CVE-2019-9502

CVE-2019-9502 affects the Broadcom wl WiFi driver; it is a heap buffer overflow triggered when vendor information element data length exceeds 164 bytes, in wlc_wpa_plumb_gtk. The advisory states that, in the worst case, a remote, unauthenticated attacker can send crafted WiFi frames to potentiall...

CVE-2019-9501

CVE-2019-9501 affects Broadcom wl WiFi driver via a heap buffer overflow triggered by a vendor information element with data length >32 bytes, causing a heap overflow in wlc_wpa_sup_eapol. In the worst case, a remote, unauthenticated attacker could execute arbitrary code on a vulnerable system...