VULNERABILITY INTELLIGENCE

CVE-2018-19860

CVSS score8.8 HIGH
EPSS probability1.02%
CISA KEVNot currently listed
Published2019-06-07
Last modified2026-06-17
CVSS vectorCVSS:3.0/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Description

Broadcom firmware before summer 2014 on Nexus 5 BCM4335C0 2012-12-11, Raspberry Pi 3 BCM43438A1 2014-06-02, and unspecifed other devices does not properly restrict LMP commnds and executes certain memory contents upon receiving an LMP command, as demonstrated by executing an HCI command.

Weakness classification

  • CWE-732: Incorrect Permission Assignment for Critical Resource

Primary references