CVE-2018-9584

CVE-2018-9584 affects Android 7.0–9 in the NFC subsystem. In nfc_ncif_set_config_status (nfc_ncif.cc), a missing bounds check enables an out-of-bounds write, leading to local elevation of privilege with no extra execution privileges and no user interaction required. The issue is addressed by Andr...