In phNciNfcRecvMfResp of phNxpExtnsMifareStd.cpp, there is a possible out of bounds read due to a missing bounds check. This could lead to remote information disclosure over NFC with no additional execution privileges needed. User interaction is not needed for exploitation.
{
"severity": "High",
"spl": "2021-07-01",
"vanir_signatures": [
{
"signature_type": "Line",
"digest": {
"line_hashes": [
"2884847135485000758411603062137112485",
"211031454079573566250835353966381290903",
"168448207663940346394757902052089912696",
"169785102641856338326886928989804399309",
"173057411138899605570235583465545219128",
"52376486751754460832414206509296816762",
"11790136434654728879528561461751803502"
],
"threshold": 0.9
},
"id": "ASB-A-181346550-8d3615b1",
"signature_version": "v1",
"deprecated": false,
"source": "https://android.googlesource.com/platform/packages/apps/Nfc/+/9732971aeda19c42e35355bbfacd81ade884ebe9",
"target": {
"file": "nci/jni/extns/pn54x/src/mifare/phNxpExtns_MifareStd.c"
}
},
{
"signature_type": "Function",
"digest": {
"length": 2269.0,
"function_hash": "262160023557380663008511136770307698610"
},
"id": "ASB-A-181346550-dc3e02c2",
"signature_version": "v1",
"deprecated": false,
"source": "https://android.googlesource.com/platform/packages/apps/Nfc/+/9732971aeda19c42e35355bbfacd81ade884ebe9",
"target": {
"file": "nci/jni/extns/pn54x/src/mifare/phNxpExtns_MifareStd.c",
"function": "phNciNfc_RecvMfResp"
}
}
],
"types": [
"ID"
],
"fixes": [
"https://android.googlesource.com/platform/packages/apps/Nfc/+/9732971aeda19c42e35355bbfacd81ade884ebe9"
]
}{
"severity": "High",
"spl": "2021-07-01",
"vanir_signatures": [
{
"signature_type": "Function",
"digest": {
"length": 2276.0,
"function_hash": "72945400507771723778522666653419942626"
},
"id": "ASB-A-181346550-773fd7db",
"signature_version": "v1",
"deprecated": false,
"source": "https://android.googlesource.com/platform/packages/apps/Nfc/+/c39c851616f674edb8d9fa98010768eef3ba1913",
"target": {
"file": "nci/jni/extns/pn54x/src/mifare/phNxpExtns_MifareStd.cpp",
"function": "phNciNfc_RecvMfResp"
}
},
{
"signature_type": "Line",
"digest": {
"line_hashes": [
"285685263254089793825752808025112685745",
"105930852586253385270607355452609178681",
"305390062134799501162388530095834398612",
"168448207663940346394757902052089912696",
"205285000149594638731812375834924927748",
"52376486751754460832414206509296816762",
"11790136434654728879528561461751803502"
],
"threshold": 0.9
},
"id": "ASB-A-181346550-e7adecfc",
"match_only_versions": [
"9"
],
"source": "https://android.googlesource.com/platform/packages/apps/Nfc/+/c39c851616f674edb8d9fa98010768eef3ba1913",
"signature_version": "v1",
"target": {
"file": "nci/jni/extns/pn54x/src/mifare/phNxpExtns_MifareStd.cpp"
},
"deprecated": false
}
],
"types": [
"ID"
],
"fixes": [
"https://android.googlesource.com/platform/packages/apps/Nfc/+/c39c851616f674edb8d9fa98010768eef3ba1913"
]
}{
"severity": "High",
"spl": "2021-07-01",
"vanir_signatures": [
{
"signature_type": "Function",
"digest": {
"length": 2276.0,
"function_hash": "72945400507771723778522666653419942626"
},
"id": "ASB-A-181346550-2d8bb336",
"signature_version": "v1",
"deprecated": false,
"source": "https://android.googlesource.com/platform/packages/apps/Nfc/+/c39c851616f674edb8d9fa98010768eef3ba1913",
"target": {
"file": "nci/jni/extns/pn54x/src/mifare/phNxpExtns_MifareStd.cpp",
"function": "phNciNfc_RecvMfResp"
}
},
{
"signature_type": "Line",
"digest": {
"line_hashes": [
"285685263254089793825752808025112685745",
"105930852586253385270607355452609178681",
"305390062134799501162388530095834398612",
"168448207663940346394757902052089912696",
"205285000149594638731812375834924927748",
"52376486751754460832414206509296816762",
"11790136434654728879528561461751803502"
],
"threshold": 0.9
},
"id": "ASB-A-181346550-2f182af9",
"match_only_versions": [
"10"
],
"source": "https://android.googlesource.com/platform/packages/apps/Nfc/+/c39c851616f674edb8d9fa98010768eef3ba1913",
"signature_version": "v1",
"target": {
"file": "nci/jni/extns/pn54x/src/mifare/phNxpExtns_MifareStd.cpp"
},
"deprecated": false
}
],
"types": [
"ID"
],
"fixes": [
"https://android.googlesource.com/platform/packages/apps/Nfc/+/c39c851616f674edb8d9fa98010768eef3ba1913"
]
}{
"severity": "High",
"spl": "2021-07-01",
"vanir_signatures": [
{
"signature_type": "Function",
"digest": {
"length": 2276.0,
"function_hash": "72945400507771723778522666653419942626"
},
"id": "ASB-A-181346550-b0805140",
"signature_version": "v1",
"deprecated": false,
"source": "https://android.googlesource.com/platform/packages/apps/Nfc/+/c39c851616f674edb8d9fa98010768eef3ba1913",
"target": {
"file": "nci/jni/extns/pn54x/src/mifare/phNxpExtns_MifareStd.cpp",
"function": "phNciNfc_RecvMfResp"
}
},
{
"signature_type": "Line",
"digest": {
"line_hashes": [
"285685263254089793825752808025112685745",
"105930852586253385270607355452609178681",
"305390062134799501162388530095834398612",
"168448207663940346394757902052089912696",
"205285000149594638731812375834924927748",
"52376486751754460832414206509296816762",
"11790136434654728879528561461751803502"
],
"threshold": 0.9
},
"id": "ASB-A-181346550-d9b2325b",
"match_only_versions": [
"11"
],
"source": "https://android.googlesource.com/platform/packages/apps/Nfc/+/c39c851616f674edb8d9fa98010768eef3ba1913",
"signature_version": "v1",
"target": {
"file": "nci/jni/extns/pn54x/src/mifare/phNxpExtns_MifareStd.cpp"
},
"deprecated": false
}
],
"types": [
"ID"
],
"fixes": [
"https://android.googlesource.com/platform/packages/apps/Nfc/+/c39c851616f674edb8d9fa98010768eef3ba1913"
]
}