Windows 7: Wi-Fi chips in phones, tablets, vulnerable to DoS attack

Security researchers at Core Security have identified a denial-of-service (DoS) vulnerability in the firmware for Wi-Fi chips installed in several smartphones, tablets, laptops, and even a car.

The vulnerability is present in Broadcom BCM4325 and BCM4329 Wi-Fi chips, and has the potential to stop them from working, due to the firmware not validating what input is provided to it. Core Security stated in its security advisory that by using this bug, attackers could send certain input to the chip, which could cause the firmware to attempt to read information outside of the normal data that it is permitted to read — an out-of-bounds read error.

According to Core Security, this error can be used to deny the user any ability to use their Wi-Fi interface, and possibly disclose information that would normally be protected.