PT-2019-11171

Name of the Vulnerable Software and Affected Versions: Android versions 7.0 through 9 Description: The issue is related to an incorrect bounds check in the llcp dlc proc i pdu function of llcp dlc.cc, which could lead to a possible out of bounds read. This may result in local information disclosu...

Out-of-bounds

In nfcllcpbuildsdreqtlv of llcpcommands.c, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Product: Android. Versions: Android kernel...

CVE-2018-9518

In nfcllcpbuildsdreqtlv of llcpcommands.c, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Product: Android. Versions: Android kernel...

CVE-2018-9518

In nfcllcpbuildsdreqtlv of llcpcommands.c, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Product: Android. Versions: Android kernel...

CVE-2018-9558

In rwt2thandletlvdetect of rwt2tndef.cc, there is a possible out-of-bounds write due to a missing bounds check. This could lead to local escalation of privilege in the NFC kernel with no additional execution privileges needed. User interaction is needed for exploitation. Product: Android. Version...

CVE-2018-9558

In rwt2thandletlvdetect of rwt2tndef.cc, there is a possible out-of-bounds write due to a missing bounds check. This could lead to local escalation of privilege in the NFC kernel with no additional execution privileges needed. User interaction is needed for exploitation. Product: Android. Version...

Out-of-bounds

In rwt2thandletlvdetect of rwt2tndef.cc, there is a possible out-of-bounds write due to a missing bounds check. This could lead to local escalation of privilege in the NFC kernel with no additional execution privileges needed. User interaction is needed for exploitation. Product: Android. Version...

CVE-2018-9558

In rwt2thandletlvdetect of rwt2tndef.cc, there is a possible out-of-bounds write due to a missing bounds check. This could lead to local escalation of privilege in the NFC kernel with no additional execution privileges needed. User interaction is needed for exploitation. Product: Android. Version...

CVE-2018-9558

In rwt2thandletlvdetect of rwt2tndef.cc, there is a possible out-of-bounds write due to a missing bounds check. This could lead to local escalation of privilege in the NFC kernel with no additional execution privileges needed. User interaction is needed for exploitation. Product: Android. Version...

CVE-2018-9558

CVE-2018-9558 describes an out-of-bounds write in the NFC kernel due to a missing bounds check in rw_t2t_handle_tlv_detect (rw_t2t_ndef.cc). This could enable local elevation of privilege on Android devices without requiring prior privileges, with user interaction not strictly required for exploi...

PT-2018-19049

Name of the Vulnerable Software and Affected Versions Android versions 7.0 through 9 Description The issue is related to a possible out-of-bounds write in the NFC kernel due to a missing bounds check in the rw t2t handle tlv detect function of rw t2t ndef.cc. This could lead to local escalation o...

CVE-2018-9558: Out-of-bounds Write

In rwt2thandletlvdetect of rwt2tndef.cc, there is a possible out-of-bounds write due to a missing bounds check. This could lead to local escalation of privilege in the NFC kernel with no additional execution privileges needed. User interaction is needed for exploitation. Product: Android. Version...

PT-2018-19023

Name of the Vulnerable Software and Affected Versions Android kernel Description The issue is related to a missing bounds check in the nfc llcp build sdreq tlv function of llcp commands.c, which could lead to a possible out of bounds write. This could result in local escalation of privilege,...

CVE-2018-9518

In nfcllcpbuildsdreqtlv of llcpcommands.c, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Product: Android. Versions: Android kernel...

CVE-2018-7773

The vulnerability exists within processing of nfcserver.php in Schneider Electric U.motion Builder software versions prior to v1.3.4. The underlying SQLite database query is subject to SQL injection on the sessionid input parameter...

Input validation

The Near Field Communication NFC module in Mate 9 Huawei mobile phones with the versions before MHA-L29B 8.0.0.366C567 has an information leak vulnerability due to insufficient validation on data transfer requests. When an affected mobile phone sends files to an attacker's mobile phone using the...

CVE-2018-7930

The Near Field Communication NFC module in Mate 9 Huawei mobile phones with the versions before MHA-L29B 8.0.0.366C567 has an information leak vulnerability due to insufficient validation on data transfer requests. When an affected mobile phone sends files to an attacker's mobile phone using the...

CVE-2018-7930

The Near Field Communication NFC module in Mate 9 Huawei mobile phones with the versions before MHA-L29B 8.0.0.366C567 has an information leak vulnerability due to insufficient validation on data transfer requests. When an affected mobile phone sends files to an attacker's mobile phone using the...

CVE-2018-7930

CVE-2018-7930 affects Huawei Mate 9 smartphones with the NFC module prior to MHA-L29B 8.0.0.366 (C567). The vulnerability arises from insufficient validation of data transfer requests in the NFC component, allowing an attacker to obtain arbitrary files from the user’s device when the user’s phone...

PT-2018-18330

Name of the Vulnerable Software and Affected Versions: Huawei Mate 9 versions prior to MHA-L29B 8.0.0.366C567 Description: The issue is related to an information leak due to insufficient validation on data transfer requests in the Near Field Communication NFC module. When an affected mobile phone...