CVE-2016-0802: Apple iPhone OS

High severity, CVSS 8.8. EPSS: 1.7% chance of exploitation in the next 30 days.

The Broadcom Wi-Fi driver in the kernel in Android 4.x before 4.4.4, 5.x before 5.1.1 LMY49G, and 6.x before 2016-02-01 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via crafted wireless control message packets, aka internal bug 25306181.

Affected products

• Apple iPhone OS: up to and including 9.2.1
• Apple Mac OS X: up to and including 10.11.3
• Apple tvOS: up to and including 9.1
• Apple watchOS: up to and including 2.1
• Google Android: version 4.4.4 only; version 5.0 only; version 5.1.1 only; version 6.0 only; version 6.0.1 only

Published 2016-02-07. Last modified 2026-06-17.