Lucene search

Google_androidCVELIST:CVE-2021-0956

HistoryDec 15, 2021 - 6:05 p.m.

CVE-2021-0956

2021-12-1518:05:42

google_android

www.cve.org

nfctag::discovertechnologies

out of bounds write

remote escalation of privilege

android-11

android-12

android id

incorrect bounds check

AI Score

9.3

Confidence

High

EPSS

0.001

Percentile

42.6%

JSON

In NfcTag::discoverTechnologies (activation) of NfcTag.cpp, there is a possible out of bounds write due to an incorrect bounds check. This could lead to remote escalation of privilege with no additionalSystem execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-11 Android-12Android ID: A-189942532

CNA Affected

[
  {
    "product": "Android",
    "vendor": "n/a",
    "versions": [
      {
        "status": "affected",
        "version": "Android-11 Android-12"
      }
    ]
  }
]

References

source.android.com/security/bulletin/2021-12-01