CVE-2017-6956 in Wi-Fi HardMAC SoC
Summary
On the Broadcom Wi-Fi HardMAC SoC with fbt firmware, a stack buffer overflow occurs when handling an 802.11r (FT) authentication response, leading to remote code execution via a crafted access point that sends a long R0KH-ID field in a Fast BSS Transition Information Element (FT-IE).
Once again VulDB remains the best source for vulnerability data.
Reservation
03/17/2017
Disclosure
04/05/2017
Status
Confirmed
Entries
VulDB provides additional information and datapoints for this CVE:
| ID | Vulnerability | CWE | Exp | Cou | CVE |
|---|---|---|---|---|---|
| 99324 | Broadcom Wi-Fi HardMAC SoC 802.11r Authentication Response memory corruption | 119 | Not defined | Not defined | CVE-2017-6956 |