broadcom Archives - CVE Vulnerability https://cvevulnerability.com/cve_products/broadcom/ Sun, 26 Feb 2023 06:34:59 +0000 en-US hourly 1 https://wordpress.org/?v=7.0 https://cvevulnerability.com/wp-content/uploads/2023/02/cropped-Screenshot-2023-02-27-at-3.52.32-PM-32x32.png broadcom Archives - CVE Vulnerability https://cvevulnerability.com/cve_products/broadcom/ 32 32 CVE-2019-9501 https://cvevulnerability.com/cve_vulnerabilities/cve-2019-9501/ Sun, 26 Feb 2023 06:34:59 +0000 https://www.cvevulnerability.com/cve_vulnerabilities/cve-2019-9501/ The Broadcom wl WiFi driver is vulnerable to a heap buffer overflow. By supplying a vendor information element with a data length larger than 32 bytes, a heap buffer overflow is triggered in wlc_wpa_sup_eapol. In the worst case scenario, by sending specially-crafted WiFi packets, a remote, unauthenticated attacker may be able to execute arbitrary code […]

The post CVE-2019-9501 appeared first on CVE Vulnerability.

]]> The Broadcom wl WiFi driver is vulnerable to a heap buffer overflow. By supplying a vendor information element with a data length larger than 32 bytes, a heap buffer overflow is triggered in wlc_wpa_sup_eapol. In the worst case scenario, by sending specially-crafted WiFi packets, a remote, unauthenticated attacker may be able to execute arbitrary code on a vulnerable system. More typically, this vulnerability will result in denial-of-service conditions.

The post CVE-2019-9501 appeared first on CVE Vulnerability.

]]> CVE-2019-9502 https://cvevulnerability.com/cve_vulnerabilities/cve-2019-9502/ Sun, 26 Feb 2023 06:34:59 +0000 https://www.cvevulnerability.com/cve_vulnerabilities/cve-2019-9502/ The Broadcom wl WiFi driver is vulnerable to a heap buffer overflow. If the vendor information element data length is larger than 164 bytes, a heap buffer overflow is triggered in wlc_wpa_plumb_gtk. In the worst case scenario, by sending specially-crafted WiFi packets, a remote, unauthenticated attacker may be able to execute arbitrary code on a […]

The post CVE-2019-9502 appeared first on CVE Vulnerability.

]]> The Broadcom wl WiFi driver is vulnerable to a heap buffer overflow. If the vendor information element data length is larger than 164 bytes, a heap buffer overflow is triggered in wlc_wpa_plumb_gtk. In the worst case scenario, by sending specially-crafted WiFi packets, a remote, unauthenticated attacker may be able to execute arbitrary code on a vulnerable system. More typically, this vulnerability will result in denial-of-service conditions.

The post CVE-2019-9502 appeared first on CVE Vulnerability.

]]> CVE-2019-20546 https://cvevulnerability.com/cve_vulnerabilities/cve-2019-20546/ Sun, 26 Feb 2023 06:32:28 +0000 https://www.cvevulnerability.com/cve_vulnerabilities/cve-2019-20546/ An issue was discovered on Samsung mobile devices with N(7.x), O(8.x), and P(9.0) (Broadcom Wi-Fi chipsets) software. A denial-of-service attack can leverage a shared interface between Broadcom Bluetooth and Broadcom Wi-Fi. The Samsung ID is SVE-2019-15350 (November 2019).

The post CVE-2019-20546 appeared first on CVE Vulnerability.

]]> An issue was discovered on Samsung mobile devices with N(7.x), O(8.x), and P(9.0) (Broadcom Wi-Fi chipsets) software. A denial-of-service attack can leverage a shared interface between Broadcom Bluetooth and Broadcom Wi-Fi. The Samsung ID is SVE-2019-15350 (November 2019).

The post CVE-2019-20546 appeared first on CVE Vulnerability.

]]> CVE-2019-20549 https://cvevulnerability.com/cve_vulnerabilities/cve-2019-20549/ Sun, 26 Feb 2023 06:32:28 +0000 https://www.cvevulnerability.com/cve_vulnerabilities/cve-2019-20549/ An issue was discovered on Samsung mobile devices with N(7.x), O(8.x), and P(9.0) (Broadcom chipsets) software. A heap out-of-bounds access can occur during LE Packet reception in Broadcom Bluetooth. The Samsung ID is SVE-2019-15724 (November 2019).

