. Implement strict input validation at network boundaries filtering malformed device identifiers

7. Monitor for memory corruption indicators: unexpected system crashes, privilege escalation attempts, unauthorized code execution

8. Apply principle of least privilege to services accessing device identifier processing

9. Disable unnecessary wireless features and protocols on affected devices where operationally feasible

10. Establish vendor communication channels with Qualcomm for patch availability updates



Detection Rules:

- Alert on device identifier strings exceeding 256 bytes in wireless protocol handshakes

- Monitor for firmware crashes or unexpected reboots on affected chipset models

- Track unauthorized privilege escalation from wireless subsystem processes

- Flag memory access violations in device identifier parsing routines

🔧 خطوات المعالجة (العربية)

الإجراءات الفورية:

1. حصر جميع الأجهزة والأنظمة التي تستخدم البرامج الثابتة المتأثرة من كوالكوم (Snapdragon G1 Gen 2، AR8035، CSRA66xx، FastConnect 6200/6700/6800/6900/7800، G2 Gen 1)

2. عزل أو تقييد الوصول إلى الشبكة للأجهزة ذات البرامج الثابتة المعروفة بأنها ضعيفة حتى تتوفر التصحيحات

3. تنفيذ تقسيم الشبكة لتحديد الحركة الجانبية من الأجهزة المخترقة

4. تفعيل السجلات المحسنة والمراقبة على الأنظمة المتأثرة



الضوابط البديلة:

5. نشر أنظمة كشف/منع الاختراق (IDS/IPS) مع قواعد كشف سلاسل معرفات الأجهزة الكبيرة

6. تنفيذ التحقق الصارم من المدخلات على حدود الشبكة لتصفية معرفات الأجهزة المشوهة

7. مراقبة مؤشرات فساد الذاكرة: أعطال النظام غير المتوقعة، محاولات تصعيد الامتيازات، تنفيذ الأكواد غير المصرح بها

8. تطبيق مبدأ أقل امتياز على الخدمات التي تصل إلى معالجة معرف الجهاز

9. تعطيل الميزات والبروتوكولات اللاسلكية غير الضرورية على الأجهزة المتأثرة حيث يكون ذلك ممكناً من الناحية التشغيلية

10. إنشاء قنوات اتصال مع كوالكوم للحصول على تحديثات توفر التصحيحات



قواعد الكشف:

- تنبيه على سلاسل معرفات الأجهزة التي تتجاوز 256 بايت في مصافحات البروتوكول اللاسلكي

- مراقبة أعطال البرامج الثابتة أو إعادة التشغيل غير المتوقعة على نماذج الرقائق المتأثرة

- تتبع تصعيد الامتيازات غير المصرح به من عمليات النظام الفرعي اللاسلكي

- وضع علامة على انتهاكات الوصول إلى الذاكرة في روتينات تحليل معرف الجهاز

📋 Regulatory Compliance Mapping

🟢 NCA ECC 2024

ECC 2024 A.12.6.1 - Management of technical vulnerabilities ECC 2024 A.12.2.1 - Change management procedures ECC 2024 A.14.2.1 - Secure development policy ECC 2024 A.12.3.1 - Segregation of networks

🔵 SAMA CSF

ID.RA-1 - Asset management and vulnerability identification PR.IP-12 - Secure software development practices DE.CM-1 - Detection and analysis of anomalies RS.MI-1 - Incident response and mitigation

🟡 ISO 27001:2022

A.12.2.1 - Change management A.12.6.1 - Management of technical vulnerabilities A.14.2.1 - Secure development policy A.13.1.3 - Segregation of networks

🟣 PCI DSS v4.0.1

Requirement 6.2 - Security patches and updates Requirement 11.2 - Vulnerability scanning

🔗 References & Sources 1

🔗

https://docs.qualcomm.com/product/publicresources/securitybulletin/june-2026-bulletin.html

product-security@qualcomm.com

Vendor Advisory

📦 Affected Products / CPE 50 entries

qualcomm:snapdragon_g1_gen_2_gaming_platform_firmware:-

qualcomm:ar8035_firmware:-

qualcomm:csra6620_firmware:-

qualcomm:csra6640_firmware:-

qualcomm:fastconnect_6200_firmware:-

qualcomm:fastconnect_6700_firmware:-

qualcomm:fastconnect_6800_firmware:-

qualcomm:fastconnect_6900_firmware:-

qualcomm:fastconnect_7800_firmware:-

qualcomm:g2_gen_1_firmware:-

qualcomm:g3x_gen_2_firmware:-

qualcomm:kalpeni_firmware:-

qualcomm:netrani_firmware:-

qualcomm:qam8295p_firmware:-

qualcomm:qca6174a_firmware:-

qualcomm:qca6391_firmware:-

qualcomm:qca6574_firmware:-

qualcomm:qca6574a_firmware:-

qualcomm:qca6574au_firmware:-

qualcomm:qca6595_firmware:-

qualcomm:qca6595au_firmware:-

qualcomm:qca6688aq_firmware:-

qualcomm:qca6696_firmware:-

qualcomm:qca6698aq_firmware:-

qualcomm:qca6698au_firmware:-

qualcomm:qca6797aq_firmware:-

qualcomm:qca8081_firmware:-

qualcomm:qca8337_firmware:-

qualcomm:qcm2290_firmware:-

qualcomm:qcm4490_firmware:-

qualcomm:qcm5430_firmware:-

qualcomm:qcm6125_firmware:-

qualcomm:qcm6490_firmware:-

qualcomm:qcn6024_firmware:-

qualcomm:qcn9011_firmware:-

qualcomm:qcn9012_firmware:-

qualcomm:qcn9024_firmware:-

qualcomm:qcs2290_firmware:-

qualcomm:qcs4490_firmware:-

qualcomm:qcs8550_firmware:-

qualcomm:qdu1000_firmware:-

qualcomm:qdu1110_firmware:-

qualcomm:qdu1210_firmware:-

qualcomm:qdx1010_firmware:-

qualcomm:qdx1011_firmware:-

qualcomm:wcd9395_firmware:-

qualcomm:wcn3910_firmware:-

qualcomm:wcn3950_firmware:-

qualcomm:wcn3980_firmware:-

qualcomm:wcn3988_firmware:-

📊 CVSS Score

7.8

/ 10.0 — High

📊 CVSS Vector

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Attack VectorL — Low / Local

Attack ComplexityL — Low / Local

Privileges RequiredL — Low / Local

User InteractionN — None / Network

ScopeU — Unchanged

ConfidentialityH — High

IntegrityH — High

AvailabilityH — High

📋 Quick Facts

Severity High

CVSS Score7.8

CWECWE-787

EPSS0.01%

Exploit No

Patch ✗ No

Published 2026-06-01

Source Feed nvd

🇸🇦 Saudi Risk Score

7.8

/ 10.0 — Saudi Risk

Priority: HIGH

🏷️ Tags

CWE-787

🏢 Vendor Advisories

🔗 https://docs.qualcomm.com/product/publicresources/se...

⚡ Actions

🔗 NVD Official Page ⚡ Exploit-DB Search 🐙 GitHub PoC Search 🎯 MITRE ATT&CK 📊 CVE Details

CVE-2025-59605

Introduce Yourself

Sign In Required