Broadcom wl driver is vulnerable to heap buffer overflow

The Broadcom wl WiFi driver is vulnerable to a heap buffer overflow. If the vendor information element data length is larger than 164 bytes, a heap buffer overflow is triggered in wlc_wpa_plumb_gtk. In the worst case scenario, by sending specially-crafted WiFi packets, a remote, unauthenticated attacker may be able to execute arbitrary code on a vulnerable system. More typically, this vulnerability will result in denial-of-service conditions.

CVSS:3.1/AV:A/AC:H/PR:N/UI:R/S:C/C:H/I:H/A:H

堆缓冲区溢出

Broadcom WiFi Chipset Drivers 缓冲区错误漏洞

Broadcom WiFi Chipset Drivers是美国博通（Broadcom）公司的一款无线网络芯片组驱动程序。 Broadcom WiFi Chipset Drivers中存在基于堆的缓冲区溢出漏洞。该漏洞源于网络系统或产品在内存上执行操作时，未正确验证数据边界，导致向关联的其他内存位置上执行了错误的读写操作。攻击者可利用该漏洞导致缓冲区溢出或堆溢出等。

N/A

N/A