Vulnerabilities in Broadcom/Cypress wifi chips' firmware have been known for a while now:

https://blog.exodusintel.com/2017/07/26/broadpwn/