PT-2017-2025 · Broadcom · Broadcom Wi-Fi Driver

Published 2017-04-21 · Updated 2017-05-02 · CVE-2016-2433

Positive Technologies (AI Summary)

CVSS v3.1

8.8

High

Base vector

AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Broadcom Wi-Fi driver for Android versions prior to Build AAE570

Description The issue is related to insufficient access control in the Broadcom Wi-Fi driver for Android, which can be exploited by remote attackers to execute arbitrary code in the context of the kernel.

Recommendations For versions prior to Build AAE570, update to Build AAE570 or later to resolve the issue. As a temporary workaround, consider restricting access to the Wi-Fi driver until a patch is available.

Fix

Improper Access Control

Weakness Enumeration

CWE-284

Related Identifiers

BDU:2017-01192

CVE-2016-2433

Affected Products

Broadcom Wi-Fi Driver

References · 5

• https://osv.dev/vulnerability/CVE-2016-2433 · Vendor Advisory
• http://support.blackberry.com/kb/articleDetail?articleNumber=000038167 · Vendor Advisory
• https://bdu.fstec.ru/vul/2017-01192 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2016-2433 · Security Note
• http://securityfocus.com/bid/98034 · Note