CVE-2018-19860

Published: Jun 7, 2019Modified: Nov 21, 2024

8.8

Vector

CVSS:3.0/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Exploitability: 2.8 / Impact: 5.9

Source: NVD

Description

Broadcom firmware before summer 2014 on Nexus 5 BCM4335C0 2012-12-11, Raspberry Pi 3 BCM43438A1 2014-06-02, and unspecifed other devices does not properly restrict LMP commnds and executes certain memory contents upon receiving an LMP command, as demonstrated by executing an HCI command.

Affected (63)

2 products

61 products

Cyw20702a1kwfbg Firmware

Cyw20702a1kwfbgt Firmware

Cyw20702b0kwfbg Firmware

Cyw20702b0kwfbgt Firmware

Cyw20703ua1kffb1g Firmware

Cyw20703ua1kffb1gt Firmware

Cyw20704ua1kffb1g Firmware

Cyw20704ua1kffb1gt Firmware

Cyw20704ua2kffb1g Firmware

Cyw20704ua2kffb1gt Firmware

Cyw20705a1kwfbgt Firmware

Cyw20705b0kwfbg Firmware

Cyw20705b0kwfbgt Firmware

Cyw20706ua1kffb1g Firmware

Cyw20706ua1kffb1gt Firmware

Cyw20706ua1kffb4g Firmware

Cyw20706ua2kffb4g Firmware

Cyw20706ua2kffb4gt Firmware

Cyw20707a2kubgt Firmware

Cyw20707ua1kffb1g Firmware

Cyw20707ua1kffb4g Firmware

Cyw20707ua1kffb4gt Firmware

Cyw20707ua2kffb4g Firmware

Cyw20707ua2kffb4gt Firmware

Cyw20707va1pkwbgt Firmware

Cyw20707va2pkwbgt Firmware

Cyw20730a1kfbg Firmware

Cyw20730a1kfbgt Firmware

Cyw20730a1kml2g Firmware

Cyw20730a1kml2gt Firmware

Cyw20730a1kmlg Firmware

Cyw20730a1kmlgt Firmware

Cyw20730a2kfbg Firmware

Cyw20730a2kfbgt Firmware

Cyw20730a2kml2g Firmware

Cyw20730a2kml2gt Firmware

Cyw20733a1kfb1gt Firmware

Cyw20733a2kfb1g Firmware

Cyw20733a2kfb1gt Firmware

Cyw20733a2kml1g Firmware

Cyw20733a2kml1gt Firmware

Cyw20733a3kfb1g Firmware

Cyw20733a3kfb1gt Firmware

Cyw20733a3kfb2gt Firmware

Cyw20733a3kml1g Firmware

Cyw20733a3kml1gt Firmware

Cyw20734ua1kffb3g Firmware

Cyw20734ua1kffb3gt Firmware

Cyw20734ua2kffb3g Firmware

Cyw20734ua2kffb3gt Firmware

Cyw43438kubgt Firmware

Cyw4343w1kubgt Firmware

Cyw4343wkubgt Firmware

Cyw4343wkwbgt Firmware

Cyw4354kkwbgt Firmware

Cyw4354xkubgt Firmware

Cyw89071a1cubxgt Firmware

Cyw89072brfb5g Firmware

Cyw89072brfb5gt Firmware

Cyw89335l2cubgt Firmware

Cyw89335lcubgt Firmware

Configuration A

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Broadcom Bcm4335c0 Firmware	Version 2012-12-11

Running on/with	Platform Versions
Broadcom Bcm4335c0	All versions

Configuration B

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Broadcom Bcm43438a1 Firmware	Version 2014-06-02

Running on/with	Platform Versions
Broadcom Bcm43438a1	All versions

Configuration C

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Cypress Cyw20702a1kwfbg Firmware	All versions

Running on/with	Platform Versions
Cypress Cyw20702a1kwfbg	All versions

Configuration D

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Cypress Cyw20702a1kwfbgt Firmware	All versions

Running on/with	Platform Versions
Cypress Cyw20702a1kwfbgt	All versions

Configuration E

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Cypress Cyw20702b0kwfbg Firmware	All versions

Running on/with	Platform Versions
Cypress Cyw20702b0kwfbg	All versions

Configuration F

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Cypress Cyw20702b0kwfbgt Firmware	All versions

Running on/with	Platform Versions
Cypress Cyw20702b0kwfbgt	All versions

Configuration G

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Cypress Cyw20703ua1kffb1g Firmware	All versions

Running on/with	Platform Versions
Cypress Cyw20703ua1kffb1g	All versions

Configuration H

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Cypress Cyw20703ua1kffb1gt Firmware	All versions

Running on/with	Platform Versions
Cypress Cyw20703ua1kffb1gt	All versions

Configuration I

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Cypress Cyw20704ua1kffb1g Firmware	All versions

Running on/with	Platform Versions
Cypress Cyw20704ua1kffb1g	All versions

Configuration J

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Cypress Cyw20704ua1kffb1gt Firmware	All versions

