Skip to content
OpenAdvisories

Product · Broadcom

WiFi drivers

2 known vulnerabilities.

2 results · Clear filters · Feed

  • High 7.9

    Broadcom wl driver is vulnerable to heap buffer overflow

    The Broadcom wl WiFi driver is vulnerable to a heap buffer overflow. If the vendor information element data length is larger than 164 bytes, a heap buffer overflow is triggered in wlc_wpa_plumb_gtk. In the worst case scenario, by sending specially-crafted WiF…

  • High 7.9

    Broadcom wl driver is vulnerable to heap buffer overflow

    The Broadcom wl WiFi driver is vulnerable to a heap buffer overflow. By supplying a vendor information element with a data length larger than 32 bytes, a heap buffer overflow is triggered in wlc_wpa_sup_eapol. In the worst case scenario, by sending specially-…