Use after free (race condition?) in phTmlNfc_TmlThread

2022-01-0100:00:00

Google

osv.dev

use after free

race condition

phtmlnfc_tmlthread

phtmlnfc_init

phtmlnfc_cleanup

local escalation of privilege

no user interaction

software

EPSS

Percentile

5.1%

JSON

In phTmlNfc_Init and phTmlNfc_CleanUp of phTmlNfc.cc, there is a possible use after free due to a race condition. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.