Lucene search
+L

2508 matches found

Prion
Prion
added 2021/03/10 4:15 p.m.23 views

Out-of-bounds

In Write of NxpMfcReader.cc, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege in the NFC server with System execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-11Andro...

4.6CVSS6.7AI score0.00124EPSS
SaveExploits0References1Affected Software1
ATTACKERKB
ATTACKERKB
added 2021/03/10 4:15 p.m.6 views

CVE-2021-0370

In Write of NxpMfcReader.cc, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege in the NFC server with System execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-11Andro...

6.7CVSS6.8AI score0.00124EPSS
SaveExploits0References2
Cvelist
Cvelist
added 2021/03/10 3:54 p.m.46 views

CVE-2021-0370

In Write of NxpMfcReader.cc, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege in the NFC server with System execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-11Andro...

6.9AI score0.00124EPSS
SaveExploits0References1
CVE
CVE
added 2021/03/10 3:54 p.m.59 views

CVE-2021-0370

The CVE-2021-0370 entry concerns Android 11 with a vulnerability in NxpMfcReader.cc where an out-of-bounds write occurs due to a missing bounds check. This can lead to local escalation of privilege on the NFC server with System execution privileges required; exploitation does not require user int...

6.7CVSS6.7AI score0.00124EPSS
SaveExploits0References1Affected Software1
CNNVD
CNNVD
added 2021/03/02 12:00 a.m.12 views

Google Android 安全漏洞

Google Android is a Linux-based open source operating system from the USGoogleOpen Handheld Alliance Google. A security vulnerability exists in Google Android/Pixel, which stems from a logic error in the NXP NFC firmware that could allow for an insecure firmware update. This could result in the...

6.7CVSS5.8AI score0.00139EPSS
SaveExploits0References4
CNNVD
CNNVD
added 2021/01/07 12:00 a.m.14 views

Fido U2f Security Breach

Fido U2f is an authentication protocol from the Fido organization based on standard public key cryptography techniques primarily used for smart card authentication. A security vulnerability exists in Fido U2f that could allow an attacker to extract the ECDSA private key after extensive physical...

4.2CVSS6.1AI score0.00197EPSS
SaveExploits1References3
BDU FSTEC
BDU FSTEC
added 2020/12/23 12:00 a.m.13 views

The vulnerability of the llcp_sock_create function in the net/nfc/llcp_sock.c module of the AF_NFC module in the Linux operating system, related to default access rights settings, allows a attacker to compromise data integrity.

The vulnerability of the llcpsockcreate function in the net/nfc/llcpsock.c module of the AFNFC module in the Linux operating system is related to a lack of mechanisms for standard permissions. Exploiting this vulnerability could allow an attacker to compromise data integrity...

3.3CVSS6.6AI score0.00567EPSS
SaveExploits0References42Affected Software5
BDU FSTEC
BDU FSTEC
added 2020/12/23 12:00 a.m.12 views

The vulnerability in the net/nfc/rawsock.c function of the Linux operating system allows a attacker to compromise the integrity of protected information.

The vulnerability in the net/nfc/rawsock.c function of the Linux operating system is related to the lack of checking for CAPNETRAW when creating a NFC socket. Exploiting this vulnerability can allow an attacker to compromise the integrity of the protected information...

5.5CVSS6.5AI score0.00399EPSS
SaveExploits0References23Affected Software7
Veracode
Veracode
added 2020/12/21 8:37 p.m.23 views

Arbitrary Code Execution

chromium is vulnerable to arbitrary code execution. The vulnerability exists through a use after free in NFC that allows a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page...

8.8CVSS4.5AI score0.01389EPSS
SaveExploits0References11Affected Software1
OSV
OSV
added 2020/12/15 5:15 p.m.9 views

CVE-2020-27046

In nfcncifproceeaction of nfcncif.cc, there is a possible out of bounds read due to a missing bounds check. This could lead to local information disclosure with System execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-11Android ID:...

4.4CVSS6AI score0.00163EPSS
SaveExploits0References1
NVD
NVD
added 2020/12/15 5:15 p.m.30 views

CVE-2020-27040

In phNxpNciHalcoreinitialized of phNxpNciHal.cc, there is a possible out of bounds read due to a missing bounds check. This could lead to local information disclosure in the NFC server with System execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersion...

4.4CVSS5.1AI score0.00155EPSS
SaveExploits0References1
NVD
NVD
added 2020/12/15 5:15 p.m.28 views

CVE-2020-27046

In nfcncifproceeaction of nfcncif.cc, there is a possible out of bounds read due to a missing bounds check. This could lead to local information disclosure with System execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-11Android ID:...

4.4CVSS5.1AI score0.00163EPSS
SaveExploits0References1
OSV
OSV
added 2020/12/15 5:15 p.m.11 views

CVE-2020-27036

In phNxpNciHalsendextcmd of phNxpNciHalext.cc, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege in the NFC server with System execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersion...

6.7CVSS6.5AI score0.0015EPSS
SaveExploits0References1
NVD
NVD
added 2020/12/15 5:15 p.m.30 views

CVE-2020-27036

In phNxpNciHalsendextcmd of phNxpNciHalext.cc, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege in the NFC server with System execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersion...

6.7CVSS7.3AI score0.0015EPSS
SaveExploits0References1
NVD
NVD
added 2020/12/15 5:15 p.m.23 views

CVE-2020-27037

In phNxpNciHalcoreinitialized of phNxpNciHal.cc, there is a possible out of bounds read due to a missing bounds check. This could lead to local information disclosure in the NFC server with System execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersion...

4.4CVSS5.1AI score0.00155EPSS
SaveExploits0References1
Prion
Prion
added 2020/12/15 5:15 p.m.25 views

Out-of-bounds

In nfcenabled of nfcmain.cc, there is a possible out of bounds read due to an incorrect increment. This could lead to local information disclosure via firmware with System execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-11Android ID:...

2.1CVSS4.8AI score0.00143EPSS
SaveExploits0References1Affected Software1
Prion
Prion
added 2020/12/15 5:15 p.m.17 views

Out-of-bounds

In phNxpNciHalsendextcmd of phNxpNciHalext.cc, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege in the NFC server with System execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersion...

4.6CVSS7.1AI score0.0015EPSS
SaveExploits0References1Affected Software1
Prion
Prion
added 2020/12/15 5:15 p.m.24 views

Out-of-bounds

In phNxpNciHalcoreinitialized of phNxpNciHal.cc, there is a possible out of bounds read due to a missing bounds check. This could lead to local information disclosure in the NFC server with System execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersion...

2.1CVSS4.8AI score0.00155EPSS
SaveExploits0References1Affected Software1
ATTACKERKB
ATTACKERKB
added 2020/12/15 5:15 p.m.4 views

CVE-2020-27036

In phNxpNciHalsendextcmd of phNxpNciHalext.cc, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege in the NFC server with System execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersion...

6.7CVSS5.6AI score0.0015EPSS
SaveExploits0References2
ATTACKERKB
ATTACKERKB
added 2020/12/15 5:15 p.m.5 views

CVE-2020-27043

In nfcenabled of nfcmain.cc, there is a possible out of bounds read due to an incorrect increment. This could lead to local information disclosure via firmware with System execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-11Android ID:...

4.4CVSS5.6AI score0.00143EPSS
SaveExploits0References2
Rows per page
Query Builder