Running on/with	Platform Versions
Cypress Cyw20704ua1kffb1gt	All versions

Configuration K

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Cypress Cyw20704ua2kffb1g Firmware	All versions

Running on/with	Platform Versions
Cypress Cyw20704ua2kffb1g	All versions

Configuration L

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Cypress Cyw20704ua2kffb1gt Firmware	All versions

Running on/with	Platform Versions
Cypress Cyw20704ua2kffb1gt	All versions

Configuration M

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Cypress Cyw20705a1kwfbgt Firmware	All versions

Running on/with	Platform Versions
Cypress Cyw20705a1kwfbgt	All versions

Configuration N

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Cypress Cyw20705b0kwfbg Firmware	All versions

Running on/with	Platform Versions
Cypress Cyw20705b0kwfbg	All versions

Configuration O

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Cypress Cyw20705b0kwfbgt Firmware	All versions

Running on/with	Platform Versions
Cypress Cyw20705b0kwfbgt	All versions

Configuration P

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Cypress Cyw20706ua1kffb1g Firmware	All versions

Running on/with	Platform Versions
Cypress Cyw20706ua1kffb1g	All versions

Configuration Q

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Cypress Cyw20706ua1kffb1gt Firmware	All versions

Running on/with	Platform Versions
Cypress Cyw20706ua1kffb1gt	All versions

Configuration R

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Cypress Cyw20706ua1kffb4g Firmware	All versions

Running on/with	Platform Versions
Cypress Cyw20706ua1kffb4g	All versions

Configuration S

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Cypress Cyw20706ua2kffb4g Firmware	All versions

Running on/with	Platform Versions
Cypress Cyw20706ua2kffb4g	All versions

Configuration T

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Cypress Cyw20706ua2kffb4gt Firmware	All versions

Running on/with	Platform Versions
Cypress Cyw20706ua2kffb4gt	All versions

Configuration U

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Cypress Cyw20707a2kubgt Firmware	All versions

Running on/with	Platform Versions
Cypress Cyw20707a2kubgt	All versions

Configuration V

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Cypress Cyw20707ua1kffb1g Firmware	All versions

Running on/with	Platform Versions
Cypress Cyw20707ua1kffb1g	All versions

Configuration W

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Cypress Cyw20707ua1kffb4g Firmware	All versions

Running on/with	Platform Versions
Cypress Cyw20707ua1kffb4g	All versions

Configuration X

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Cypress Cyw20707ua1kffb4gt Firmware	All versions

Running on/with	Platform Versions
Cypress Cyw20707ua1kffb4gt	All versions

Configuration Y

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Cypress Cyw20707ua2kffb4g Firmware	All versions

Running on/with	Platform Versions
Cypress Cyw20707ua2kffb4g	All versions

Configuration Z

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Cypress Cyw20707ua2kffb4gt Firmware	All versions

Running on/with	Platform Versions
Cypress Cyw20707ua2kffb4gt	All versions

Configuration A

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Cypress Cyw20707va1pkwbgt Firmware	All versions

Running on/with	Platform Versions
Cypress Cyw20707va1pkwbgt	All versions

Configuration B

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Cypress Cyw20707va2pkwbgt Firmware	All versions

Running on/with	Platform Versions
Cypress Cyw20707va2pkwbgt	All versions

Configuration C

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Cypress Cyw20730a1kfbg Firmware	All versions

Running on/with	Platform Versions
Cypress Cyw20730a1kfbg	All versions

Configuration D

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Cypress Cyw20730a1kfbgt Firmware	All versions

Running on/with	Platform Versions
Cypress Cyw20730a1kfbgt	All versions

Configuration E

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Cypress Cyw20730a1kml2g Firmware	All versions

Running on/with	Platform Versions
Cypress Cyw20730a1kml2g	All versions

Configuration F

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Cypress Cyw20730a1kml2gt Firmware	All versions

Running on/with	Platform Versions
Cypress Cyw20730a1kml2gt	All versions

Configuration G

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Cypress Cyw20730a1kmlg Firmware	All versions

Running on/with	Platform Versions
Cypress Cyw20730a1kmlg	All versions

Configuration H

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Cypress Cyw20730a1kmlgt Firmware	All versions

Running on/with	Platform Versions
Cypress Cyw20730a1kmlgt	All versions

Configuration I

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Cypress Cyw20730a2kfbg Firmware	All versions

Running on/with	Platform Versions
Cypress Cyw20730a2kfbg	All versions

Configuration J

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Cypress Cyw20730a2kfbgt Firmware	All versions

Running on/with	Platform Versions
Cypress Cyw20730a2kfbgt	All versions

Configuration K

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Cypress Cyw20730a2kml2g Firmware	All versions

Running on/with	Platform Versions
Cypress Cyw20730a2kml2g	All versions

Configuration L

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Cypress Cyw20730a2kml2gt Firmware	All versions

Running on/with	Platform Versions
Cypress Cyw20730a2kml2gt	All versions

Configuration M

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Cypress Cyw20733a1kfb1gt Firmware	All versions

