Project Zero finds serious Broadcom WiFi chipset flaw that allows hacking of many Android devices; Google releasing patch this month; iOS was patched in 10.3.1
Broadcom chips allow rogue Wi-Fi signals to execute code of attacker's choosing. — A broad array of Android phones are vulnerable …
Context & Ripple Effects
Project Zero's disclosure puts Broadcom's WiFi silicon back at the center of mobile security: a rogue access point can push code onto nearby phones with no user interaction. The asymmetry in the response is the story — Apple shipped its fix in iOS 10.3.1, while Android users wait on Google's monthly patch to trickle through an update pipeline they don't control.
This is not a one-off. The same chip family resurfaces in later coverage: the flaw was ultimately judged severe enough to enable a fully remote worm across roughly a billion iPhones and Android devices, and a separate Cypress/Broadcom bug later left billions of devices open to eavesdropping before it too was patched.
First-order effects
- Android owners with Broadcom WiFi chips are exposed to attacker-chosen code execution over the air until Google's patch lands this month — and only if their device actually receives it.
- Apple has already closed the hole via iOS 10.3.1, leaving iPhone users protected while the Android install base carries the residual risk.
Second-order effects
- Google's fix must pass through OEMs and carriers, so the patch reaches Pixels first and ages badly elsewhere — the same delivery lag that later defined the KRACK response, when Microsoft patched Windows immediately while researchers estimated 41% of Android devices stayed vulnerable awaiting an Android fix that arrived 'in coming weeks'.
- Broadcom now shares the blast radius with its rival silicon vendor: Qualcomm spent 2019 patching its own WiFi-adjacent holes, including a critical flaw across 46 chipsets that could expose encryption keys, so handset makers face firmware-security audits across their whole supplier base.
Third-order effects
- If chip-level WiFi flaws keep surfacing, the effective security boundary for smartphones moves down into the SoC/WiFi firmware layer, making chipset vendors — not just OS makers — accountable for patch cadence.
- The pattern sharpens the structural split between vertically integrated platforms that can patch silicon and OS together within days and the fragmented Android long tail that may never see the fix, turning hardware choice into a de facto security decision.
The trend: Mobile security is migrating into the silicon layer, where Broadcom- and Qualcomm-class WiFi firmware bugs repeatedly outpace the fragmented Android patch pipeline while integrated platforms close them in days.