PT-2019-11158

Name of the Vulnerable Software and Affected Versions: Android versions 7.0 through 9 Description: The issue is related to a possible out-of-bound read in the llcp util parse link params function due to a missing bounds check. This could lead to local information disclosure with no additional...

PT-2019-11157

Name of the Vulnerable Software and Affected Versions: Android versions 7.0 through 9 Description: The issue is related to a possible out-of-bound read in the llcp util parse cc function of llcp util.cc due to a missing bounds check. This could lead to local information disclosure with no...

UBUNTU-CVE-2019-12818

An issue was discovered in the Linux kernel before 4.20.15. The nfcllcpbuildtlv function in net/nfc/llcpcommands.c may return NULL. If the caller does not check for this, it will trigger a NULL pointer dereference. This will cause denial of service. This affects nfcllcpbuildgb in net/nfc/llcpcore...

PT-2019-5417

Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 4.20.15 Description The issue is related to the nfc llcp build tlv function in the Linux kernel, which may return NULL. If the caller does not check for this, it will trigger a null pointer dereference, causing a...

PT-2019-11172

Name of the Vulnerable Software and Affected Versions: Android versions 7.0 through 9 Description: The issue is related to an integer overflow in the llcp link proc agf pdu function of llcp link.cc, which could lead to a possible out of bounds read. This may result in local information disclosure...

PT-2019-11171

Name of the Vulnerable Software and Affected Versions: Android versions 7.0 through 9 Description: The issue is related to an incorrect bounds check in the llcp dlc proc i pdu function of llcp dlc.cc, which could lead to a possible out of bounds read. This may result in local information disclosu...

PT-2018-19023

Name of the Vulnerable Software and Affected Versions Android kernel Description The issue is related to a missing bounds check in the nfc llcp build sdreq tlv function of llcp commands.c, which could lead to a possible out of bounds write. This could result in local escalation of privilege,...

UBUNTU-CVE-2013-3233

The llcpsockrecvmsg function in net/nfc/llcp/sock.c in the Linux kernel before 3.9-rc7 does not initialize a certain length variable and a certain data structure, which allows local users to obtain sensitive information from kernel stack memory via a crafted recvmsg or recvfrom system call...

PT-2013-4241

Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 3.9-rc7 Description The issue allows local users to obtain sensitive information from kernel stack memory. This is due to the llcp sock recvmsg function in net/nfc/llcp/sock.c not initializing a certain length...