Lucene search
+L

2354 matches found

Prion
Prion
added 2021/03/10 5:15 p.m.21 views

Design/Logic Flaw

In the NXP NFC firmware, there is a possible insecure firmware update due to a logic error. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android kernelAndroid ID: A-168799695...

4.6CVSS6.7AI score0.00139EPSS
SaveExploits0References2
CVE
CVE
added 2021/03/10 4:18 p.m.82 views

CVE-2021-0462

CVE-2021-0462 concerns the NXP NFC firmware used in Google Pixel devices. A logic error could allow an insecure firmware update, enabling local elevation of privilege with system-level execution privileges, and exploitation does not require user interaction. The issue is tied to the NFC firmware ...

6.7CVSS6.6AI score0.00139EPSS
SaveExploits0References2Affected Software1
Cvelist
Cvelist
added 2021/03/10 4:18 p.m.28 views

CVE-2021-0462

In the NXP NFC firmware, there is a possible insecure firmware update due to a logic error. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android kernelAndroid ID: A-168799695...

6.9AI score0.00139EPSS
SaveExploits0References2
OSV
OSV
added 2021/03/10 4:15 p.m.4 views

CVE-2021-0370

In Write of NxpMfcReader.cc, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege in the NFC server with System execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-11Andro...

6.7CVSS6.7AI score0.00124EPSS
SaveExploits0References1
NVD
NVD
added 2021/03/10 4:15 p.m.25 views

CVE-2021-0370

In Write of NxpMfcReader.cc, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege in the NFC server with System execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-11Andro...

6.7CVSS0.00124EPSS
SaveExploits0References1
Prion
Prion
added 2021/03/10 4:15 p.m.19 views

Out-of-bounds

In Write of NxpMfcReader.cc, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege in the NFC server with System execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-11Andro...

4.6CVSS6.7AI score0.00124EPSS
SaveExploits0References1Affected Software1
CVE
CVE
added 2021/03/10 3:54 p.m.50 views

CVE-2021-0370

The CVE-2021-0370 entry concerns Android 11 with a vulnerability in NxpMfcReader.cc where an out-of-bounds write occurs due to a missing bounds check. This can lead to local escalation of privilege on the NFC server with System execution privileges required; exploitation does not require user int...

6.7CVSS6.7AI score0.00124EPSS
SaveExploits0References1Affected Software1
Cvelist
Cvelist
added 2021/03/10 3:54 p.m.36 views

CVE-2021-0370

In Write of NxpMfcReader.cc, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege in the NFC server with System execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-11Andro...

6.9AI score0.00124EPSS
SaveExploits0References1
CNNVD
CNNVD
added 2021/03/02 12:0 a.m.8 views

Google Android 安全漏洞

Google Android is a Linux-based open source operating system from the USGoogleOpen Handheld Alliance Google. A security vulnerability exists in Google Android/Pixel, which stems from a logic error in the NXP NFC firmware that could allow for an insecure firmware update. This could result in the...

6.7CVSS5.8AI score0.00139EPSS
SaveExploits0References4
Kitploit
Kitploit
added 2021/01/20 11:30 a.m.877 views

MobileHackersWeapons - Mobile Hacker's Weapons / A Collection Of Cool Tools Used By Mobile Hackers

A collection of cool tools used by Mobile hackers. Happy hacking , Happy bug-hunting Weapons OS | Type | Name | Description ---|---|---|--- All | Analysis | RMS-Runtime-Mobile-Security | Runtime Mobile Security RMS - is a powerful web interface that helps you to manipulate Android and iOS Apps at...

7.8AI score
SaveExploits0References39
CNNVD
CNNVD
added 2021/01/07 12:0 a.m.10 views

Fido U2f Security Breach

Fido U2f is an authentication protocol from the Fido organization based on standard public key cryptography techniques primarily used for smart card authentication. A security vulnerability exists in Fido U2f that could allow an attacker to extract the ECDSA private key after extensive physical...

4.2CVSS6.1AI score0.00196EPSS
SaveExploits1References3
BDU FSTEC
BDU FSTEC
added 2020/12/23 12:0 a.m.11 views

The vulnerability of the llcp_sock_create function in the net/nfc/llcp_sock.c module of the AF_NFC module in the Linux operating system, related to default access rights settings, allows a attacker to compromise data integrity.

The vulnerability of the llcpsockcreate function in the net/nfc/llcpsock.c module of the AFNFC module in the Linux operating system is related to a lack of mechanisms for standard permissions. Exploiting this vulnerability could allow an attacker to compromise data integrity...

3.3CVSS6.6AI score0.00567EPSS
SaveExploits0References42Affected Software5
BDU FSTEC
BDU FSTEC
added 2020/12/23 12:0 a.m.6 views

The vulnerability in the net/nfc/rawsock.c function of the Linux operating system allows a attacker to compromise the integrity of protected information.

The vulnerability in the net/nfc/rawsock.c function of the Linux operating system is related to the lack of checking for CAPNETRAW when creating a NFC socket. Exploiting this vulnerability can allow an attacker to compromise the integrity of the protected information...

5.5CVSS6.5AI score0.00399EPSS
SaveExploits0References23Affected Software7
Veracode
Veracode
added 2020/12/21 8:37 p.m.19 views

Arbitrary Code Execution

chromium is vulnerable to arbitrary code execution. The vulnerability exists through a use after free in NFC that allows a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page...

8.8CVSS4.5AI score0.01372EPSS
SaveExploits0References11Affected Software1
OSV
OSV
added 2020/12/15 5:15 p.m.4 views

CVE-2020-27046

In nfcncifproceeaction of nfcncif.cc, there is a possible out of bounds read due to a missing bounds check. This could lead to local information disclosure with System execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-11Android ID:...

4.4CVSS6AI score0.00156EPSS
SaveExploits0References1
NVD
NVD
added 2020/12/15 5:15 p.m.23 views

CVE-2020-27046

In nfcncifproceeaction of nfcncif.cc, there is a possible out of bounds read due to a missing bounds check. This could lead to local information disclosure with System execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-11Android ID:...

4.4CVSS5.1AI score0.00156EPSS
SaveExploits0References1
NVD
NVD
added 2020/12/15 5:15 p.m.24 views

CVE-2020-27040

In phNxpNciHalcoreinitialized of phNxpNciHal.cc, there is a possible out of bounds read due to a missing bounds check. This could lead to local information disclosure in the NFC server with System execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersion...

4.4CVSS5.1AI score0.00149EPSS
SaveExploits0References1
OSV
OSV
added 2020/12/15 5:15 p.m.7 views

CVE-2020-27036

In phNxpNciHalsendextcmd of phNxpNciHalext.cc, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege in the NFC server with System execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersion...

6.7CVSS6.5AI score0.00144EPSS
SaveExploits0References1
NVD
NVD
added 2020/12/15 5:15 p.m.28 views

CVE-2020-27036

In phNxpNciHalsendextcmd of phNxpNciHalext.cc, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege in the NFC server with System execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersion...

6.7CVSS7.3AI score0.00144EPSS
SaveExploits0References1
NVD
NVD
added 2020/12/15 5:15 p.m.20 views

CVE-2020-27037

In phNxpNciHalcoreinitialized of phNxpNciHal.cc, there is a possible out of bounds read due to a missing bounds check. This could lead to local information disclosure in the NFC server with System execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersion...

4.4CVSS5.1AI score0.00149EPSS
SaveExploits0References1
Rows per page
Query Builder