CVE-2017-11120

9.8 CRITICAL

Published: September 28, 2017 Modified: May 13, 2026

Description

On Broadcom BCM4355C0 Wi-Fi chips 9.44.78.27.0.1.56 and other chips, an attacker can craft a malformed RRM neighbor report frame to trigger an internal buffer overflow in the Wi-Fi firmware, aka B-V2017061204.

AI Explanation

Get an AI-powered plain-language explanation of this vulnerability and remediation steps.

CVSS v3.x Details

0.0 Low Medium High Critical 10.0

Vector String

CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

References to Advisories, Solutions, and Tools

Patch Vendor Advisory Exploit Third Party Advisory

http://packetstormsecurity.com/files/144328/Broadcom-802.11k-Neighbor-Report-Response-Out-Of-Bounds-Write.html

Source: cve@mitre.org

Exploit Third Party Advisory VDB Entry

http://www.securityfocus.com/bid/100984

Source: cve@mitre.org

Third Party Advisory VDB Entry

https://bugs.chromium.org/p/project-zero/issues/detail?id=1289

Source: cve@mitre.org

Exploit Issue Tracking Third Party Advisory

https://lists.apple.com/archives/security-announce/2017/Sep/msg00007.html

Source: cve@mitre.org

Mailing List Third Party Advisory

https://lists.apple.com/archives/security-announce/2017/Sep/msg00009.html

Source: cve@mitre.org

Mailing List Third Party Advisory

https://source.android.com/security/bulletin/2017-09-01

Source: cve@mitre.org

Third Party Advisory

https://support.apple.com/HT208112

Source: cve@mitre.org

Third Party Advisory

https://support.apple.com/HT208113

Source: cve@mitre.org

Third Party Advisory

https://support.apple.com/en-us/HT208112

Source: cve@mitre.org

Third Party Advisory

https://support.apple.com/en-us/HT208113

Source: cve@mitre.org

Third Party Advisory

https://www.exploit-db.com/exploits/42784/

Source: cve@mitre.org

Exploit Third Party Advisory VDB Entry

http://packetstormsecurity.com/files/144328/Broadcom-802.11k-Neighbor-Report-Response-Out-Of-Bounds-Write.html