Broadcom Brcmfmac Driver vulnerabilities

2 CVEs affecting Broadcom Brcmfmac Driver, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2019-9503, published 2020-01-16.

More from Broadcom.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

• CVE-2019-9500, published 2020-01-16. High severity, CVSS 8.3. EPSS: 3.9% chance of exploitation in the next 30 days. The Broadcom brcmfmac WiFi driver prior to commit 1b5e2423164b3670e8bc9174e4762d297990deff is vulnerable to a heap buffer overflow. If the Wake-up on Wireless LAN functionality is configured, a…
• CVE-2019-9503, published 2020-01-16. High severity, CVSS 8.3. EPSS: 3.3% chance of exploitation in the next 30 days. The Broadcom brcmfmac WiFi driver prior to commit a4176ec356c73a46c07c181c6d04039fafa34a9f is vulnerable to a frame validation bypass. If the brcmfmac driver receives a firmware event frame from a…