high8.8
CVE-2018-19860
Broadcom firmware before summer 2014 on Nexus 5 BCM4335C0 2012-12-11, Raspberry Pi 3 BCM43438A1 2014-06-02, and unspecifed other devices does not properly rest…
Impact
Broadcom firmware before summer 2014 on Nexus 5 BCM4335C0 2012-12-11, Raspberry Pi 3 BCM43438A1 2014-06-02, and unspecifed other devices does not properly restrict LMP commnds and executes certain memory contents upon receiving an LMP command, as demonstrated by executing an HCI command.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Broadcom | Bcm4335c0 Firmware | Version 2012-12-11 |
| Broadcom | Bcm43438a1 Firmware | Version 2014-06-02 |
| Cypress | Cyw20702a1kwfbg Firmware | All versions |
| Cypress | Cyw20702a1kwfbgt Firmware | All versions |
| Cypress | Cyw20702b0kwfbg Firmware | All versions |
| Cypress | Cyw20702b0kwfbgt Firmware | All versions |
| Cypress | Cyw20703ua1kffb1g Firmware | All versions |
| Cypress | Cyw20703ua1kffb1gt Firmware | All versions |
| Cypress | Cyw20704ua1kffb1g Firmware | All versions |
| Cypress | Cyw20704ua1kffb1gt Firmware | All versions |
| Cypress | Cyw20704ua2kffb1g Firmware | All versions |
| Cypress | Cyw20704ua2kffb1gt Firmware | All versions |
Weakness classification
References
- NVD record
- CVE.org record
- http://seclists.org/fulldisclosure/2019/Aug/11
- http://seclists.org/fulldisclosure/2019/Jul/22
- https://seclists.org/bugtraq/2019/Aug/21
- https://source.android.com/security/bulletin/2019-05-01
- https://support.apple.com/kb/HT210348
- https://www.broadcom.com/support/resources/product-security-center
- http://seclists.org/fulldisclosure/2019/Aug/11
- http://seclists.org/fulldisclosure/2019/Jul/22
- https://seclists.org/bugtraq/2019/Aug/21
- https://source.android.com/security/bulletin/2019-05-01
- https://support.apple.com/kb/HT210348
- https://www.broadcom.com/support/resources/product-security-center