CVE-2018-19860
Broadcom firmware before summer 2014 on Nexus 5 BCM4335C0 2012-12-11, Raspberry Pi 3 BCM43438A1 2014-06-02, and unspecifed other devices does not properly restrict LMP commnds and executes certain memory contents upon receiving an LMP command, as…
Does this matter?
High impact if exploited, but EPSS currently rates exploitation as unlikely (1.02%). Schedule it in the normal patch cycle and watch for a rise in EPSS or a public exploit.
Description
Broadcom firmware before summer 2014 on Nexus 5 BCM4335C0 2012-12-11, Raspberry Pi 3 BCM43438A1 2014-06-02, and unspecifed other devices does not properly restrict LMP commnds and executes certain memory contents upon receiving an LMP command, as demonstrated by executing an HCI command.
- CVSS 3.0
- 8.8 HIGHCVSS:3.0/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
- EPSS
- 1.02% probability · 61th percentile
- CISA KEV
- Not listed
- Weakness
- CWE-732
- Affected
- broadcom/bcm4335c0 firmware · broadcom/bcm43438a1 firmware · cypress/cyw20702a1kwfbg firmware · cypress/cyw20702a1kwfbgt firmware · cypress/cyw20702b0kwfbg firmware · cypress/cyw20702b0kwfbgt firmware · cypress/cyw20703ua1kffb1g firmware · cypress/cyw20703ua1kffb1gt firmware · cypress/cyw20704ua1kffb1g firmware · cypress/cyw20704ua1kffb1gt firmware · cypress/cyw20704ua2kffb1g firmware · cypress/cyw20704ua2kffb1gt firmware · cypress/cyw20705a1kwfbgt firmware · cypress/cyw20705b0kwfbg firmware · cypress/cyw20705b0kwfbgt firmware · cypress/cyw20706ua1kffb1g firmware · cypress/cyw20706ua1kffb1gt firmware · cypress/cyw20706ua1kffb4g firmware · cypress/cyw20706ua2kffb4g firmware · cypress/cyw20706ua2kffb4gt firmware · +40 more
- Source
- cve@mitre.org
References
- http://seclists.org/fulldisclosure/2019/Aug/11
- http://seclists.org/fulldisclosure/2019/Jul/22
- https://seclists.org/bugtraq/2019/Aug/21
- https://source.android.com/security/bulletin/2019-05-01Third Party Advisory
- https://support.apple.com/kb/HT210348
- https://www.broadcom.com/support/resources/product-security-centerVendor Advisory
- http://seclists.org/fulldisclosure/2019/Aug/11
- http://seclists.org/fulldisclosure/2019/Jul/22
- https://seclists.org/bugtraq/2019/Aug/21
- https://source.android.com/security/bulletin/2019-05-01Third Party Advisory
- https://support.apple.com/kb/HT210348
- https://www.broadcom.com/support/resources/product-security-centerVendor Advisory
Source: NVD record, EPSS from FIRST.org, KEV from CISA. Refreshed daily.