Over The Air - Vol. 2, Pt. 1: Exploiting The Wi-Fi Stack on Apple Devices
Summary: Project Zero's Gal Beniamini published a three-part research series on exploiting Broadcom's Wi-Fi stack in Apple devices, demonstrating remote code execution on an iPhone 7 running iOS 10.2 and ultimately gaining complete control over the iOS kernel over-the-air with no user interaction. The Wi-Fi firmware vulnerabilities were present in iOS up to and including 10.3.3 and were addressed in iOS 11, while the same flaws affected most Samsung flagship devices including the Galaxy S8, Galaxy S7 Edge and Galaxy S7, as well as the Nexus 6P and some Chromebooks.
Key Takeaway: A Wi-Fi chip flaw that yields full kernel control with no user interaction means the attack surface sits below your OS and app-layer defenses, and the same Broadcom firmware shipped across phones, laptops and routers - so patching one device family does not close the exposure.
Read the original at Google Project Zero ↗
- Topics
- Vulnerabilities & Patching
- Related
- Attackers Exploit UnrealIRCd Flaw That Enables Server-Level Command Injection Cyber Risks · Nov 14, 2026U.S. CISA adds Check Point and UnrealIRCd flaws to its Known Exploited Vulnerabilities catalog Cyber Risks · Nov 14, 2026PostgreSQL Patches 52 Flaws, Including 22-Year-Old Bug Enabling Authenticated RCE Cyber Risks · Nov 13, 2026