3257 matches found
CVE-2021-25525: Improper Check or Handling of Exceptional Conditions
Improper check or handling of exception conditions vulnerability in Samsung Pay US only prior to version 4.0.65 allows attacker to use NFC without user recognition...
PT-2021-16715
Name of the Vulnerable Software and Affected Versions Samsung Pay versions prior to 4.0.65 Description The issue is related to an improper check or handling of exception conditions, which allows an attacker to use NFC without user recognition. Recommendations For versions prior to 4.0.65, update ...
Huawei HarmonyOS Wearables Heap Buffer Overflow Vulnerability
Huawei HarmonyOS Wearables, an electronic watch from Huawei of China Huawei, is vulnerable to a heap buffer overflow vulnerability in the Huawei HarmonyOS Wearables NFC module. An attacker can exploit this vulnerability to cause a memory out-of-bounds...
Google Android 缓冲区错误漏洞
Google Android is a Linux-based open source operating system from Google, Inc. A buffer overflow vulnerability exists in Google Android, which can be exploited by attackers to cause the disclosure of NFC local information that requires system execution privileges...
ASB-A-189942532
In NfcTag::discoverTechnologies activation of NfcTag.cpp, there is a possible out of bounds write due to an incorrect bounds check. This could lead to remote escalation of privilege with no additionalSystem execution privileges needed. User interaction is not needed for exploitation...
Ubuntu 20.04 LTS : Linux kernel (OEM) vulnerabilities (USN-5165-1)
The remote Ubuntu 20.04 LTS host has a package installed that is affected by multiple vulnerabilities as referenced in the USN-5165-1 advisory. It was discovered that the NFC subsystem in the Linux kernel contained a use-after-free vulnerability in its NFC Controller Interface NCI implementation....
PUB-A-181346545
In nfaHciCallback of HciEventManager.cpp, there is a possible out of bounds read due to a missing bounds check. This could lead to local information disclosure over NFC with System execution privileges needed. User interaction is not needed for exploitation...
USN-5165-1: Linux kernel (OEM) vulnerabilities
It was discovered that the NFC subsystem in the Linux kernel contained a use-after-free vulnerability in its NFC Controller Interface NCI implementation. A local attacker could possibly use this to cause a denial of service system crash or execute arbitrary code. CVE-2021-3760 It was discovered...
GSD-2021-1002313 NFC: reorder the logic in nfc_{un,}register_device
NFC: reorder the logic in nfcun,registerdevice This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.15.5 by commit...
UVI-2021-1002313 NFC: reorder the logic in nfc_{un,}register_device
NFC: reorder the logic in nfcun,registerdevice This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.15.5 by commit...
UVI-2021-1002312 NFC: add NCI_UNREG flag to eliminate the race
NFC: add NCIUNREG flag to eliminate the race This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.15.5 by commit...
GSD-2021-1002312 NFC: add NCI_UNREG flag to eliminate the race
NFC: add NCIUNREG flag to eliminate the race This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.15.5 by commit...
GSD-2021-1002281 NFC: reorder the logic in nfc_{un,}register_device
NFC: reorder the logic in nfcun,registerdevice This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.10.82 by commit...
UVI-2021-1002281 NFC: reorder the logic in nfc_{un,}register_device
NFC: reorder the logic in nfcun,registerdevice This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.10.82 by commit...
GSD-2021-1002280 NFC: add NCI_UNREG flag to eliminate the race
NFC: add NCIUNREG flag to eliminate the race This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.10.82 by commit...
UVI-2021-1002280 NFC: add NCI_UNREG flag to eliminate the race
NFC: add NCIUNREG flag to eliminate the race This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.10.82 by commit...
GSD-2021-1002259 NFC: reorder the logic in nfc_{un,}register_device
NFC: reorder the logic in nfcun,registerdevice This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.4.162 by commit...
UVI-2021-1002259 NFC: reorder the logic in nfc_{un,}register_device
NFC: reorder the logic in nfcun,registerdevice This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.4.162 by commit...
GSD-2021-1002247 NFC: reorder the logic in nfc_{un,}register_device
NFC: reorder the logic in nfcun,registerdevice This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v4.19.218 by commit...
UVI-2021-1002247 NFC: reorder the logic in nfc_{un,}register_device
NFC: reorder the logic in nfcun,registerdevice This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v4.19.218 by commit...