Findings

CVE-2019-9501

In driver/firmware of broadcom wifi chipset, there is a possible out of bounds write due to a missing bounds check.

Published Jul 1, 2020 · updated Oct 14, 2026

In driver/firmware of broadcom wifi chipset, there is a possible out of bounds write due to a missing bounds check. This could lead to remote code execution with no additional execution privileges needed. User interaction is not needed for exploitation.

Timeline

Detection, updates, and resolution for this record.

  1. Jul 1, 2020 · Catalog

    Detected

    In driver/firmware of broadcom wifi chipset, there is a possible out of bounds write due to a missing bounds check. This could lead to remote code execution with no additional execution privileges needed. User interaction is not needed for exploitation.

  2. Oct 13, 2026 · Catalog

    Fix available

    Android :unknown: :0 → :2020-07-05

  3. Oct 13, 2026 · OSV.dev

    Fix available

    :unknown: fixed in :2020-07-05

  4. Oct 13, 2026 · OSV.dev

    Fix available

    :unknown: fixed in :2020-07-05

  5. Oct 13, 2026 · Catalog

    Updated

    In driver/firmware of broadcom wifi chipset, there is a possible out of bounds write due to a missing bounds check. This could lead to remote code execution with no additional execution privileges needed. User interaction is not needed for exploitation.

  6. Oct 14, 2026 · OSV.dev

    Updated

    In driver/firmware of broadcom wifi chipset, there is a possible out of bounds write due to a missing bounds check. This could lead to remote code execution with no additional execution privileges needed. User interaction is not needed for exploitation.

Affected

  • Android :unknown::0 → :2020-07-05

Sources

References