Service interruption via malformed ESP information element

Buffer over-read in Qualcomm WLAN host firmware allows remote attackers to interrupt wireless service via crafted beacon or probe frames. The WLAN parser reads beyond the ESP information element's bounds while processing an ESP IE from a received beacon or probe response. No authentication or user interaction is required, and successful exploitation causes a transient denial of service rather than data access or modification.