Description
Broadcom firmware before summer 2014 on Nexus 5 BCM4335C0 2012-12-11, Raspberry Pi 3 BCM43438A1 2014-06-02, and unspecifed other devices does not properly restrict LMP commnds and executes certain memory contents upon receiving an LMP command, as demonstrated by executing an HCI command.
Affected products
Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.
n/a n/a
n/aaffected
References
- https://www.broadcom.com/support/resources/product-security-center ↗
- https://source.android.com/security/bulletin/2019-05-01 ↗
- https://support.apple.com/kb/HT210348 ↗
- http://seclists.org/fulldisclosure/2019/Jul/22 ↗
- https://seclists.org/bugtraq/2019/Aug/21 ↗
- http://seclists.org/fulldisclosure/2019/Aug/11 ↗