Running on/with	Platform Versions
Cypress Cyw20733a1kfb1gt	All versions

Configuration N

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Cypress Cyw20733a2kfb1g Firmware	All versions

Running on/with	Platform Versions
Cypress Cyw20733a2kfb1g	All versions

Configuration O

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Cypress Cyw20733a2kfb1gt Firmware	All versions

Running on/with	Platform Versions
Cypress Cyw20733a2kfb1gt	All versions

Configuration P

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Cypress Cyw20733a2kml1g Firmware	All versions

Running on/with	Platform Versions
Cypress Cyw20733a2kml1g	All versions

Configuration Q

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Cypress Cyw20733a2kml1gt Firmware	All versions

Running on/with	Platform Versions
Cypress Cyw20733a2kml1gt	All versions

Configuration R

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Cypress Cyw20733a3kfb1g Firmware	All versions

Running on/with	Platform Versions
Cypress Cyw20733a3kfb1g	All versions

Configuration S

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Cypress Cyw20733a3kfb1gt Firmware	All versions

Running on/with	Platform Versions
Cypress Cyw20733a3kfb1gt	All versions

Configuration T

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Cypress Cyw20733a3kfb2gt Firmware	All versions

Running on/with	Platform Versions
Cypress Cyw20733a3kfb2gt	All versions

Configuration U

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Cypress Cyw20733a3kml1g Firmware	All versions

Running on/with	Platform Versions
Cypress Cyw20733a3kml1g	All versions

Configuration V

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Cypress Cyw20733a3kml1gt Firmware	All versions

Running on/with	Platform Versions
Cypress Cyw20733a3kml1gt	All versions

Configuration W

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Cypress Cyw20734ua1kffb3g Firmware	All versions

Running on/with	Platform Versions
Cypress Cyw20734ua1kffb3g	All versions

Configuration X

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Cypress Cyw20734ua1kffb3gt Firmware	All versions

Running on/with	Platform Versions
Cypress Cyw20734ua1kffb3gt	All versions

Configuration Y

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Cypress Cyw20734ua2kffb3g Firmware	All versions

Running on/with	Platform Versions
Cypress Cyw20734ua2kffb3g	All versions

Configuration Z

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Cypress Cyw20734ua2kffb3gt Firmware	All versions

Running on/with	Platform Versions
Cypress Cyw20734ua2kffb3gt	All versions

Configuration A

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Cypress Cyw43438kubgt Firmware	All versions

Running on/with	Platform Versions
Cypress Cyw43438kubgt	All versions

Configuration B

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Cypress Cyw4343w1kubgt Firmware	All versions

Running on/with	Platform Versions
Cypress Cyw4343w1kubgt	All versions

Configuration C

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Cypress Cyw4343wkubgt Firmware	All versions

Running on/with	Platform Versions
Cypress Cyw4343wkubgt	All versions

Configuration D

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Cypress Cyw4343wkwbgt Firmware	All versions

Running on/with	Platform Versions
Cypress Cyw4343wkwbgt	All versions

Configuration E

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Cypress Cyw4354kkwbgt Firmware	All versions

Running on/with	Platform Versions
Cypress Cyw4354kkwbgt	All versions

Configuration F

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Cypress Cyw4354xkubgt Firmware	All versions

Running on/with	Platform Versions
Cypress Cyw4354xkubgt	All versions

Configuration G

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Cypress Cyw89071a1cubxgt Firmware	All versions

Running on/with	Platform Versions
Cypress Cyw89071a1cubxgt	All versions

Configuration H

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Cypress Cyw89072brfb5g Firmware	All versions

Running on/with	Platform Versions
Cypress Cyw89072brfb5g	All versions

Configuration I

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Cypress Cyw89072brfb5gt Firmware	All versions

Running on/with	Platform Versions
Cypress Cyw89072brfb5gt	All versions

Configuration J

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Cypress Cyw89335l2cubgt Firmware	All versions

Running on/with	Platform Versions
Cypress Cyw89335l2cubgt	All versions

Configuration K

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Cypress Cyw89335lcubgt Firmware	All versions

Running on/with	Platform Versions
Cypress Cyw89335lcubgt	All versions

Related CWEs

CWE-732

Incorrect Permission Assignment for Critical Resource

The product specifies permissions for a security-critical resource in a way that allows that resource to be read or modified by unintended actors.

References (12)

http://seclists.org/fulldisclosure/2019/Aug/11

Source: cve@mitre.org

http://seclists.org/fulldisclosure/2019/Jul/22

Source: cve@mitre.org

https://seclists.org/bugtraq/2019/Aug/21

Source: cve@mitre.org

https://source.android.com/security/bulletin/2019-05-01

Source: cve@mitre.org

Third Party Advisory

https://support.apple.com/kb/HT210348

Source: cve@mitre.org

https://www.broadcom.com/support/resources/product-security-center

Source: cve@mitre.org

Vendor Advisory

http://seclists.org/fulldisclosure/2019/Aug/11