CVE-2025-59601

Published: Jun 1, 2026Modified: Jul 22, 2026

6.5

Vector

CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

Exploitability: 2.8 / Impact: 3.6

Source: product-security@qualcomm.com (Secondary)

Description

Information Disclosure when resetting device to factory default settings through powerline interface allows unauthorized access to device configuration.

Affected (8)

Products: Qualcomm: Fastconnect 7800 Firmware, Qca7005 Firmware, Snapdragon Ar1 Gen 1 Platform Firmware, Wcd9380 Firmware, Wcd9385 Firmware, Wsa8830 Firmware, Wsa8832 Firmware, Wsa8835 Firmware

Qualcomm

8 products

Fastconnect 7800 Firmware

Qca7005 Firmware

Snapdragon Ar1 Gen 1 Platform Firmware

Configuration A

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Qualcomm Fastconnect 7800 Firmware	All versions

Running on/with	Platform Versions
Qualcomm Fastconnect 7800	All versions

Configuration B

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Qualcomm Qca7005 Firmware	All versions

Running on/with	Platform Versions
Qualcomm Qca7005	All versions

Configuration C

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Qualcomm Snapdragon Ar1 Gen 1 Platform Firmware	All versions

Running on/with	Platform Versions
Qualcomm Snapdragon Ar1 Gen 1 Platform	All versions

Configuration D

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Qualcomm Wcd9380 Firmware	All versions

Running on/with	Platform Versions
Qualcomm Wcd9380	All versions

Configuration E

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Qualcomm Wcd9385 Firmware	All versions

Running on/with	Platform Versions
Qualcomm Wcd9385	All versions

Configuration F

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Qualcomm Wsa8830 Firmware	All versions

Running on/with	Platform Versions
Qualcomm Wsa8830	All versions

Configuration G

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Qualcomm Wsa8832 Firmware	All versions

Running on/with	Platform Versions
Qualcomm Wsa8832	All versions

Configuration H

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Qualcomm Wsa8835 Firmware	All versions

Running on/with	Platform Versions
Qualcomm Wsa8835	All versions

Related CWEs

CWE-1230

Exposure of Sensitive Information Through Metadata

The product prevents direct access to a resource containing sensitive information, but it does not sufficiently limit access to metadata that is derived from the original, sensitive information.

References (1)

https://docs.qualcomm.com/product/publicresources/securitybulletin/june-2026-bulletin.html

Source: product-security@qualcomm.com

Vendor Advisory

Timeline

No history available yet.