Back
CVE-2017-0561
CRITICAL
A remote code execution vulnerability in the Broadcom Wi-Fi firmware could enable a remote attacker to execute arbitrary code within the context of the Wi-Fi SoC. This issue is rated as Critical due to the possibility of remote code execution in the context of the Wi-Fi SoC. Product: Android. Versions: Kernel-3.10, Kernel-3.18. Android ID: A-34199105. References: B-RB#110814.
Published: Apr 7, 2017
Modified: Jun 17, 2026
CWE-787
CVSS Metrics
CVSSv3
Attack Vector:
NETWORK
Attack Complexity:
LOW
Privileges Required:
NONE
User Interaction:
NONE
Scope:
UNCHANGED
Confidentiality Impact:
HIGH
Integrity Impact:
HIGH
Availability Impact:
HIGH
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Affected Products (2)
| Vendor | Product | Version |
|---|---|---|
| linux | linux_kernel | 3.10 |
| linux | linux_kernel | 3.18 |
GitHub Security Advisory GHSA-gwvj-5r5w-vc2g
A remote code execution vulnerability in the Broadcom Wi-Fi firmware could enable a remote...
References (12)
- http://www.securityfocus.com/bid/97367 Third Party Advisory, VDB Entry
- http://www.securitytracker.com/id/1038201
- https://lists.debian.org/debian-lts-announce/2018/11/msg00015.html
- https://source.android.com/security/bulletin/2017-04-01 Patch, Vendor Advisory
- https://www.exploit-db.com/exploits/41805/
- https://www.exploit-db.com/exploits/41806/
- http://www.securityfocus.com/bid/97367 Third Party Advisory, VDB Entry
- http://www.securitytracker.com/id/1038201
- https://lists.debian.org/debian-lts-announce/2018/11/msg00015.html
- https://source.android.com/security/bulletin/2017-04-01 Patch, Vendor Advisory
- https://www.exploit-db.com/exploits/41805/
- https://www.exploit-db.com/exploits/41806/
Risk Scores
CVSS Score
9.8 / 10
EPSS Score
29.82%
Top 2% most likely to be exploited
Threat Score
48.1 / 100
Data Sources
NVD
EPSS
GitHub