Skip to content

Bluetooth Firmware -broadcom- Update Version 2.2.3.593 May 2026

Given that Broadcom has transitioned most Bluetooth firmware to Cypress/Infineon, version 2.2.3.593 remains a last-mile security patch for legacy BCM2070x silicon. No further functional updates are expected. Enterprises should plan hardware migration to Bluetooth 5.x chips (Intel AX200, Realtek 8822CE) by 2026 to maintain security compliance.


Broadcom chips use out-of-band (OOB) signaling via a shared BT_WIFI_ACTIVE pin. Prior firmware versions did not respect priority requests from Wi-Fi during heavy Bluetooth scanning. Update 2.2.3.593 implements a time-division priority scheme:

Result: Measured 18% reduction in Wi-Fi TCP retransmissions during concurrent Bluetooth file transfer.


An undocumented vulnerability allowed an attacker with Wi-Fi access to induce Bluetooth packet corruption by transmitting specific patterns on channel 6, causing a stack buffer re-use error. Update 2.2.3.593 adds adaptive channel blacklisting and Wi-Fi collaborative filtering (WCF). bluetooth firmware -broadcom- update version 2.2.3.593


Environment: 1,200 Dell Latitude E7470 laptops (BCM20702 chipset), Windows 10 Enterprise 1709.
Update method: WSUS with approved driver/firmware package “Broadcom – Bluetooth – 2.2.3.593”.

Results after 6 weeks (n=1,137 successful updates):

| Metric | Pre-update | Post-update | Change | |--------|------------|-------------|--------| | Bluetooth support calls per month | 47 | 12 | -74% | | Bluetooth headset disconnects/hour | 0.07 | 0.02 | -71% | | Unable to pair after sleep | 8% | 1.2% | -85% | | Wi-Fi speed loss during BT active | 38% | 19% | -50% | Given that Broadcom has transitioned most Bluetooth firmware

Security scanning (Nessus plugin 108050 - BlueBorne): 100% compliance after update.

Negative incident: 3% of laptops required re-pairing of all devices after firmware load due to link key invalidation (expected behavior per Bluetooth specification, v2.2.3.593 enforces new LTK derivation).


With Microsoft deprecating its old Bluetooth stack in favor of a new unified stack (starting Windows 10 version 1809), many Broadcom chips exhibited wake-from-sleep failures. This firmware update patches the HCI (Host Controller Interface) layer to fully comply with Microsoft’s updated requirements. Broadcom chips use out-of-band (OOB) signaling via a

While the full BIAS attack (CVE-2020-10135) was disclosed later, retrospect analysis shows 2.2.3.593 introduced early hardening: stricter role-switch authentication and rejection of legacy authentication without encryption during Secure Simple Pairing (SSP) mode.

Cause: The new firmware incompletely overwrote the EEPROM.

Solution:

Attention

We tried to combine the products in your guest cart with your saved cart, but we encountered an issue while merging them. When choosing a subscription, please select either monthly or yearly as they cannot be combined. Kindly review your cart before proceeding to checkout.

Cart Updated
undefined

undefined:
undefined
Attention

The software you are trying to purchase is not available in your country or region.

Cart Updated
The items in your cart have been updated for two reasons. Firstly, the prices now match the currency linked to your account address. Secondly, some items have been removed because they are not available for purchase in your region. Please review your cart before proceeding.

undefined:
undefined
Cart Updated
The items in your cart have been updated for two reasons. Firstly, you've added too many of one item to your cart. Secondly, some items have been removed because they are not available for purchase in your region. Please review your cart before proceeding.

undefined:
undefined
Cart Updated
The items in your cart have been updated for three reasons. Firstly, the prices now match the currency linked to your account address. Secondly, you've added too many of one item to your cart. Thirdly, some items have been removed because they are not available for purchase in your region. Please review your cart before proceeding

undefined:
undefined
Cart Updated

Your currency has been changed to match the currency associated with your account address.

Cart Updated

Your cart has been updated for two reasons. First, the prices now reflect the currency associated with your account address. Second, you've added too many of one item to your cart. Please review your cart before proceeding.

Cart Updated

While combining the products in your guest cart with your saved cart, at least one item in your cart has exceeded the maximum allowable quantity. Please review and correct your cart before proceeding to checkout.