One Parser, Two Bugs, Many Routers: Exploiting Broadcom WiFi Across eCos and Linux
Summary
A detailed write-up on a Broadcom WiFi vulnerability affecting 802.11 parsing across eCos and Linux, enabling remote code execution without a network key. The author discusses a long-running defect, a patch history, and showcases demos, fingerprinting scripts, and YARA rules to document the blast radius across multiple vendors and devices. A strict disclosure timeline underscores the ongoing risk and patch gaps as of October 2026.