CVE-2019-9502: Broadcom wl driver is vulnerable to heap buffer overflow
The Broadcom wl WiFi driver is vulnerable to a heap buffer overflow. If the vendor information element data length is larger than 164 bytes, a heap buffer overflow is triggered in wlcwpaplumbgtk. In the worst case scenario, by sending specially-crafted WiFi packets, a remote, unauthenticated attacker may be able to execute arbitrary code on a vulnerable system. More typically, this vulnerability will result in denial-of-service conditions.
Affected Software
Event History
Peer vulnerabilities
Found alongside the following vulnerabilities.
Frequently Asked Questions
What is CVE-2019-9502?
CVE-2019-9502 is a vulnerability in the Broadcom wl WiFi driver that allows for a heap buffer overflow, potentially leading to remote code execution.
Which software is affected by CVE-2019-9502?
Software affected by CVE-2019-9502 includes Google Android, Synology Router Manager (version 1.2), and Broadcom Bcm4339 Firmware.
How severe is the vulnerability CVE-2019-9502?
The severity of CVE-2019-9502 is rated as critical, with a severity score of 8.8.
How can I fix the vulnerability CVE-2019-9502?
To fix the vulnerability CVE-2019-9502, it is recommended to apply the latest security patches and updates provided by the respective vendors.
Where can I find more information about CVE-2019-9502?
More information about CVE-2019-9502 can be found on the official Android Security Bulletin website and the Quarkslab blog post.