CVE-2017-11122

CVE-2017-11122 affects Broadcom BCM4355C0 Wi‑Fi chips, where ICMPv6 router advertisement offloading can leak information due to insufficient length validation. The description across sources (NVD/NVF, CNVD, SUSE, CVE.org, 0day exploit listing) consistently identifies an information disclosure vul...

Broadcom ICMPv6 Information Leak Vulnerability

Exploit for hardware platform in category dos / poc Broadcom: Information Leak in ICMPv6 Router Advertisement Offloading CVE-2017-11122 Broadcom produces Wi-Fi HardMAC SoCs which are used to handle the PHY and MAC layer processing. These chips are present in both mobile devices and Wi-Fi routers,...

CVE-2017-11122: Exposure of Sensitive Information to an Unauthorized Actor

On Broadcom BCM4355C0 Wi-Fi chips 9.44.78.27.0.1.56, an attacker can trigger an information leak due to insufficient length validation, related to ICMPv6 router advertisement offloading...

Stack overflow

On Broadcom BCM4355C0 Wi-Fi chips 9.44.78.27.0.1.56 and other chips, properly crafted malicious over-the-air Fast Transition frames can potentially trigger internal Wi-Fi firmware heap and/or stack overflows, leading to denial of service or other effects, aka B-V2017061205...

CVE-2017-11120

On Broadcom BCM4355C0 Wi-Fi chips 9.44.78.27.0.1.56 and other chips, an attacker can craft a malformed RRM neighbor report frame to trigger an internal buffer overflow in the Wi-Fi firmware, aka B-V2017061204...

CVE-2017-11121

CVE-2017-11121 affects Broadcom BCM4355C0 Wi‑Fi chips (and related devices). Malicious over‑the‑air Fast Transition frames can trigger internal Wi‑Fi firmware heap and/or stack overflows, potentially causing denial of service or other effects. Documents specify the root cause as memory corruption...

Google Researcher Publishes PoC Exploit for Apple iPhone Wi-Fi Chip Hack

You have now another good reason to update your iPhone to newly released iOS 11—a security vulnerability in iOS 10 and earlier now has a working exploit publicly available. Gal Beniamini, a security researcher with Google Project Zero, has discovered a security vulnerability CVE-2017-11120 in...

Broadcom BCM43xx Wi-Fi chips arbitrary code execution vulnerability

The Broadcom BCM43xx Wi-Fi chips are a combo chip for use in 5G Wi-Fi. A security vulnerability exists in the Broadcom BCM43xx Wi-Fi chips that allows remote attackers to exploit the vulnerability to submit a special request to execute arbitrary code...

CVE-2017-9417

Broadcom BCM43xx Wi-Fi chips allow remote attackers to execute arbitrary code via unspecified vectors, aka the "Broadpwn" issue...

DEBIAN-CVE-2017-9417

Broadcom BCM43xx Wi-Fi chips allow remote attackers to execute arbitrary code via unspecified vectors, aka the "Broadpwn" issue...

CVE-2017-9417: Undefined Security Weakness

Broadcom BCM43xx Wi-Fi chips allow remote attackers to execute arbitrary code via unspecified vectors, aka the "Broadpwn" issue...

CVE-2017-9417

Broadcom BCM43xx Wi-Fi chips allow remote attackers to execute arbitrary code via unspecified vectors, aka the "Broadpwn" issue...

CVE-2017-9417

CVE-2017-9417 affects Broadcom BCM43xx Wi‑Fi chips (Broadpwn). Reported as a memory corruption flaw in the Wi‑Fi firmware/chip enabling remote arbitrary code execution by a nearby attacker. Apple security updates reference this CVE in AirPort/Wi‑Fi contexts and list patches (e.g., AirPort/Broadco...

PT-2017-18906

Name of the Vulnerable Software and Affected Versions Broadcom BCM43xx Wi-Fi chips affected versions not specified Description The issue allows remote attackers to execute arbitrary code, affecting the system. This can be done via unspecified vectors. Recommendations At the moment, there is no...

Friday Squid Blogging: Squid and Chips

The excellent Montreal chef Marc-Olivier Frappier, of Joe Beef fame, has created a squid and chips dish for Brit & Chips restaurant. As usual, you can also use this squid post to talk about the security stories in the news that I haven't covered. Read my blog posting guidelines here...

CVE-2017-6957

Stack-based buffer overflow in the firmware in Broadcom Wi-Fi HardMAC SoC chips, when the firmware supports CCKM Fast and Secure Roaming and the feature is enabled in RAM, allows remote attackers to execute arbitrary code via a crafted reassociation response frame with a Cisco IE 156...

CVE-2017-6957: Improper Restriction of Operations within the Bounds of a Memory Buffer

Stack-based buffer overflow in the firmware in Broadcom Wi-Fi HardMAC SoC chips, when the firmware supports CCKM Fast and Secure Roaming and the feature is enabled in RAM, allows remote attackers to execute arbitrary code via a crafted reassociation response frame with a Cisco IE 156...

August 31, 2016 — KB3176938 (OS Build 14393.105)

None None...

Exploiting CVE-2016-2060 on Qualcomm Devices

Mandiant’s Red Team recently discovered a widespread vulnerability affecting Android devices that permits local privilege escalation to the built-in user “radio”, making it so an attacker can potentially perform activities such as viewing the victim’s SMS database and phone history. The...

This Computer Chip Self-Destructs in 10 Seconds (On Command) to keep Secrets Safe

The Secret Messages are often designed to be destroyed without a trace. In Spy thriller movie “Mission Impossible”, every time Tom Cruise receives a secret message, the last words state - “This Tape message will self-destruct in 5 seconds”...and BOOM! There’s a sudden explosion, and smoke comes o...