One parser, two bugs, many routers: Exploiting Broadcom WiFi across eCos, Linux

A vulnerability in Broadcom’s proprietary WPS implementation enables unauthenticated attackers within WiFi range to leak memory and achieve unauthenticated remote code execution on millions of routers. This post covers its discovery through agentic vulnerability research, exploitation across eCos and Linux platforms, its impact on the global router supply chain, and a disclosure process rather … interesting.