CVE-2022-40363

A buffer overflow in the component nfcdeviceloadmifareuldata of Flipper Devices Inc., Flipper Zero before v0.65.2 allows attackers to cause a Denial of Service DoS via a crafted NFC file...

CVE-2022-40363

A buffer overflow in the component nfcdeviceloadmifareuldata of Flipper Devices Inc., Flipper Zero before v0.65.2 allows attackers to cause a Denial of Service DoS via a crafted NFC file...

CVE-2022-40363

A buffer overflow in the component nfcdeviceloadmifareuldata of Flipper Devices Inc., Flipper Zero before v0.65.2 allows attackers to cause a Denial of Service DoS via a crafted NFC file...

CVE-2022-40363

CVE-2022-40363 concerns a buffer overflow in the Flipper Zero firmware, specifically in the nfc_device_load_mifare_ul_data component. Affected versions are Flipper Zero prior to v0.65.2. The issue can allow a crafted NFC file to cause a Denial of Service. The root cause is a buffer overflow withi...

PT-2022-25363 · Unknown · Flipper Zero

Name of the Vulnerable Software and Affected Versions: Flipper Zero versions prior to 0.65.2 Description: A buffer overflow in the nfc device load mifare ul data component allows attackers to cause a Denial of Service DoS via a crafted NFC file. Recommendations: For versions prior to 0.65.2, upda...

CVE-2022-40363: Out-of-bounds Write

A buffer overflow in the component nfcdeviceloadmifareuldata of Flipper Devices Inc., Flipper Zero before v0.65.2 allows attackers to cause a Denial of Service DoS via a crafted NFC file...

GSD-2022-1005757 nfc: pn533: Fix use-after-free bugs caused by pn532_cmd_timeout

nfc: pn533: Fix use-after-free bugs caused by pn532cmdtimeout This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.10.140 by commit...

GSD-2022-1005455 nfc: pn533: Fix use-after-free bugs caused by pn532_cmd_timeout

nfc: pn533: Fix use-after-free bugs caused by pn532cmdtimeout This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.15.64 by commit...

GSD-2022-1005057 nfc: pn533: Fix use-after-free bugs caused by pn532_cmd_timeout

nfc: pn533: Fix use-after-free bugs caused by pn532cmdtimeout This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.19.6 by commit...

Denial Of Service (DoS)

Linux kernel is vulnerable to denial of service. The vulnerability exists because of a sleep-in-atomic bug in /net/nfc/netlink.c that allows an attacker to crash the kernel by simulating a nfc device from user-space...

CVE-2022-39008

The NFC module has bundle serialization/deserialization vulnerabilities. Successful exploitation of this vulnerability may cause third-party apps to read and write files that are accessible only to system apps...

CVE-2022-39008

The NFC module has bundle serialization/deserialization vulnerabilities. Successful exploitation of this vulnerability may cause third-party apps to read and write files that are accessible only to system apps...

Deserialization of untrusted data

The NFC module has bundle serialization/deserialization vulnerabilities. Successful exploitation of this vulnerability may cause third-party apps to read and write files that are accessible only to system apps...

CVE-2022-39008

The NFC module has bundle serialization/deserialization vulnerabilities. Successful exploitation of this vulnerability may cause third-party apps to read and write files that are accessible only to system apps...

CVE-2022-39008

The NFC module has bundle serialization/deserialization vulnerabilities. Successful exploitation of this vulnerability may cause third-party apps to read and write files that are accessible only to system apps...

CVE-2022-39008

The CVE-2022-39008 entry concerns Huawei HarmonyOS NFC module deserialization weaknesses. The root cause is insecure bundle serialization/deserialization, enabling an attacker to cause third-party apps to read and write files that are normally restricted to system apps. Concrete details across co...

PT-2022-33315 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v5.19.6 Description: The issue is related to use-after-free bugs caused by pn532 cmd timeout in the pn533 NFC component. The actual impact and attack plausibility have not yet been proven. Recommendations: For...

PT-2022-24665

Name of the Vulnerable Software and Affected Versions No specific software or versions are mentioned. Description The NFC module has bundle serialization/deserialization vulnerabilities. Successful exploitation of this issue may cause third-party apps to read and write files that are accessible...

CVE-2022-39008: Deserialization of Untrusted Data

The NFC module has bundle serialization/deserialization vulnerabilities. Successful exploitation of this vulnerability may cause third-party apps to read and write files that are accessible only to system apps...

Relay Attack against Teslas

Nice work: Radio relay attacks are technically complicated to execute, but conceptually easy to understand: attackers simply extend the range of your existing key using what is essentially a high-tech walkie-talkie. One thief stands near you while youre in the grocery store, intercepting your key...