CVE-2026-57546CWE-126

CVE-2026-57546

High · published October 6, 2026

CVSS v3.1
7.5
EPSS
0%
Percentile
5.6
In the wild
Unconfirmed
What it is

Transient DOS when processing a continuous receive command with a zero-sized global configuration override.

The record
Technical detail
CVSS v3.1
7.5 · HIGH
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
CVSS v4.0
Not supplied
EPSS
0.00167 · 5.6th percentile
Weakness
CWE-126 · Buffer Over-read
Published
2026-10-06T11:16Z
Affected products (14)
ProductVersionsFixed in
qualcomm/congo_firmwareall versions—
qualcomm/fastconnect_7800_firmwareall versions—
qualcomm/orne_firmwareall versions—
qualcomm/pandeiro_firmwareall versions—
qualcomm/fastconnect_8800_mobile_connectivity_system_firmwareall versions—
qualcomm/sm8950_firmwareall versions—
qualcomm/sm8950p_firmwareall versions—
qualcomm/sm8975_firmwareall versions—
qualcomm/sm8975p_firmwareall versions—
qualcomm/wcd9378_firmwareall versions—
qualcomm/wcd9395_firmwareall versions—
qualcomm/wcn7880_firmwareall versions—
qualcomm/wcn7881_firmwareall versions—
qualcomm/wcn8841_firmwareall versions—
References (1)
https://docs.qualcomm.com/product/publicresources/securitybulletin/october-2026-bulletin.html · [email protected]
EPSS history
Timeline
  • 07 OCT 03:41Z
    EPSS moved — → 0%
    epss
  • 06 OCT 06:30Z
    Buffer Over-read in WLAN HAL
    cvelistv5