CVE-2020-6616

Some Broadcom chips mishandle Bluetooth random-number generation because a low-entropy Pseudo Random Number Generator (PRNG) is used in situations where a…

published May 8, 2020

CVSS
—
EPSS
1%
Percentile
53.7
In the wild
Unconfirmed
What it is

Some Broadcom chips mishandle Bluetooth random-number generation because a low-entropy Pseudo Random Number Generator (PRNG) is used in situations where a Hardware Random Number Generator (HRNG) should have been used to prevent spoofing. This affects, for example, Samsung Galaxy S8, S8+, and Note8 devices with the BCM4361 chipset. The Samsung ID is SVE-2020-16882 (May 2020).

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.00730 · 53.7th percentile
Published
2020-05-08T19:50Z
EPSS history
Timeline
  • 08 MAY 19:50Z
    Some Broadcom chips mishandle Bluetooth random-number generation because a low-entropy Pseudo Random Number Generator (PRNG) is used in situations where a…
    cvelistv5