Google has developed a fix for a critical remote code execution vulnerability in Broadcom Wi-Fi firmware. There is a huge amount of information (and possibly this) available around it, but as an end user my primary concern is this: how do I avoid being hacked while waiting for a patch?

  • According to the problem description you should be able to avoid it by switching Wifi off, but that's probably the only reliable workaround. – Steffen Ullrich Apr 13 '17 at 12:05
  • 1
    To avoid getting compromised keep the Wi-Fi off and make sure it is actually off. Android has a feature where even if Wi-Fi is turned off it will still use it for location and (I'm sure) ad targeting/analytics for Google. This can be disabled as well. – André Borie Apr 13 '17 at 12:06
  • And as for the vulnerable phones: I don't think you will find a reliable listing of all the phones which both use Broadcom Wi-Fi and have the relevant feature enabled (and that's why I've marked the question as too broad). But if you want to know if your phone is affected contact your vendor. – Steffen Ullrich Apr 13 '17 at 12:16
  • @SteffenUllrich Alright. I've removed the question about the models. – l0b0 Apr 13 '17 at 12:26

According to the detailed report this specific problem can be triggered by specifically constructed Wi-Fi packets. From my understanding this kind of attack should possible for an unauthorized attacker and it does not matter if the victim is associated with a Wi-Fi network or not. This means that the only workaround to protect a vulnerable device is too completely disable Wi-Fi.

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service, privacy policy and cookie policy

Not the answer you're looking for? Browse other questions tagged or ask your own question.