Lucene search

K
osvGoogleOSV:ASB-A-178725766
HistoryApr 01, 2021 - 12:00 a.m.

OOB Write in NFC stack when handling MIFARE Classic TLVs

2021-04-0100:00:00
Google
osv.dev
17
nfc
mifare classic
bounds check
remote code execution
software

AI Score

9.5

Confidence

High

EPSS

0.001

Percentile

49.1%

In rw_mfc_handle_read_op of rw_mfc.cc, there is a possible out of bounds write due to a missing bounds check. This could lead to remote code execution via a malicious NFC packet with no additional execution privileges needed. User interaction is not needed for exploitation.

AI Score

9.5

Confidence

High

EPSS

0.001

Percentile

49.1%

Related for OSV:ASB-A-178725766