CVE-2017-11120: Apple iPhone OS

Critical severity, CVSS 9.8. EPSS: 9.1% chance of exploitation in the next 30 days.

On Broadcom BCM4355C0 Wi-Fi chips 9.44.78.27.0.1.56 and other chips, an attacker can craft a malformed RRM neighbor report frame to trigger an internal buffer overflow in the Wi-Fi firmware, aka B-V2017061204.

Affected products

• Apple iPhone OS: before 11.0 (fixed in 11.0)
• Apple tvOS: before 11.0 (fixed in 11.0)
• Broadcom BCM4355C0 Firmware: version 9.44.78.27.0.1.56 only

Published 2017-09-28. Last modified 2026-06-17.