ASB-A-189942532

See a problem?

Import Source

https://storage.googleapis.com/android-osv/ASB-A-189942532.json

JSON Data

https://api.osv.dev/v1/vulns/ASB-A-189942532

Aliases

A-189942532
CVE-2021-0956

Published

2021-12-01T00:00:00Z

Modified

2026-04-29T15:10:00.007170Z

Summary

[none]

Details

In NfcTag::discoverTechnologies (activation) of NfcTag.cpp, there is a possible out of bounds write due to an incorrect bounds check. This could lead to remote escalation of privilege with no additionalSystem execution privileges needed. User interaction is not needed for exploitation.

References

https://source.android.com/security/bulletin/2021-12-01

Affected packages

Android / platform/packages/apps/Nfc

Package

Name: platform/packages/apps/Nfc

Affected ranges

Type: ECOSYSTEM
Events: Introduced

11:0

Fixed

11:2021-12-01

Affected versions

Other

Ecosystem specific

{
    "spl": "2021-12-01",
    "fixes": [
        "https://android.googlesource.com/platform/packages/apps/Nfc/+/7d90cc6e0556057571f9fde9785dd0658c1a3eb0"
    ],
    "types": [
        "EoP"
    ],
    "vanir_signatures": [
        {
            "signature_type": "Line",
            "signature_version": "v1",
            "deprecated": false,
            "digest": {
                "line_hashes": [
                    "148383999050039299697949776434268375082",
                    "15232978209917973695074134890878487282",
                    "56809383103612786793670931461113421183",
                    "255707818437162516059165103186273512609",
                    "30747700971641059955489031061072886726",
                    "319000633780742426535836983973396525321",
                    "320179138657375371631415970276618416767",
                    "139669197528390015241156794766235983555",
                    "50682557065575578825218165840665105411"
                ],
                "threshold": 0.9
            },
            "source": "https://android.googlesource.com/platform/packages/apps/Nfc/+/7d90cc6e0556057571f9fde9785dd0658c1a3eb0",
            "target": {
                "file": "nci/jni/NfcTag.cpp"
            },
            "id": "ASB-A-189942532-0cdbcd58"
        },
        {
            "signature_type": "Function",
            "signature_version": "v1",
            "deprecated": false,
            "digest": {
                "length": 4656.0,
                "function_hash": "47086027144169610795673628513659128031"
            },
            "source": "https://android.googlesource.com/platform/packages/apps/Nfc/+/7d90cc6e0556057571f9fde9785dd0658c1a3eb0",
            "target": {
                "function": "NfcTag::discoverTechnologies",
                "file": "nci/jni/NfcTag.cpp"
            },
            "id": "ASB-A-189942532-a06c7065"
        }
    ],
    "severity": "Critical"
}

Database specific

source

"https://storage.googleapis.com/android-osv/ASB-A-189942532.json"