2 matches found
CVE-2022-50656 nfc: pn533: Clear nfc_target before being used
In the Linux kernel, the following vulnerability has been resolved: nfc: pn533: Clear nfctarget before being used Fix a slab-out-of-bounds read that occurs in nlaput called from nfcgenlsendtarget when target-sensbreslen, which is duplicated from an nfctarget in pn533, is too large as the nfctarge...
CVE-2022-50656
CVE-2022-50656 : In the Linux kernel, a slab-out-of-bounds read can occur in the NFC pn533 path due to an uninitialized nfc_target being used in nla_put() via nfc_genl_send_target(). The underlying issue is that target->sensb_res_len is copied from an nfc_target and can retain garbage values, ...