CVE-2019-6496: High severity marvell 88w8787 vulnerability
The ThreadX-based firmware on Marvell Avastar Wi-Fi devices, models 88W8787, 88W8797, 88W8801, 88W8897, and 88W8997, allows remote attackers to execute arbitrary code or cause a denial of service (block pool overflow) via malformed Wi-Fi packets during identification of available Wi-Fi networks. Exploitation of the Wi-Fi device can lead to exploitation of the host application processor in some cases, but this depends on several factors including host OS hardening and the availability of DMA.
Affected Software
Event History
Frequently Asked Questions
What is CVE-2019-6496?
CVE-2019-6496 is a vulnerability in the ThreadX-based firmware on Marvell Avastar Wi-Fi devices, allowing remote code execution or denial of service.
Which Marvell Avastar Wi-Fi devices are affected by CVE-2019-6496?
Models 88W8787, 88W8797, 88W8801, 88W8897, and 88W8997 are affected by CVE-2019-6496.
What is the severity of CVE-2019-6496?
The severity of CVE-2019-6496 is rated as high, with a CVSS score of 8.8.
How can CVE-2019-6496 be exploited?
CVE-2019-6496 can be exploited by sending malformed Wi-Fi packets during the identification of available Wi-Fi networks.
Are there any references available for CVE-2019-6496?
Yes, you can refer to the following sources for more information on CVE-2019-6496: http://www.securityfocus.com/bid/106865, https://2018.zeronights.ru/wp-content/uploads/materials/19-Researching-Marvell-Avastar-Wi-Fi.pdf, https://embedi.org/blog/remotely-compromise-devices-by-using-bugs-in-marvell-avastar-wi-fi-from-zero-knowledge-to-zero-click-rce/