CVE-2022-50656

CVE-2022-50656 : In the Linux kernel, a slab-out-of-bounds read can occur in the NFC pn533 path due to an uninitialized nfc_target being used in nla_put() via nfc_genl_send_target(). The underlying issue is that target->sensb_res_len is copied from an nfc_target and can retain garbage values, ...

PT-2023-33701 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v6.0.16 Description: The issue is related to the pn533 NFC component, where the nfc target is not properly cleared before being used. This could potentially lead to security vulnerabilities, although the actual...

PT-2022-33315 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v5.19.6 Description: The issue is related to use-after-free bugs caused by pn532 cmd timeout in the pn533 NFC component. The actual impact and attack plausibility have not yet been proven. Recommendations: For...