Design/Logic Flaw

Wi-Fi driver of Honor 5C and P9 Lite Huawei smart phones with software versions earlier than NEM-L21C432B351 and versions earlier than VNS-L21C10B381 has a DoS vulnerability. An attacker may trick a user into installing a malicious application and the application can access invalid address of...

CVE-2017-8143

Wi-Fi driver of Honor 5C and P9 Lite Huawei smart phones with software versions earlier than NEM-L21C432B351 and versions earlier than VNS-L21C10B381 has a DoS vulnerability. An attacker may trick a user into installing a malicious application and the application can access invalid address of...

Google Patches KRACK Vulnerability in Android

Google this week finally addressed the KRACK vulnerability in Android, three weeks after the WPA2 protocol flaw was publicly disclosed. The KRACK patches are the most high-profile fixes in the November Android Security Bulletin, which includes three patches levels; the KRACK patches are in the No...

Apple: Information Leak when handling WLC_E_COUNTRY_CODE_CHANGED event packets(CVE-2017-7116)

Broadcom produces Wi-Fi HardMAC SoCs which are used to handle the PHY and MAC layer processing. These chips are present in both mobile devices and Wi-Fi routers, and are capable of handling many Wi-Fi related events without delegating to the host OS. On iOS, the "AppleBCMWLANBusInterfacePCIe"...

Apple updateRateSetAsyncCallback Heap Overflow Vulnerability

Exploit for macOS platform in category dos / poc Apple: Heap overflow in "updateRateSetAsyncCallback" when handling ioctl results CVE-2017-7108 Broadcom produces Wi-Fi HardMAC SoCs which are used to handle the PHY and MAC layer processing. These chips are present in both mobile devices and Wi-Fi...

CVE-2017-0786

A elevation of privilege vulnerability in the Broadcom wi-fi driver. Product: Android. Versions: Android kernel. Android ID: A-37351060. References: B-V2017060101...

CVE-2017-0792

A information disclosure vulnerability in the Broadcom wi-fi driver. Product: Android. Versions: Android kernel. Android ID: A-37305578. References: B-V2017052301...

CVE-2017-0789

A elevation of privilege vulnerability in the Broadcom wi-fi driver. Product: Android. Versions: Android kernel. Android ID: A-37685267. References: B-V2017053102...

Privilege escalation

A elevation of privilege vulnerability in the Broadcom wi-fi driver. Product: Android. Versions: Android kernel. Android ID: A-37306719. References: B-V2017052302...

Privilege escalation

A elevation of privilege vulnerability in the Broadcom wi-fi driver. Product: Android. Versions: Android kernel. Android ID: A-37722970. References: B-V2017053104...

Privilege escalation

A elevation of privilege vulnerability in the Broadcom wi-fi driver. Product: Android. Versions: Android kernel. Android ID: A-37685267. References: B-V2017053102...

CVE-2017-0792

CVE-2017-0792 is an information disclosure vulnerability in the Broadcom Wi‑Fi driver affecting Android devices (kernel level). The vulnerability is described as information disclosure with partial confidentiality impact (per CVSS) and does not indicate remote code execution or other impacts. Con...

CVE-2017-0788

CVE-2017-0788 is a local elevation-of-privilege vulnerability in the Broadcom Wi‑Fi driver used by Android (kernel level). The issue affects the Broadcom Wi‑Fi driver component and is documented in the Android 2017-09-01/09-05 security patch level bulletin under Broadcom entries, indicating mitig...

CVE-2017-0790

CVE-2017-0790 is a local elevation-of-privilege vulnerability in the Broadcom Wi‑Fi driver used by Android kernel. The issue is categorized as EoP and is located in the Broadcom Wi‑Fi driver component; the Android bulletin lists CVE-2017-0790 under Broadcom components with a Moderate Android bug ...

CVE-2017-0787

CVE-2017-0787 is an Elevation of Privilege vulnerability in the Broadcom Wi‑Fi driver used by the Android kernel. The issue affects the Broadcom Wi‑Fi component and could permit a privileged action if exploited. The provided documents do not include explicit exploit details or affected device ver...

CVE-2017-0786

A elevation of privilege vulnerability in the Broadcom wi-fi driver. Product: Android. Versions: Android kernel. Android ID: A-37351060. References: B-V2017060101...

CVE-2017-0789

CVE-2017-0789 is a local Elevation of Privilege in the Broadcom Wi‑Fi driver used by Android kernel. The vulnerability allows an attacker to gain elevated privileges within the device. Public references in the provided documents confirm Broadcom Wi‑Fi driver as the vulnerable component and Androi...

CVE-2017-0792

A information disclosure vulnerability in the Broadcom wi-fi driver. Product: Android. Versions: Android kernel. Android ID: A-37305578. References: B-V2017052301...

CVE-2017-0786

CVE-2017-0786 is an elevation-of-privilege vulnerability in the Broadcom Wi‑Fi driver affecting the Android kernel. Public records in the initial description identify the affected component as the Broadcom Wi‑Fi driver within the Android kernel and describe the issue as an elevation of privilege;...

Google Android Broadcom Wi-Fi Driver Information Disclosure Vulnerability

Android is a Linux-based open source operating system jointly developed by Google and the Open Handheld Alliance OHA, and Broadcom Wi-Fi driver is a Broadcom-developed Wi-Fi driver module used in it. An information disclosure vulnerability exists in the Broadcom Wi-Fi driver in Android. An attack...