Return-Path: <daniel.edelson@broadcom.com>
X-Original-To: fr0mTheCloud@proton.me
Delivered-To: fr0mTheCloud@proton.me
Authentication-Results: mail.protonmail.ch; dkim=pass (Good 1024 bit
    rsa-sha256 signature) header.d=broadcom.com header.a=rsa-sha256
Authentication-Results: mail.protonmail.ch; dmarc=pass (p=reject dis=none)
 header.from=broadcom.com
Authentication-Results: mail.protonmail.ch; spf=pass smtp.mailfrom=broadcom.com
Authentication-Results: mail.protonmail.ch; arc=pass smtp.remote-ip=209.85.214.225
 arc.chain=:google.com
Authentication-Results: mail.protonmail.ch; dkim=pass (1024-bit key)
 header.d=broadcom.com header.i=@broadcom.com header.b="BmLn+Zw1"
Received: from mail-pl1-f225.google.com (mail-pl1-f225.google.com [209.85.214.225])
 (using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits)
  key-exchange X25519 server-signature RSA-PSS (4096 bits) server-digest SHA256) (No
 client certificate requested) by mailinosl106.protonmail.ch (Postfix) with ESMTPS id
 4fVt7M2gNhz7y for <fr0mTheCloud@proton.me>; Wed, 11 Mar 2026 01:14:07 +0000 (UTC)
Received: by mail-pl1-f225.google.com with SMTP id d9443c01a7336-2ae8177446fso35500535ad.0
        for <fr0mTheCloud@proton.me>; Tue, 10 Mar 2026 18:14:07 -0700 (PDT)
Received: from smtp-us-east1-p01-i01-si01.dlp.protect.broadcom.com
 (address-144-49-247-117.dlp.protect.broadcom.com. [144.49.247.117])
        by smtp-relay.gmail.com with ESMTPS id
 d9443c01a7336-2aeae254e2dsm1027115ad.24.2026.03.10.18.14.05
        for <fr0mTheCloud@proton.me>
        (version=TLS1_2 cipher=ECDHE-ECDSA-AES128-GCM-SHA256 bits=128/128);
        Tue, 10 Mar 2026 18:14:05 -0700 (PDT)
Received: by mail-yw1-f200.google.com with SMTP id 00721157ae682-79895ffb315so43752517b3.2
        for <fr0mTheCloud@proton.me>; Tue, 10 Mar 2026 18:14:04 -0700 (PDT)
X-Google-Dkim-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
        d=1e100.net; s=20230601; t=1773191646; x=1773796446;
        h=cc:to:subject:message-id:date:from:in-reply-to:references
         :mime-version:dkim-signature:x-gm-gg:x-gm-message-state:from:to:cc
         :subject:date:message-id:reply-to;
        bh=7DhzruKu9cNwW3VU2RqvXhDpsYxkW2XGwC/YVU50y6I=;
        b=AGOOjsW8o+Ba87VpDoZepRTWFD1UjtrvsVREYwoyFHJhxLIf9DhYsdbeDeAiPn7TVJ
         OLAQ9Z9D37tKZgMPMYjSUYtM1MesngdKSS1KDEuDvC4Faja1PvkH+0dljJlc0ii0jh4F
         gC8ARaoE3ZcHb+V8jOd+6w3+XJtWDme2vueJKz08qVTir+M0XTGBSJCKN8s1Rdh/WrKj
         qdeYY+Ukn2dd2OT74nw5ZCSTBvFkMwQnKnYFWC5lapw0j8qCcPSKbHWTG9EeFNBlz6KC
         sDrvvrRw3qxtCT1azuuFD9i2a9yjmz2YNcCUr2HxvKZfYwag8BtvRtXbfk6HeG+jHjFW
         XJFw==
X-Gm-Message-State: AOJu0YyPedDX916bOXmG0B7yh2hgxyIjkHJ+H6G2ClWQCAkZ0rKYXGKh
 CE6Z6iVHYyAWcJNVNIZklcaDbAg3ZLqFtx7FTsKhPO1ClcUZKFXZG2wLn6wNBJ9fVannHgmAwql
 tSdfUUrKcsqBIAqYNu1WNeBI3EQyhFYLqJSbzCujAukbY7JR4bezPPpOxyNKEuhX828B/MbTETo
