CVE-2017-6957: Broadcom BCM4339 Soc Firmware

High severity, CVSS 8.1. EPSS: 4.6% chance of exploitation in the next 30 days.

Stack-based buffer overflow in the firmware in Broadcom Wi-Fi HardMAC SoC chips, when the firmware supports CCKM Fast and Secure Roaming and the feature is enabled in RAM, allows remote attackers to execute arbitrary code via a crafted reassociation response frame with a Cisco IE (156).

Affected products

• Broadcom BCM4339 Soc Firmware: version 6.37.34.40 only

Published 2017-03-27. Last modified 2026-06-17.