The Patching Friars' AlmanacA calendar of CVE saints

Feast day December 10

SpectraHoly card for spectra, generated with AI (Claude, Anthropic) for the Lunario dei Frati Patchatori.CC BY-NC-SA 4.0 Spectra DUAE RADII UNUS MURUS
🤖 Image and text generated with AI

⬇ Download holy card: ·

Embed on your site

Saint Spectra, Who Breaks the Wall Between Radios

Patron of Wi-Fi and Bluetooth combo chips, radio coexistence, and anyone who thinks two separate components stay separate.

Life

Jiska Classen and Francesco Gringoli described Spectra, a class of flaws in the Broadcom and Cypress combo chips found in iPhones, MacBooks and Galaxy phones. Wi-Fi and Bluetooth run on separate cores of the same chip and exchange coexistence information over an internal interface, bypassing the operating system. By abusing that interface, one radio could crash, leak data from, or run code on the other, with the operating system powerless to stop it.

Prayer

O Saint Spectra, who crosses the wall between two neighbouring radios, let our chips confide no more than they should. Amen.

How to celebrate

Celebrated by installing the Bluetooth firmware update that fixes coexistence, and keeping the radio you don't need switched off.

Two radios in one chip share one secret.

Technical record

Disclosed on
December 10 2021
CVE
CVE-2019-15063CVE-2020-10370CVE-2020-10369
CVSS
8.8

Certain Cypress (and Broadcom) Wireless Combo chips such as CYW43455, when a 2021-01-26 Bluetooth firmware update is not present, allow a Bluetooth outage via a "Spectra" attack.

Sources: i.blackhat.com · arxiv.org

📅 Add to your calendar

SaintsGoogle CalendarApple, Outlook (.ics)

Observances (feasts, scourges and miracles)Google CalendarApple, Outlook (.ics)

In Google Calendar you can also paste the URL in Settings → Add calendar → From URL. The first sync can take a few hours.