CVE-2021-0370

The CVE-2021-0370 entry concerns Android 11 with a vulnerability in NxpMfcReader.cc where an out-of-bounds write occurs due to a missing bounds check. This can lead to local escalation of privilege on the NFC server with System execution privileges required; exploitation does not require user int...

PT-2021-13049

Name of the Vulnerable Software and Affected Versions: Android versions prior to Android-11 Description: The issue is related to a missing bounds check in the NxpMfcReader.cc, which could lead to a possible out of bounds write. This may result in local escalation of privilege in the NFC server,...

CVE-2020-27036

In phNxpNciHalsendextcmd of phNxpNciHalext.cc, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege in the NFC server with System execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersion...

CVE-2020-27037

In phNxpNciHalcoreinitialized of phNxpNciHal.cc, there is a possible out of bounds read due to a missing bounds check. This could lead to local information disclosure in the NFC server with System execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersion...

CVE-2020-27037

In phNxpNciHalcoreinitialized of phNxpNciHal.cc, there is a possible out of bounds read due to a missing bounds check. This could lead to local information disclosure in the NFC server with System execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersion...

CVE-2020-27036

In phNxpNciHalsendextcmd of phNxpNciHalext.cc, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege in the NFC server with System execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersion...

Out-of-bounds

In phNxpNciHalsendextcmd of phNxpNciHalext.cc, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege in the NFC server with System execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersion...

Out-of-bounds

In phNxpNciHalcoreinitialized of phNxpNciHal.cc, there is a possible out of bounds read due to a missing bounds check. This could lead to local information disclosure in the NFC server with System execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersion...

Out-of-bounds

In phNxpNciHalcoreinitialized of phNxpNciHal.cc, there is a possible out of bounds read due to a missing bounds check. This could lead to local information disclosure in the NFC server with System execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersion...

CVE-2020-27037

CVE-2020-27037 affects Android 11, with a vulnerability in phNxpNciHal_core_initialized of phNxpNciHal.cc that can trigger an out-of-bounds read due to a missing bounds check. This could lead to local information disclosure on the NFC server and may grant System execution privileges, with no user...

CVE-2020-27037

In phNxpNciHalcoreinitialized of phNxpNciHal.cc, there is a possible out of bounds read due to a missing bounds check. This could lead to local information disclosure in the NFC server with System execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersion...

CVE-2020-27036

CVE-2020-27036 is a local elevation-of-privilege issue in Android 11’s NFC stack. The vulnerability occurs in phNxpNciHal_send_ext_cmd implemented by phNxpNciHal_ext.cc, where a missing bounds check enables an out-of-bounds write. This could lead to local escalation of privilege on the NFC server...

CVE-2020-27036

In phNxpNciHalsendextcmd of phNxpNciHalext.cc, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege in the NFC server with System execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersion...

CVE-2020-27040: Out-of-bounds Read

In phNxpNciHalcoreinitialized of phNxpNciHal.cc, there is a possible out of bounds read due to a missing bounds check. This could lead to local information disclosure in the NFC server with System execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersion...

CVE-2020-27037: Out-of-bounds Read

In phNxpNciHalcoreinitialized of phNxpNciHal.cc, there is a possible out of bounds read due to a missing bounds check. This could lead to local information disclosure in the NFC server with System execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersion...

CVE-2020-27036: Out-of-bounds Read

In phNxpNciHalsendextcmd of phNxpNciHalext.cc, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege in the NFC server with System execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersion...

PT-2020-16614

Name of the Vulnerable Software and Affected Versions Android versions prior to Android-11 Description The issue is related to a possible out of bounds read in the NFC server due to a missing bounds check. This could lead to local information disclosure with System execution privileges needed, an...

PT-2020-16617

Name of the Vulnerable Software and Affected Versions Android versions Android-11 Description The issue is related to a possible out of bounds read due to a missing bounds check in the phNxpNciHal core initialized function of phNxpNciHal.cc. This could lead to local information disclosure in the...

PT-2020-16613

Name of the Vulnerable Software and Affected Versions Android versions prior to Android-11 Description The issue is related to a missing bounds check in the phNxpNciHal send ext cmd function of phNxpNciHal ext.cc, which could lead to a possible out of bounds write. This might result in local...

CVE-2020-0050

In nfahciusendmsg of nfahciutils.cc, there is a possible out of bounds write due to improper input validation. This could lead to local escalation of privilege in the NFC server with System execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions:...