CVE-2025-59609 — MEDIUM (5.5)

Vulnerability Description

Information Disclosure when processing advertisement frames with malformed MBSSID elements of insufficient length.

CVSS Score

5.5

MEDIUM

CVSS:3.1/AV:N/AC:H/PR:L/UI:R/S:C/C:L/I:L/A:L

Attack Vector

NETWORK

Attack Complexity

HIGH

Privileges Required

LOW

User Interaction

REQUIRED

Scope

CHANGED

Confidentiality

LOW

Integrity

LOW

Availability

LOW

Affected Products

Vendor	Product	Versions
Qualcomm	5G Fixed Wireless Access Platform Firmware	-
Qualcomm	5G Fixed Wireless Access Platform	-
Qualcomm	Ar8035 Firmware	-
Qualcomm	Ar8035	-
Qualcomm	Csr8811 Firmware	-
Qualcomm	Csr8811	-
Qualcomm	Fastconnect 6700 Firmware	-
Qualcomm	Fastconnect 6700	-
Qualcomm	Fastconnect 6900 Firmware	-
Qualcomm	Fastconnect 6900	-
Qualcomm	Sxr2250P Firmware	-
Qualcomm	Sxr2250P	-
Qualcomm	Wcd9340 Firmware	-
Qualcomm	Wcd9340	-
Qualcomm	Wcd9370 Firmware	-
Qualcomm	Wcd9370	-
Qualcomm	Wcd9371 Firmware	-
Qualcomm	Wcd9371	-
Qualcomm	Wcd9375 Firmware	-
Qualcomm	Wcd9375	-

Related Weaknesses (CWE)

CWE-126

References

https://docs.qualcomm.com/product/publicresources/securitybulletin/june-2026-bulPatchVendor Advisory

FAQ

What is CVE-2025-59609?

CVE-2025-59609 is a vulnerability with a CVSS score of 5.5 (MEDIUM). Information Disclosure when processing advertisement frames with malformed MBSSID elements of insufficient length.

How severe is CVE-2025-59609?

CVE-2025-59609 has been rated MEDIUM with a CVSS base score of 5.5/10. Review the CVSS metrics above for detailed severity breakdown.

Is there a patch for CVE-2025-59609?

Check the references section above for vendor advisories and patch information. Affected products include: Qualcomm 5G Fixed Wireless Access Platform Firmware, Qualcomm 5G Fixed Wireless Access Platform, Qualcomm Ar8035 Firmware, Qualcomm Ar8035, Qualcomm Csr8811 Firmware.