CVE-2019-15126 Race condition in n/a
Attackers can exploit a race condition in Broadcom Wi-Fi client devices to bypass layer 2 encryption and disclose sensitive information over the air.
- Exploited in the wild
- Not known
- Login needed
- Not needed
- Attackable
- Local or same network only
- Victim action needed
- Not needed
- Fix
- Available
What is CVE-2019-15126?
CVE-2019-15126 is a low-severity vulnerability in Apple Ipados, published on 5 Feb 2020. It can only be exploited from the same machine or local network, with no action from the victim.
Official description
An issue was discovered on Broadcom Wi-Fi client devices. Specifically timed and handcrafted traffic can cause internal errors (related to state transitions) in a WLAN device that lead to improper layer 2 Wi-Fi encryption with a consequent possibility of information disclosure over the air for a discrete set of traffic, a different vulnerability than CVE-2019-9500, CVE-2019-9501, CVE-2019-9502, and CVE-2019-9503.
Weakness: CWE-367
Which versions are affected by CVE-2019-15126?
It affects 9 products.
Linux distribution packages (8)
kernel-firmware SUSE:Linux Enterprise Micro 5.0 | All versions | 20200107-3.23.1 |
kernel-firmware SUSE:Linux Enterprise Module for Basesystem 15 SP2 | All versions | 20200107-3.23.1 |
bcm43xx-firmware SUSE:Linux Enterprise Server 12 SP4-LTSS | All versions | 20180314-4.6.1 |
bcm43xx-firmware SUSE:Linux Enterprise Server 12 SP5 | All versions | 20180314-4.6.1 |
kernel-firmware SUSE:Linux Enterprise Server 12 SP5 | All versions | 20190618-5.17.1 |
bcm43xx-firmware SUSE:Linux Enterprise Server for SAP Applications 12 SP5 | All versions | 20180314-4.6.1 |
kernel-firmware SUSE:Linux Enterprise Server for SAP Applications 12 SP5 | All versions | 20190618-5.17.1 |
kernel-firmware openSUSE:Leap 15.2 | All versions | 20200107-lp152.2.9.1 |
Products include Apple Ipados, Apple Iphone Os, Apple Mac Os X, Broadcom Bcm43012 Firmware, Broadcom Bcm43013 Firmware, Broadcom Bcm4356 Firmware and 3 more.
How do I fix CVE-2019-15126?
Apply the vendor's patch.
Is CVE-2019-15126 being exploited?
There is no known exploitation of CVE-2019-15126 in the wild and no public exploit code.
Public exploit code: 1 Exploit-DB entry and 3 proofs of concept on GitHub.
Other vulnerabilities in Apple Ipados
- CVE-2025-43300 Apple iOS, iPadOS, and macOS Out-of-Bounds Write
- CVE-2025-24201 Apple Multiple Products WebKit Out-of-Bounds Write
- CVE-2025-24085 Apple Multiple Products Use-After-Free
- CVE-2025-31200 Apple Multiple Products Memory Corruption
- CVE-2025-31201 Apple Multiple Products Arbitrary Read and Write
Sources
Also known as GHSA-p2g8-8j8x-3728, MGASA-2021-0103, MGASA-2021-0104, SUSE-SU-2021:4003-1, SUSE-SU-2021:4200-1, SUSE-SU-2021:4201-1 and 1 more.