Broadcom WLAN Driver Elevation of Privilege Vulnerability

A vulnerability allowing local elevation of privilege has been identified in the Broadcom WLAN driver, specifically within the 'wl_update_hidden_ap_ie' function of 'wl_cfgscan.c'. This issue arises from improper input validation, which creates a potential for out-of-bounds write. Exploitation of this vulnerability does not require any additional execution privileges or user interaction.

Impact

Exploitation of this vulnerability could lead to unauthorized access to elevated privileges, allowing a user to perform actions or access resources that are normally restricted.

Remediation

Users can update their devices to the April 2025 security patch level to address this vulnerability.