CVEvulnerability

CVE-2018-19860

8.8 HIGH Published 2019-06-07 Modified 2026-06-17 Official page ↗
Status
Modified
Published
2019-06-07
Last modified
2026-06-17
Assigner
[email protected]
CVSS 3.0 ([email protected])
8.8 HIGH — CVSS:3.0/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
CVSS 2.0 ([email protected])
5.8 MEDIUM — AV:A/AC:L/Au:N/C:P/I:P/A:P
Weaknesses
CWE-732

Description

Broadcom firmware before summer 2014 on Nexus 5 BCM4335C0 2012-12-11, Raspberry Pi 3 BCM43438A1 2014-06-02, and unspecifed other devices does not properly restrict LMP commnds and executes certain memory contents upon receiving an LMP command, as demonstrated by executing an HCI command.

Affected configurations

• broadcom bcm4335c0 firmware 2012-12-11 • broadcom bcm43438a1 firmware 2014-06-02 • cypress cyw20702a1kwfbg firmware • cypress cyw20702a1kwfbgt firmware • cypress cyw20702b0kwfbg firmware • cypress cyw20702b0kwfbgt firmware • cypress cyw20703ua1kffb1g firmware • cypress cyw20703ua1kffb1gt firmware • cypress cyw20704ua1kffb1g firmware • cypress cyw20704ua1kffb1gt firmware • cypress cyw20704ua2kffb1g firmware • cypress cyw20704ua2kffb1gt firmware • cypress cyw20705a1kwfbgt firmware • cypress cyw20705b0kwfbg firmware • cypress cyw20705b0kwfbgt firmware • cypress cyw20706ua1kffb1g firmware • cypress cyw20706ua1kffb1gt firmware • cypress cyw20706ua1kffb4g firmware • cypress cyw20706ua2kffb4g firmware • cypress cyw20706ua2kffb4gt firmware • cypress cyw20707a2kubgt firmware • cypress cyw20707ua1kffb1g firmware • cypress cyw20707ua1kffb4g firmware • cypress cyw20707ua1kffb4gt firmware • cypress cyw20707ua2kffb4g firmware • cypress cyw20707ua2kffb4gt firmware • cypress cyw20707va1pkwbgt firmware • cypress cyw20707va2pkwbgt firmware • cypress cyw20730a1kfbg firmware • cypress cyw20730a1kfbgt firmware • cypress cyw20730a1kml2g firmware • cypress cyw20730a1kml2gt firmware • cypress cyw20730a1kmlg firmware • cypress cyw20730a1kmlgt firmware • cypress cyw20730a2kfbg firmware • cypress cyw20730a2kfbgt firmware • cypress cyw20730a2kml2g firmware • cypress cyw20730a2kml2gt firmware • cypress cyw20733a1kfb1gt firmware • cypress cyw20733a2kfb1g firmware • cypress cyw20733a2kfb1gt firmware • cypress cyw20733a2kml1g firmware • cypress cyw20733a2kml1gt firmware • cypress cyw20733a3kfb1g firmware • cypress cyw20733a3kfb1gt firmware • cypress cyw20733a3kfb2gt firmware • cypress cyw20733a3kml1g firmware • cypress cyw20733a3kml1gt firmware • cypress cyw20734ua1kffb3g firmware • cypress cyw20734ua1kffb3gt firmware • cypress cyw20734ua2kffb3g firmware • cypress cyw20734ua2kffb3gt firmware • cypress cyw43438kubgt firmware • cypress cyw4343w1kubgt firmware • cypress cyw4343wkubgt firmware • cypress cyw4343wkwbgt firmware • cypress cyw4354kkwbgt firmware • cypress cyw4354xkubgt firmware • cypress cyw89071a1cubxgt firmware • cypress cyw89072brfb5g firmware … and 3 more

Related

Weakness · CWE (1)

  • CWE-732 Incorrect Permission Assignment for Critical Resource weakness

References