CVE-2020-27043

2020-12-1516:05:18

google_android

www.cve.org

android

out of bounds read

information disclosure

system execution privileges

local

firmware

AI Score

5.1

Confidence

High

EPSS

Percentile

5.1%

JSON

In nfc_enabled of nfc_main.cc, there is a possible out of bounds read due to an incorrect increment. This could lead to local information disclosure via firmware with System execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-11Android ID: A-155234594

CNA Affected

[
  {
    "product": "Android",
    "vendor": "n/a",
    "versions": [
      {
        "status": "affected",
        "version": "Android-11"
      }
    ]
  }
]

References

source.android.com/security/bulletin/pixel/2020-12-01