 jogx+cfPA6H3PWgTqJsvgaDr9ni+OhFG5Qx/v0gOKV4AZFv4nQvWu8xdelSVgS3rRZLJv7C1zg1
 ssGwfbycJlBlw==
X-Gm-Gg: ATEYQzzVvhcu3/JyG9DPRfWLDUob230luymmHihlXze4oHbgLxs7ST8AN5j5VjCbXtT
 TJpo036kPKB9y+riTlV9qKfl6HbrGMm6TcyhhNE2pC4EgT17e+/Tx5LPUPJg56v4uqpuLyQ9XF6
 jvfPNPp3H6R3//V7v/W0QMKa36a5aLcdzqASUOq4Hhc+lvdw8bSaaMMaAd8XuKJbj+ojmewhMfm
 kM4mE1jXwSROyc0dFNqa3ENIxQwvPfoVfFDCTqIR00htr4c5YM2VowhJWCdiAuzxlt+4fO7NJ8k
 hK43MROjQLqF9Yekh2t2EnSBf1tTP1F1YjPINeUlcYMagO1WabQbuG74FQBuIKxzMCXFGbnCOZd
 dIm9zPQwEB4/zqsb4hOsBKaasl6mT+K4Ii4RaLYs0rmPMvNagE+Ru73beZo8Z7p80k3ha5Sq0HU
 gBAIKNH/zu3w45FsuShK7oCqSXCDl32R75/gYxVXr7NOdm2oj5hqjWAEi0WQIfjA==
X-Received: by 2002:a17:903:2c06:b0:2aa:d5ea:4cfb with SMTP id
 d9443c01a7336-2aeae78c15emr6934535ad.9.1773191645415;
        Tue, 10 Mar 2026 18:14:05 -0700 (PDT)
X-Received: by 2002:a05:690c:dc7:b0:796:4b03:73bd with SMTP id
 00721157ae682-79917f89928mr7508537b3.31.1773191643858;
        Tue, 10 Mar 2026 18:14:03 -0700 (PDT)
X-Received: by 2002:a05:690c:dc7:b0:796:4b03:73bd with SMTP id
 00721157ae682-79917f89928mr7508227b3.31.1773191643122; Tue, 10 Mar 2026 18:14:03 -0700
 (PDT)
X-Relaying-Domain: broadcom.com
X-Cfilter-Loop: Reflected
Arc-Seal: i=1; a=rsa-sha256; t=1773191644; cv=none;
        d=google.com; s=arc-20240605;
        b=UsA6Dqdkoyw9qHwdD8wvmW2fThdMss0L9+5BH/Y5BsA85q5PYLHTXFY7ynCIfQ8U37
         5DATsohh1j2MJ9k3sHJNB6yLa2Uro878oGXTSHEAqDaokYQeM2vWiaPpaguS9fsOA7F3
         vVYIGLEdpqHwMshQrbN3f80z4rK9c6tF2mwG18IwgVD0bK39uL924/oqSy67cuQY/omC
         1pb8r7UxtogbZjHeQNgZkbeju5laoIN1Cd0uuQInCQwFrB4ZIM9tesVvVXkyFhPaM2hF
         jwT0hs+9fQlxXgS53PoWI2LcK8nFntYC+FCy4cDJafX/3QB2x/53A5VSrph7llt5HRFs
         CUnw==
Arc-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=google.com; s=arc-20240605;
        h=cc:to:subject:message-id:date:from:in-reply-to:references
         :mime-version:dkim-signature;
        bh=7DhzruKu9cNwW3VU2RqvXhDpsYxkW2XGwC/YVU50y6I=;
        fh=HPAl6Bc7slbmXb+SLp7s7gaNSCQUBAIGSNu3AUzRpQo=;
        b=YMnIQqf6G2iITSYEbzLtoxwDTL/hb/6QgB695J3+998XymNIuNlBPOo6+DqIvxpVS7
         119U8AJk4Fy+9KUeiA/6nSFDmgqc32HsDuwoSnD+G+PoQFNjLs8E8NvmIt/NjmwzEw9c
         lvGoSMNBAEEm7muhcfEdKRlqDR7yt5xzUf/6aur15OoCMmgwpZvfHzmn2KT6IojFXT9J
         VxcFbPR9tw4nA103sXgyEln9eJ0FSkRwF9EKB4n+eFmz3nKZZnaQXiHmhq2o9qNklLVN
         VjER7bhk6wVzAIy2UQ6xdqUE7+E1ZcyBq56i1a+YJzlQKB/Ed5TMNng1N4gL/giZhW/A
         WHtg==;
        darn=proton.me
Arc-Authentication-Results: i=1; mx.google.com; arc=none
Dkim-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
        d=broadcom.com; s=google; t=1773191644; x=1773796444; darn=proton.me;
        h=cc:to:subject:message-id:date:from:in-reply-to:references
         :mime-version:from:to:cc:subject:date:message-id:reply-to;
        bh=7DhzruKu9cNwW3VU2RqvXhDpsYxkW2XGwC/YVU50y6I=;
