CVE-2022-40903

Aiphone GT-DMB-N 3-in-1 Video Entrance Station with NFC Reader 1.0.3 does not mitigate against repeated failed access attempts, which allows an attacker to gain administrative privileges...

CVE-2022-39847

Use after free vulnerability in setnftpid and signalhandler function of NFC driver prior to SMR Oct-2022 Release 1 allows attackers to perform malicious actions...

CVE-2022-39847

Use after free vulnerability in setnftpid and signalhandler function of NFC driver prior to SMR Oct-2022 Release 1 allows attackers to perform malicious actions...

Design/Logic Flaw

Use after free vulnerability in setnftpid and signalhandler function of NFC driver prior to SMR Oct-2022 Release 1 allows attackers to perform malicious actions...

CVE-2022-39847

Use after free vulnerability in setnftpid and signalhandler function of NFC driver prior to SMR Oct-2022 Release 1 allows attackers to perform malicious actions...

CVE-2022-39847

The CVE-2022-39847 entry concerns a use-after-free vulnerability in the NFC driver’s set_nft_pid and signal_handler functions on Samsung devices prior to the SMR Oct‑2022 Release 1. Affected component: NFC driver (Samsung Mobile). Root cause: use-after-free in specific NFC driver handlers, enabli...

CVE-2022-40363

A buffer overflow in the component nfcdeviceloadmifareuldata of Flipper Devices Inc., Flipper Zero before v0.65.2 allows attackers to cause a Denial of Service DoS via a crafted NFC file...

Buffer overflow

A buffer overflow in the component nfcdeviceloadmifareuldata of Flipper Devices Inc., Flipper Zero before v0.65.2 allows attackers to cause a Denial of Service DoS via a crafted NFC file...

CVE-2022-40363

A buffer overflow in the component nfcdeviceloadmifareuldata of Flipper Devices Inc., Flipper Zero before v0.65.2 allows attackers to cause a Denial of Service DoS via a crafted NFC file...

CVE-2022-40363

CVE-2022-40363 concerns a buffer overflow in the Flipper Zero firmware, specifically in the nfc_device_load_mifare_ul_data component. Affected versions are Flipper Zero prior to v0.65.2. The issue can allow a crafted NFC file to cause a Denial of Service. The root cause is a buffer overflow withi...

CVE-2022-40363

A buffer overflow in the component nfcdeviceloadmifareuldata of Flipper Devices Inc., Flipper Zero before v0.65.2 allows attackers to cause a Denial of Service DoS via a crafted NFC file...

PT-2022-25363 · Unknown · Flipper Zero

Name of the Vulnerable Software and Affected Versions: Flipper Zero versions prior to 0.65.2 Description: A buffer overflow in the nfc device load mifare ul data component allows attackers to cause a Denial of Service DoS via a crafted NFC file. Recommendations: For versions prior to 0.65.2, upda...

GSD-2022-1005757 nfc: pn533: Fix use-after-free bugs caused by pn532_cmd_timeout

nfc: pn533: Fix use-after-free bugs caused by pn532cmdtimeout This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.10.140 by commit...

GSD-2022-1005455 nfc: pn533: Fix use-after-free bugs caused by pn532_cmd_timeout

nfc: pn533: Fix use-after-free bugs caused by pn532cmdtimeout This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.15.64 by commit...

GSD-2022-1005057 nfc: pn533: Fix use-after-free bugs caused by pn532_cmd_timeout

nfc: pn533: Fix use-after-free bugs caused by pn532cmdtimeout This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.19.6 by commit...

Denial Of Service (DoS)

Linux kernel is vulnerable to denial of service. The vulnerability exists because of a sleep-in-atomic bug in /net/nfc/netlink.c that allows an attacker to crash the kernel by simulating a nfc device from user-space...

CVE-2022-39008

The NFC module has bundle serialization/deserialization vulnerabilities. Successful exploitation of this vulnerability may cause third-party apps to read and write files that are accessible only to system apps...

CVE-2022-39008

The NFC module has bundle serialization/deserialization vulnerabilities. Successful exploitation of this vulnerability may cause third-party apps to read and write files that are accessible only to system apps...

Deserialization of untrusted data

The NFC module has bundle serialization/deserialization vulnerabilities. Successful exploitation of this vulnerability may cause third-party apps to read and write files that are accessible only to system apps...

CVE-2022-39008

The NFC module has bundle serialization/deserialization vulnerabilities. Successful exploitation of this vulnerability may cause third-party apps to read and write files that are accessible only to system apps...