CVE-2016-0801
Critical · 9.8CVSS
9.8
EPSS
33.4%
Published
Feb 7, 2016
CISA due date
—
The record
The Broadcom Wi-Fi driver in the kernel in Android 4.x before 4.4.4, 5.x before 5.1.1 LMY49G, and 6.x before 2016-02-01 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via crafted wireless control message packets, aka internal bug 25662029.
Affected packages
| Ecosystem | Package | Introduced | Fixed |
|---|---|---|---|
| Debian:11 | firmware-nonfree | 0 | 20180518-1 |
| Debian:12 | firmware-nonfree | 0 | 20180518-1 |
| Debian:13 | firmware-nonfree | 0 | 20180518-1 |
| Debian:8 | firmware-nonfree | 0 | 20161130-4~deb8u1 |
| Mageia:6 | kernel-firmware-nonfree | 0 | 20171220-1.mga6.nonfree |
| Mageia:6 | radeon-firmware | 0 | 20171205-1.mga6.nonfree |
| Ubuntu:Pro:16.04:LTS | linux-flo | 0 | No fix |
| Ubuntu:Pro:16.04:LTS | linux-mako | 0 | No fix |
Related vulnerabilities
- CVE-2023-47210 Improper input validation for some Intel(R) PROSet/Wireless WiFi software for linux… Also affects firmware-nonfree
- CVE-2023-38417 Improper input validation for some Intel(R) PROSet/Wireless WiFi software before version… Also affects firmware-nonfree
- CVE-2023-35061 Improper initialization for the Intel(R) PROSet/Wireless and Intel(R) Killer(TM) Wi-Fi… Also affects firmware-nonfree
- CVE-2023-4969 A GPU kernel can read sensitive data from another GPU kernel (even from another user or… Also affects firmware-nonfree
- CVE-2022-40964 Improper access control for some Intel(R) PROSet/Wireless WiFi and Killer(TM) WiFi… Also affects firmware-nonfree
- CVE-2022-38076 Improper input validation in some Intel(R) PROSet/Wireless WiFi and Killer(TM) WiFi… Also affects firmware-nonfree
- CVE-2022-36351 Improper input validation in some Intel(R) PROSet/Wireless WiFi and Killer(TM) WiFi… Also affects firmware-nonfree
- CVE-2022-27635 Improper access control for some Intel(R) PROSet/Wireless WiFi and Killer(TM) WiFi… Also affects firmware-nonfree