22 matches found
CVE-2023-20945: Out-of-bounds Write
In phNciNfcMfCreateXchgDataHdr of phNxpExtnsMifareStd.cpp, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.Product:...
CVE-2023-20945
In phNciNfcMfCreateXchgDataHdr of phNxpExtnsMifareStd.cpp, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.Product:...
CVE-2023-20905
CVE-2023-20905 affects Android 10 via Mfc_Transceive in phNxpExtns_MifareStd.cpp, with a possible out-of-bounds write due to a missing bounds check. The impact is local escalation of privilege with high confidentiality/integrity/availability concerns, and no user interaction is required. Exploita...
CVE-2023-20905: Out-of-bounds Write
In MfcTransceive of phNxpExtnsMifareStd.cpp, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions:...
CVE-2022-20123
In phNciNfcRecvMfResp of phNxpExtnsMifareStd.cpp, there is a possible out of bounds read due to a missing bounds check. This could lead to remote information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions:...
Out-of-bounds
In phNciNfcRecvMfResp of phNxpExtnsMifareStd.cpp, there is a possible out of bounds read due to a missing bounds check. This could lead to remote information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions:...
CVE-2022-20123: Out-of-bounds Read
In phNciNfcRecvMfResp of phNxpExtnsMifareStd.cpp, there is a possible out of bounds read due to a missing bounds check. This could lead to remote information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions:...
ASB-A-221852424
In phNciNfcRecvMfResp of phNxpExtnsMifareStd.cpp, there is a possible out of bounds read due to a missing bounds check. This could lead to remote information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation...
CVE-2021-0596
In phNciNfcRecvMfResp of phNxpExtnsMifareStd.cpp, there is a possible out of bounds read due to a missing bounds check. This could lead to remote information disclosure over NFC with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersion...
CVE-2021-0596
CVE-2021-0596 is an out-of-bounds read in the NFC path (phNciNfc_RecvMfResp in phNxpExtns_MifareStd.cpp) caused by a missing bounds check. This allows remote information disclosure over NFC with no extra execution privileges and no user interaction. Affected are Android versions 8.1, 9, 10, and 1...
CVE-2021-0596: Out-of-bounds Read
In phNciNfcRecvMfResp of phNxpExtnsMifareStd.cpp, there is a possible out of bounds read due to a missing bounds check. This could lead to remote information disclosure over NFC with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersion...
CVE-2020-0216: Integer Overflow or Wraparound
In phNciNfcRecvMfResp of phNxpExtnsMifareStd.cpp, there is a possible out of bounds write due to an integer overflow. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is needed for exploitation.Product: AndroidVersions:...
CVE-2019-2135
In MfcTransceive of phNxpExtnsMifareStd.cpp, there is a possible out of bounds read due to a missing bounds check. This could lead to local information disclosure with no additional execution privileges needed. User interaction is needed for exploitation. Product: Android. Versions: Android-7.0...
CVE-2019-2134
In phFriNfcExtnsTransceive of phNxpExtnsMifareStd.cpp, there is a possible out of bounds write due to an integer overflow. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is needed for exploitation. Product: Android. Versions:...
Heap overflow
In MfcTransceive of phNxpExtnsMifareStd.cpp, there is a possible out of bounds write due to a heap buffer overflow. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is needed for exploitation. Product: Android. Versions: Android-7.0...
CVE-2019-2135
CVE-2019-2135 affects Android systems and is due to a missing bounds check in Mfc_Transceive of phNxpExtns_MifareStd.cpp, causing an out-of-bounds read. This could lead to local information disclosure with no extra execution privileges required; exploitation requires user interaction. Affected An...
CVE-2019-2135
In MfcTransceive of phNxpExtnsMifareStd.cpp, there is a possible out of bounds read due to a missing bounds check. This could lead to local information disclosure with no additional execution privileges needed. User interaction is needed for exploitation. Product: Android. Versions: Android-7.0...
CVE-2019-2134
CVE-2019-2134 affects Android due to an out-of-bounds write in phFriNfc_ExtnsTransceive (phNxpExtns_MifareStd.cpp) caused by integer overflow. Impact: local privilege escalation with HIGH confidentiality/integrity/availability implications; exploitation requires user interaction and local access....
CVE-2019-2133
CVE-2019-2133 affects Android and is rooted in the Mfc_Transceive path of phNxpExtns_MifareStd.cpp, where a heap buffer overflow can cause an out‑of‑bounds write. This vulnerability could enable local elevation of privilege with no extra execution privileges, with user interaction required to exp...
CVE-2019-2135: Out-of-bounds Read
In MfcTransceive of phNxpExtnsMifareStd.cpp, there is a possible out of bounds read due to a missing bounds check. This could lead to local information disclosure with no additional execution privileges needed. User interaction is needed for exploitation. Product: Android. Versions: Android-7.0...