        b=BmLn+Zw1H0O5wsTUnPMHOWDE9Cz2ZF/ca9FNhtfmVQ8/tFKlOjewBgESzXLe1oOzjw
         ZWbAhewY7ZJV/i8ogbxUpAbC53bbaJl+DavR8VbkEoDyij04QVjZWjYnguo8UeLbu7bc
         tBKr4D8wvdOha/aU/O+4vos6ore3V8mwfQNQk=
Mime-Version: 1.0
References: <IMSuEh9Qz-I_Y-5Exnqa0HSvbpUVePVXsEbJinMyqUbWZR7b804C8iq_MMBC1g0CUcn6t4_JV6soyHvEr5YTjbbEHluAsszfpFtcJIvtj8U=@proton.me>
 <CAKTj95V0Fqm=E=aM+5vdDGjoba=NSgRhSqKfaHt9ZKx7enRJog@mail.gmail.com>
 <oV4VpwTvRJ5hI9WaiMqbEXUa2GQt7vkRA3VTa-zbVPVPcBmI4w9y4BJpIQI_D_HxwGVR2-ZaxxH_6A0pq0MWQFmFi9IKvZZwu_0jraHHgMU=@proton.me>
 <AkFLfYZpGzM-oVWKUHJTiK03-exvct2yeiWZB2_NkSfe4rTlE5c3DIY3u_LBMmoP9BG2MbFkElVGsVNMLIhUp2YTm1ZUQrAytZ_f08t8ps0=@proton.me>
 <CAKTj95X8vb4ThkTJb3Xbjhuo3jsBqdYx31vU9gfqKAorUWKR3Q@mail.gmail.com>
 <CAKkBcKiO-JAijcjJdCFizej2YJ=brhkHkB03S_3U8SCm2tAgVg@mail.gmail.com>
 <86IYnH3otcRoTqnip25iEETMyf1Rl9ArT4TCjg_CMIbKv85C44jgj3Fe0QlPCIP5i2U5KlISG8_IebGKq8r60t-86D9LKefeixBgddzZLpQ=@proton.me>
 <CAKkBcKhyyLba_ztapm5Q5qzJzDMuommDNBScUKaJGQwiUC=gDA@mail.gmail.com>
 <l2c915t8wtXEHVrEkjztEctrk2TEnnUEkul0_YAuqM2_NhvODWKsS8A06Bb-PqXKt1EZRt5GWljDeCBzyKSBkTqAyzRhU6jqIkBabILduH8=@proton.me>
In-Reply-To: <l2c915t8wtXEHVrEkjztEctrk2TEnnUEkul0_YAuqM2_NhvODWKsS8A06Bb-PqXKt1EZRt5GWljDeCBzyKSBkTqAyzRhU6jqIkBabILduH8=@proton.me>
From: Daniel Edelson <daniel.edelson@broadcom.com>
Date: Tue, 10 Mar 2026 18:13:49 -0700
X-Gm-Features: AaiRm53o0Mu-4b7fhhb99pDTh1NV0s5Iuqig6XE74iC2ma8KOGxmXkQo1cni7Wc
Message-Id: <CAKkBcKg96ABSuYaLbO5JbeBQe2SWN46WP7rLik9f3=LkfUfxRw@mail.gmail.com>
Subject: Re: Vulnerability Disclosure: BCM4387 Coexistence SRAM | Observed In-the-Wild
 Exploitation
To: fr0mTheCloud@proton.me
Cc: Ken Williams <ken.williams@broadcom.com>, "Psirt (BRCM)" <psirt@broadcom.com>
X-Detectorid-Processed: b00c1d49-9d2e-4205-b15f-d015386d3d5e
Content-Type: text/html
X-Pm-Spam: 0yezJI6cihyJeYR3pi42biOpJJvbmsCIeI1msjN3X3blJp7IjSlBITQ0iy0iOSNiwJPU
 FQF9RUVkEUNUSUSO9owIjSCJLUIy6uYTLTOsc9kIl1WJZZ91pvZmbjI7pBSIli0QTOsnih1Wa2ZfVF
 tbm6SIZIhmzjFGd1am95laW13RXbVmk1B3XzXwIYwMj5TAMIwiipFWbFbz8JfcHkW9bZwWitJiOWYs
 lByM3yS0LMID2wEDMiNw5IsdChm1IaxWfyB3M3XyBIib2ujAOMADwxEzMTO5kg5OT3jAMOMD0tJCLW
 YslV4dGlF9dbJWlpRGZmbfd9kbWiWwZOJipmRnbGbh99tdC0WxdaxWp1dmbWYtwUtZTh21cbwGiwJC
 L3XwN0iYWujAOMADx5IzNjNxkUxMD4DcOMMD1wJCL3XwN1fYWzmFYZIS6w4CMDM3Ek2MjwTEONET4w
 gzNzMsUBfInp3dcdNGovR3X3XoBNoaXnW5aIojwwAjLDMxIYxOT1DcMMUjz0gzNjN3UJyLCfW5dbFm
 t6ISZnIhdNodGzGlbd1Czk5WZXZtIVfcHp3dcdNGo91nISfiwJpc36CIZIYj5jBjYWMwUlhYjiTJZO
 ZGkyETNTOkFJ9ZSfQ==
X-Attached: smime.p7s
X-Pm-Origin: external
X-Pm-Transfer-Encryption: TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits)
X-Pm-Content-Encryption: on-delivery
X-Pm-Spamscore: 0
X-Pm-Spam-Action: inbox


-----BEGIN PGP MESSAGE-----
Version: ProtonMail
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=m9J2
-----END PGP MESSAGE-----
