CVE-2017-11120

PoC ×3—

CVSS 3.0

9.8 critical

EPSS

9%p95

Published

Sep 28, 2017 (Sep 28, 2017)

Modified

Jun 17, 2026

Description

On Broadcom BCM4355C0 Wi-Fi chips 9.44.78.27.0.1.56 and other chips, an attacker can craft a malformed RRM neighbor report frame to trigger an internal buffer overflow in the Wi-Fi firmware, aka B-V2017061204.

Vendors: broadcom apple
Products: bcm4355c0 firmware, iphone os, tvos
Weakness: CWE-119
Vector: CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

NVD CVE.org GitHub PoCs EPSS (9.1%)

In the news3 stories

Lenovo patches critical flaws that affect Broadcom’s chipsets in dozens of Lenovo ThinkPad

Security AffairsFeb 10, 10:14 UTC · Feb 10, 2018Vulnerability CVE-2017-11120 CVE-2017-11121

Google publishes PoC Exploit code for iPhone Wi

Security AffairsOct 1, 13:19 UTC · Oct 1, 2017Exploit / PoC CVE-2017-11120 CVE-2017-3544

Google Researcher Publishes PoC Exploit for Apple iPhone Wi

The Hacker NewsSep 27, 15:41 UTC · Sep 27, 2017Exploit / PoC CVE-2017-11120