CVE-2021-0996

CVE-2021-0996 affects Android 12 where the out-of-bounds read occurs in nfaHciCallback within HciEventManager.cpp due to a missing bounds check. This leads to local information disclosure over NFC with System privileges required for exploitation, and does not require user interaction. Connected s...

CVE-2021-0930

CVE-2021-0930 : An out-of-bounds write in phNxpNciHal_ext.cc (function phNxpNciHal_process_ext_rsp) with a missing bounds check allows remote code execution over NFC on Android, requiring no user interaction and no additional privileges. Affected: Android 9–12 (per the CVE description). The vulne...

CVE-2021-0930

In phNxpNciHalprocessextrsp of phNxpNciHalext.cc, there is a possible out of bounds write due to a missing bounds check. This could lead to remote code execution over NFC with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions:...

CVE-2021-25525

Improper check or handling of exception conditions vulnerability in Samsung Pay US only prior to version 4.0.65 allows attacker to use NFC without user recognition...

Design/Logic Flaw

Improper check or handling of exception conditions vulnerability in Samsung Pay US only prior to version 4.0.65 allows attacker to use NFC without user recognition...

CVE-2021-25525

Improper check or handling of exception conditions vulnerability in Samsung Pay US only prior to version 4.0.65 allows attacker to use NFC without user recognition...

CVE-2021-25525

Samsung Pay (US only) versions prior to 4.0.65 are affected by an improper check/handling of exception conditions, allowing an attacker to use NFC without user recognition. The root cause is described as improper exception handling. Impact is unauthorized NFC usage without user interaction. No ex...

Huawei HarmonyOS Wearables Heap Buffer Overflow Vulnerability

Huawei HarmonyOS Wearables, an electronic watch from Huawei of China Huawei, is vulnerable to a heap buffer overflow vulnerability in the Huawei HarmonyOS Wearables NFC module. An attacker can exploit this vulnerability to cause a memory out-of-bounds...

Google Android 缓冲区错误漏洞

Google Android is a Linux-based open source operating system from Google, Inc. A buffer overflow vulnerability exists in Google Android, which can be exploited by attackers to cause the disclosure of NFC local information that requires system execution privileges...

PUB-A-181346545

In nfaHciCallback of HciEventManager.cpp, there is a possible out of bounds read due to a missing bounds check. This could lead to local information disclosure over NFC with System execution privileges needed. User interaction is not needed for exploitation...

ASB-A-189942532

In NfcTag::discoverTechnologies activation of NfcTag.cpp, there is a possible out of bounds write due to an incorrect bounds check. This could lead to remote escalation of privilege with no additionalSystem execution privileges needed. User interaction is not needed for exploitation...

Ubuntu 20.04 LTS : Linux kernel (OEM) vulnerabilities (USN-5165-1)

The remote Ubuntu 20.04 LTS host has a package installed that is affected by multiple vulnerabilities as referenced in the USN-5165-1 advisory. It was discovered that the NFC subsystem in the Linux kernel contained a use-after-free vulnerability in its NFC Controller Interface NCI implementation....

USN-5165-1: Linux kernel (OEM) vulnerabilities

It was discovered that the NFC subsystem in the Linux kernel contained a use-after-free vulnerability in its NFC Controller Interface NCI implementation. A local attacker could possibly use this to cause a denial of service system crash or execute arbitrary code. CVE-2021-3760 It was discovered...

GSD-2021-1002313 NFC: reorder the logic in nfc_{un,}register_device

NFC: reorder the logic in nfcun,registerdevice This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.15.5 by commit...

UVI-2021-1002313 NFC: reorder the logic in nfc_{un,}register_device

NFC: reorder the logic in nfcun,registerdevice This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.15.5 by commit...

GSD-2021-1002312 NFC: add NCI_UNREG flag to eliminate the race

NFC: add NCIUNREG flag to eliminate the race This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.15.5 by commit...

UVI-2021-1002312 NFC: add NCI_UNREG flag to eliminate the race

NFC: add NCIUNREG flag to eliminate the race This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.15.5 by commit...

GSD-2021-1002281 NFC: reorder the logic in nfc_{un,}register_device

NFC: reorder the logic in nfcun,registerdevice This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.10.82 by commit...

UVI-2021-1002281 NFC: reorder the logic in nfc_{un,}register_device

NFC: reorder the logic in nfcun,registerdevice This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.10.82 by commit...

GSD-2021-1002280 NFC: add NCI_UNREG flag to eliminate the race

NFC: add NCIUNREG flag to eliminate the race This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.10.82 by commit...