The post CVE-2019-20549 appeared first on CVE Vulnerability.

]]> An issue was discovered on Samsung mobile devices with N(7.x), O(8.x), and P(9.0) (Broadcom chipsets) software. A heap out-of-bounds access can occur during LE Packet reception in Broadcom Bluetooth. The Samsung ID is SVE-2019-15724 (November 2019).

The post CVE-2019-20549 appeared first on CVE Vulnerability.

]]> CVE-2019-19230 https://cvevulnerability.com/cve_vulnerabilities/cve-2019-19230/ Sun, 26 Feb 2023 06:32:00 +0000 https://www.cvevulnerability.com/cve_vulnerabilities/cve-2019-19230/ An unsafe deserialization vulnerability exists in CA Release Automation (Nolio) 6.6 with the DataManagement component that can allow a remote attacker to execute arbitrary code.

The post CVE-2019-19230 appeared first on CVE Vulnerability.

]]> An unsafe deserialization vulnerability exists in CA Release Automation (Nolio) 6.6 with the DataManagement component that can allow a remote attacker to execute arbitrary code.

The post CVE-2019-19230 appeared first on CVE Vulnerability.

]]> CVE-2019-19231 https://cvevulnerability.com/cve_vulnerabilities/cve-2019-19231/ Sun, 26 Feb 2023 06:32:00 +0000 https://www.cvevulnerability.com/cve_vulnerabilities/cve-2019-19231/ An insecure file access vulnerability exists in CA Client Automation 14.0, 14.1, 14.2, and 14.3 Agent for Windows that can allow a local attacker to gain escalated privileges.

The post CVE-2019-19231 appeared first on CVE Vulnerability.

]]> An insecure file access vulnerability exists in CA Client Automation 14.0, 14.1, 14.2, and 14.3 Agent for Windows that can allow a local attacker to gain escalated privileges.

The post CVE-2019-19231 appeared first on CVE Vulnerability.

]]> CVE-2019-15126 https://cvevulnerability.com/cve_vulnerabilities/cve-2019-15126/ Sun, 26 Feb 2023 06:30:49 +0000 https://www.cvevulnerability.com/cve_vulnerabilities/cve-2019-15126/ An issue was discovered on Broadcom Wi-Fi client devices. Specifically timed and handcrafted traffic can cause internal errors (related to state transitions) in a WLAN device that lead to improper layer 2 Wi-Fi encryption with a consequent possibility of information disclosure over the air for a discrete set of traffic, a different vulnerability than CVE-2019-9500, […]

The post CVE-2019-15126 appeared first on CVE Vulnerability.

]]> An issue was discovered on Broadcom Wi-Fi client devices. Specifically timed and handcrafted traffic can cause internal errors (related to state transitions) in a WLAN device that lead to improper layer 2 Wi-Fi encryption with a consequent possibility of information disclosure over the air for a discrete set of traffic, a different vulnerability than CVE-2019-9500, CVE-2019-9501, CVE-2019-9502, and CVE-2019-9503.

The post CVE-2019-15126 appeared first on CVE Vulnerability.

]]> CVE-2021-34174 https://cvevulnerability.com/cve_vulnerabilities/cve-2021-34174/ Thu, 23 Feb 2023 14:10:09 +0000 http://www.cvevulnerability.com/cve_vulnerabilities/cve-2021-34174/ A vulnerability exists in Broadcom BCM4352 and BCM43684 chips. Any wireless router using BCM4352 and BCM43684 will be affected, such as ASUS AX6100. An attacker may cause a Denial of Service (DoS) to any device connected to BCM4352 or BCM43684 routers via an association or reassociation frame.

The post CVE-2021-34174 appeared first on CVE Vulnerability.

]]> A vulnerability exists in Broadcom BCM4352 and BCM43684 chips. Any wireless router using BCM4352 and BCM43684 will be affected, such as ASUS AX6100. An attacker may cause a Denial of Service (DoS) to any device connected to BCM4352 or BCM43684 routers via an association or reassociation frame.

The post CVE-2021-34174 appeared first on CVE Vulnerability.

]]>