Vulnerability Description
Broadcom firmware before summer 2014 on Nexus 5 BCM4335C0 2012-12-11, Raspberry Pi 3 BCM43438A1 2014-06-02, and unspecifed other devices does not properly restrict LMP commnds and executes certain memory contents upon receiving an LMP command, as demonstrated by executing an HCI command.
CVSS Score
HIGH
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Broadcom | Bcm4335C0 Firmware | 2012-12-11 |
| Broadcom | Bcm4335C0 | - |
| Broadcom | Bcm43438A1 Firmware | 2014-06-02 |
| Broadcom | Bcm43438A1 | - |
| Cypress | Cyw20702A1Kwfbg Firmware | - |
| Cypress | Cyw20702A1Kwfbg | - |
| Cypress | Cyw20702A1Kwfbgt Firmware | - |
| Cypress | Cyw20702A1Kwfbgt | - |
| Cypress | Cyw20702B0Kwfbg Firmware | - |
| Cypress | Cyw20702B0Kwfbg | - |
| Cypress | Cyw20702B0Kwfbgt Firmware | - |
| Cypress | Cyw20702B0Kwfbgt | - |
| Cypress | Cyw20703Ua1Kffb1G Firmware | - |
| Cypress | Cyw20703Ua1Kffb1G | - |
| Cypress | Cyw20703Ua1Kffb1Gt Firmware | - |
| Cypress | Cyw20703Ua1Kffb1Gt | - |
| Cypress | Cyw20704Ua1Kffb1G Firmware | - |
| Cypress | Cyw20704Ua1Kffb1G | - |
| Cypress | Cyw20704Ua1Kffb1Gt Firmware | - |
| Cypress | Cyw20704Ua1Kffb1Gt | - |
Related Weaknesses (CWE)
References
- http://seclists.org/fulldisclosure/2019/Aug/11
- http://seclists.org/fulldisclosure/2019/Jul/22
- https://seclists.org/bugtraq/2019/Aug/21
- https://source.android.com/security/bulletin/2019-05-01Third Party Advisory
- https://support.apple.com/kb/HT210348
- https://www.broadcom.com/support/resources/product-security-centerVendor Advisory
- http://seclists.org/fulldisclosure/2019/Aug/11
- http://seclists.org/fulldisclosure/2019/Jul/22
- https://seclists.org/bugtraq/2019/Aug/21
- https://source.android.com/security/bulletin/2019-05-01Third Party Advisory
- https://support.apple.com/kb/HT210348
- https://www.broadcom.com/support/resources/product-security-centerVendor Advisory
FAQ
What is CVE-2018-19860?
CVE-2018-19860 is a vulnerability with a CVSS score of 8.8 (HIGH). Broadcom firmware before summer 2014 on Nexus 5 BCM4335C0 2012-12-11, Raspberry Pi 3 BCM43438A1 2014-06-02, and unspecifed other devices does not properly restrict LMP commnds and executes certain mem...
How severe is CVE-2018-19860?
CVE-2018-19860 has been rated HIGH with a CVSS base score of 8.8/10. Review the CVSS metrics above for detailed severity breakdown.
Is there a patch for CVE-2018-19860?
Check the references section above for vendor advisories and patch information. Affected products include: Broadcom Bcm4335C0 Firmware, Broadcom Bcm4335C0, Broadcom Bcm43438A1 Firmware, Broadcom Bcm43438A1, Cypress Cyw20702A1Kwfbg Firmware.