CVE-2018-19860: Broadcom BCM4335C0 Firmware

High severity, CVSS 8.8. EPSS: 1% chance of exploitation in the next 30 days.

Broadcom firmware before summer 2014 on Nexus 5 BCM4335C0 2012-12-11, Raspberry Pi 3 BCM43438A1 2014-06-02, and unspecifed other devices does not properly restrict LMP commnds and executes certain memory contents upon receiving an LMP command, as demonstrated by executing an HCI command.

Affected products

  • Broadcom BCM4335C0 Firmware: version 2012-12-11 only
  • Broadcom BCM43438A1 Firmware: version 2014-06-02 only
  • Cypress CYW20702A1KWFBG Firmware: affected versions not specified
  • Cypress CYW20702A1KWFBGT Firmware: affected versions not specified
  • Cypress CYW20702B0KWFBG Firmware: affected versions not specified
  • Cypress CYW20702B0KWFBGT Firmware: affected versions not specified
  • Cypress CYW20703UA1KFFB1G Firmware: affected versions not specified
  • Cypress CYW20703UA1KFFB1GT Firmware: affected versions not specified
  • Cypress CYW20704UA1KFFB1G Firmware: affected versions not specified
  • Cypress CYW20704UA1KFFB1GT Firmware: affected versions not specified
  • Cypress CYW20704UA2KFFB1G Firmware: affected versions not specified
  • Cypress CYW20704UA2KFFB1GT Firmware: affected versions not specified
  • Cypress CYW20705A1KWFBGT Firmware: affected versions not specified
  • Cypress CYW20705B0KWFBG Firmware: affected versions not specified
  • Cypress CYW20705B0KWFBGT Firmware: affected versions not specified
  • Cypress CYW20706UA1KFFB1G Firmware: affected versions not specified
  • Cypress CYW20706UA1KFFB1GT Firmware: affected versions not specified
  • Cypress CYW20706UA1KFFB4G Firmware: affected versions not specified
  • Cypress CYW20706UA2KFFB4G Firmware: affected versions not specified
  • Cypress CYW20706UA2KFFB4GT Firmware: affected versions not specified
  • Cypress CYW20707A2KUBGT Firmware: affected versions not specified
  • Cypress CYW20707UA1KFFB1G Firmware: affected versions not specified
  • Cypress CYW20707UA1KFFB4G Firmware: affected versions not specified
  • Cypress CYW20707UA1KFFB4GT Firmware: affected versions not specified
  • Cypress CYW20707UA2KFFB4G Firmware: affected versions not specified
  • and 38 more

Published 2019-06-07. Last modified 2026-06-17.