Vulnerabilities ›

CVE-2025-59609

Medium

CWE-126 — Weakness Type

                    Published: Jun 1, 2026                      ·  Modified: Jun 4, 2026                      ·  Source: NVD                

CVSS v3

5.5

🔗 NVD Official

📄 Description (English)

Information Disclosure when processing advertisement frames with malformed MBSSID elements of insufficient length.

🤖 AI Executive Summary

CVE-2025-59609 involves information disclosure vulnerability when processing advertisement frames containing malformed MBSSID elements with insufficient length. This affects wireless network implementations and could expose sensitive network information to attackers.

📄 Description (Arabic)

تحدث هذه الثغرة عند معالجة إطارات 802.11 الإعلانية التي تحتوي على عناصر MBSSID (Multiple BSSID) بطول غير كافٍ. يمكن للمهاجمين استغلال هذا الخلل لكشف معلومات حساسة عن الشبكة اللاسلكية. التحقق غير الكافي من طول العنصر يسمح بقراءة ذاكرة غير مصرح بها.

🤖 ملخص تنفيذي (AI)

ثغرة الكشف عن المعلومات عند معالجة إطارات الإعلانات التي تحتوي على عناصر MBSSID مشوهة بطول غير كافٍ. قد يؤدي هذا إلى تعريض معلومات الشبكة الحساسة للمهاجمين.

🤖 AI Intelligence Analysis Analyzed: Jun 2, 2026 03:01

🇸🇦 Saudi Arabia Impact Assessment

Saudi Relevance: high

🏢 Affected Saudi Sectors

telecom government banking energy healthcare

🎯 MITRE ATT&CK Techniques

T1040 T1040.001

⚖️ Saudi Risk Score (AI)

5.0

/ 10.0

🔧 Remediation Steps (English)

Update wireless network drivers and firmware to patched versions that properly validate MBSSID element length. Implement input validation for advertisement frames and monitor network traffic for malformed frames.

🔧 خطوات المعالجة (العربية)

قم بتحديث برامج تشغيل الشبكات اللاسلكية والبرامج الثابتة إلى الإصدارات المصححة التي تتحقق بشكل صحيح من طول عنصر MBSSID. قم بتنفيذ التحقق من صحة الإدخال لإطارات الإعلانات ومراقبة حركة المرور على الشبكة للكشف عن الإطارات المشوهة.

📋 Regulatory Compliance Mapping

🟢 NCA ECC 2024

2.1 2.2

🔵 SAMA CSF

ID.RA-1 PR.DS-1

🟡 ISO 27001:2022

A.12.2.1 A.13.1.1

🔗 References & Sources 1

🔗

https://docs.qualcomm.com/product/publicresources/securitybulletin/june-2026-bulletin.html

product-security@qualcomm.com

Vendor Advisory Patch

📦 Affected Products / CPE 50 entries

qualcomm:5g_fixed_wireless_access_platform_firmware:-

qualcomm:ar8035_firmware:-

qualcomm:csr8811_firmware:-

qualcomm:fastconnect_6700_firmware:-

qualcomm:fastconnect_6900_firmware:-

qualcomm:sxr2250p_firmware:-

qualcomm:wcd9340_firmware:-

qualcomm:wcd9370_firmware:-

qualcomm:wcd9371_firmware:-

qualcomm:wcd9375_firmware:-

qualcomm:wcd9378_firmware:-

qualcomm:wcd9380_firmware:-

qualcomm:wcd9385_firmware:-

qualcomm:wcd9390_firmware:-

qualcomm:wcd9395_firmware:-

qualcomm:wcn3950_firmware:-

qualcomm:wcn3988_firmware:-

qualcomm:wcn6650_firmware:-

qualcomm:wcn6755_firmware:-

qualcomm:wsa8810_firmware:-

qualcomm:wsa8815_firmware:-

qualcomm:wsa8830_firmware:-

qualcomm:wsa8832_firmware:-

qualcomm:wsa8835_firmware:-

qualcomm:wsa8840_firmware:-

qualcomm:wsa8845_firmware:-

qualcomm:wsa8845h_firmware:-

qualcomm:fastconnect_7800_firmware:-

qualcomm:flight_rb5_5g_platform_firmware:-

qualcomm:fwa_gen_3_ultra_firmware:-

qualcomm:g3x_gen_2_firmware:-

qualcomm:immersive_home_214_platform_firmware:-

qualcomm:immersive_home_216_platform_firmware:-

qualcomm:immersive_home_316_platform_firmware:-

qualcomm:immersive_home_318_platform_firmware:-

qualcomm:immersive_home_3210_platform_firmware:-

qualcomm:immersive_home_326_platform_firmware:-

qualcomm:ipq5010_firmware:-

qualcomm:ipq5028_firmware:-

qualcomm:ipq5300_firmware:-

qualcomm:ipq5302_firmware:-

qualcomm:ipq5312_firmware:-

qualcomm:ipq5332_firmware:-

qualcomm:ipq6000_firmware:-

qualcomm:ipq6010_firmware:-

qualcomm:ipq6018_firmware:-

qualcomm:ipq8076_firmware:-

qualcomm:ipq8078_firmware:-

qualcomm:ipq9008_firmware:-

qualcomm:ipq9554_firmware:-

📊 CVSS Score

5.5

/ 10.0 — Medium

📊 CVSS Vector

CVSS:3.1/AV:N/AC:H/PR:L/UI:R/S:C/C:L/I:L/A:L

Attack VectorN — None / Network

Attack ComplexityH — High

Privileges RequiredL — Low / Local

User InteractionR — Required

ScopeC — Changed

ConfidentialityL — Low / Local

IntegrityL — Low / Local

AvailabilityL — Low / Local

📋 Quick Facts

Severity Medium

CVSS Score5.5

CWECWE-126

EPSS0.03%

Exploit No

Patch ✗ No

Published 2026-06-01

Source Feed nvd

🇸🇦 Saudi Risk Score

5.0

/ 10.0 — Saudi Risk

Priority: MEDIUM

🏷️ Tags

CWE-126

🏢 Vendor Advisories

🔗 https://docs.qualcomm.com/product/publicresources/se...

⚡ Actions

🔗 NVD Official Page ⚡ Exploit-DB Search 🐙 GitHub PoC Search 🎯 MITRE ATT&CK 📊 CVE Details

CVE-2025-59609

Introduce Yourself

Sign In Required