# CVE-2025-59609: Qualcomm Snapdragon information disclosure in MBSSID frame processing

Source: https://junglewise.ai/threats/cve-2025-59609-qualcomm-snapdragon-information-disclosure-in-mbssid-frame  
Publisher: Junglewise Threat Intelligence, https://junglewise.ai/threats  
Published: 2026-06-01. Updated: 2026-06-01  
License: CC BY 4.0 with a link back

CVE-2025-59609 · Severity: medium · CVSS 5.5 · Published 2026-06-01

A security vulnerability exists in certain Qualcomm chipsets used in mobile devices when processing Wi-Fi advertisement signals. An attacker could potentially gain access to sensitive information from the device's memory by sending specially crafted Wi-Fi frames. This could lead to a breach of privacy or help an attacker bypass other security protections on the smartphone or tablet.

Technologies: [Qualcomm Snapdragon Mobile](https://junglewise.ai/threats/technologies/snapdragon-mobile). Vendors: [Qualcomm](https://junglewise.ai/threats/vendors/qualcomm).

## Quick answers

**Is CVE-2025-59609 exploited in the wild?** No. Junglewise Threat Intelligence has no report of CVE-2025-59609 being exploited in the wild.

**How severe is CVE-2025-59609?** Medium severity, with a CVSS score of 5.5, published 1 June 2026.

**Which products and versions are affected?** Qualcomm Snapdragon Mobile.

**Is there a fix for CVE-2025-59609?** No fixed version is recorded yet. Check the vendor's advisory in the references below. If you run it, Junglewise drafts a mitigation that fits your setup and applies it once you approve, with senior security engineers behind it.

**How is CVE-2025-59609 attacked?** It is attacked over the network, in device firmware.

**Am I affected by CVE-2025-59609?** Check whether you run Qualcomm Snapdragon Mobile. Junglewise does that check for you around the clock: connect your code, cloud and domains, and it matches new vulnerabilities like this one against what you actually run and tells you when one reaches you.

## Technical details

A buffer over-read vulnerability (CWE-126) exists in Qualcomm firmware during the processing of Wi-Fi advertisement frames. The issue is triggered by malformed Multiple BSSID (MBSSID) elements that have an insufficient length field, leading the system to read beyond the intended buffer boundaries. An attacker with low privileges can exploit this over the network, though it requires high complexity and user interaction (as indicated by the CVSS vector). Successful exploitation results in information disclosure, potentially leaking sensitive data from the heap or stack to the attacker. Qualcomm has addressed this in their June 2026 security bulletin.

## Affected products

- Qualcomm Snapdragon Mobile

## Timeline

- 2026-06-01: advisory: Qualcomm published the security bulletin and CVE details.
- 2026-06-01: disclosed

## References

- [https://docs.qualcomm.com/product/publicresources/securitybulletin/june-2026-bulletin.html](https://docs.qualcomm.com/product/publicresources/securitybulletin/june-2026-bulletin.html)

## Related threats

- [Qualcomm Snapdragon memory corruption in HT40 channel switching](https://junglewise.ai/threats/cve-2026-25268-qualcomm-snapdragon-memory-corruption-in-ht40-channel-switching)
- [Qualcomm Snapdragon memory corruption via TOCTOU in shared buffers](https://junglewise.ai/threats/cve-2026-25260-qualcomm-snapdragon-memory-corruption-via-toctou-in-shared)
- [Qualcomm Chipset memory corruption in IOCTL escape operations](https://junglewise.ai/threats/cve-2026-25259-qualcomm-chipset-memory-corruption-in-ioctl-escape-operations)
- [Qualcomm Snapdragon memory corruption in IOCTL escape operations](https://junglewise.ai/threats/cve-2026-25258-qualcomm-snapdragon-memory-corruption-in-ioctl-escape-operations)
- [Qualcomm Snapdragon memory corruption in fastboot display mode command](https://junglewise.ai/threats/cve-2026-24092-qualcomm-snapdragon-memory-corruption-in-fastboot-display-mode)