In nfadmchecksetconfig of nfadmmain.cc, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.
{
"vanir_signatures": [
{
"digest": {
"length": 4768.0,
"function_hash": "156941489692749725818092720589879950799"
},
"id": "ASB-A-221216105-bc0806d7",
"deprecated": false,
"signature_version": "v1",
"signature_type": "Function",
"source": "https://android.googlesource.com/platform/system/nfc/+/88c5c267e889699c71412022e3fcb03d20100e99",
"target": {
"function": "nfa_dm_check_set_config",
"file": "src/nfa/dm/nfa_dm_main.cc"
}
},
{
"digest": {
"threshold": 0.9,
"line_hashes": [
"228215901904264799496795337735341102715",
"17669025694038952674912891942475166015",
"20529047371298399982272447971778601430",
"99008648622485997403478422415536627075",
"286591029690804517788545255104721789690",
"232131448939947439337969491545383863719",
"304498648637370120616598659088557177407"
]
},
"id": "ASB-A-221216105-e5cdc70a",
"deprecated": false,
"signature_version": "v1",
"signature_type": "Line",
"source": "https://android.googlesource.com/platform/system/nfc/+/88c5c267e889699c71412022e3fcb03d20100e99",
"target": {
"file": "src/nfa/dm/nfa_dm_main.cc"
}
}
],
"fixes": [
"https://android.googlesource.com/platform/system/nfc/+/88c5c267e889699c71412022e3fcb03d20100e99"
],
"types": [
"EoP"
],
"spl": "2022-06-01",
"severity": "High"
}
{
"vanir_signatures": [
{
"digest": {
"threshold": 0.9,
"line_hashes": [
"228215901904264799496795337735341102715",
"17669025694038952674912891942475166015",
"20529047371298399982272447971778601430",
"99008648622485997403478422415536627075",
"286591029690804517788545255104721789690",
"232131448939947439337969491545383863719",
"304498648637370120616598659088557177407"
]
},
"id": "ASB-A-221216105-b2661fed",
"deprecated": false,
"signature_version": "v1",
"signature_type": "Line",
"source": "https://android.googlesource.com/platform/system/nfc/+/88c5c267e889699c71412022e3fcb03d20100e99",
"target": {
"file": "src/nfa/dm/nfa_dm_main.cc"
}
},
{
"digest": {
"length": 4768.0,
"function_hash": "156941489692749725818092720589879950799"
},
"id": "ASB-A-221216105-ccd6f291",
"deprecated": false,
"signature_version": "v1",
"signature_type": "Function",
"source": "https://android.googlesource.com/platform/system/nfc/+/88c5c267e889699c71412022e3fcb03d20100e99",
"target": {
"function": "nfa_dm_check_set_config",
"file": "src/nfa/dm/nfa_dm_main.cc"
}
}
],
"fixes": [
"https://android.googlesource.com/platform/system/nfc/+/88c5c267e889699c71412022e3fcb03d20100e99"
],
"types": [
"EoP"
],
"spl": "2022-06-01",
"severity": "High"
}
{
"vanir_signatures": [
{
"digest": {
"threshold": 0.9,
"line_hashes": [
"228215901904264799496795337735341102715",
"17669025694038952674912891942475166015",
"20529047371298399982272447971778601430",
"99008648622485997403478422415536627075",
"286591029690804517788545255104721789690",
"232131448939947439337969491545383863719",
"304498648637370120616598659088557177407"
]
},
"id": "ASB-A-221216105-355719a3",
"deprecated": false,
"signature_version": "v1",
"signature_type": "Line",
"source": "https://android.googlesource.com/platform/system/nfc/+/88c5c267e889699c71412022e3fcb03d20100e99",
"target": {
"file": "src/nfa/dm/nfa_dm_main.cc"
}
},
{
"digest": {
"length": 4768.0,
"function_hash": "156941489692749725818092720589879950799"
},
"id": "ASB-A-221216105-3a92e5a4",
"deprecated": false,
"signature_version": "v1",
"signature_type": "Function",
"source": "https://android.googlesource.com/platform/system/nfc/+/88c5c267e889699c71412022e3fcb03d20100e99",
"target": {
"function": "nfa_dm_check_set_config",
"file": "src/nfa/dm/nfa_dm_main.cc"
}
}
],
"fixes": [
"https://android.googlesource.com/platform/system/nfc/+/88c5c267e889699c71412022e3fcb03d20100e99"
],
"types": [
"EoP"
],
"spl": "2022-06-01",
"severity": "High"
}
{
"vanir_signatures": [
{
"digest": {
"threshold": 0.9,
"line_hashes": [
"228215901904264799496795337735341102715",
"17669025694038952674912891942475166015",
"20529047371298399982272447971778601430",
"99008648622485997403478422415536627075",
"286591029690804517788545255104721789690",
"232131448939947439337969491545383863719",
"304498648637370120616598659088557177407"
]
},
"id": "ASB-A-221216105-5e55076e",
"deprecated": false,
"signature_version": "v1",
"signature_type": "Line",
"source": "https://android.googlesource.com/platform/system/nfc/+/88c5c267e889699c71412022e3fcb03d20100e99",
"target": {
"file": "src/nfa/dm/nfa_dm_main.cc"
}
},
{
"digest": {
"length": 4768.0,
"function_hash": "156941489692749725818092720589879950799"
},
"id": "ASB-A-221216105-ef4dd6bd",
"deprecated": false,
"signature_version": "v1",
"signature_type": "Function",
"source": "https://android.googlesource.com/platform/system/nfc/+/88c5c267e889699c71412022e3fcb03d20100e99",
"target": {
"function": "nfa_dm_check_set_config",
"file": "src/nfa/dm/nfa_dm_main.cc"
}
}
],
"fixes": [
"https://android.googlesource.com/platform/system/nfc/+/88c5c267e889699c71412022e3fcb03d20100e99"
],
"types": [
"EoP"
],
"spl": "2022-06-01",
"severity": "High"
}
{
"vanir_signatures": [
{
"digest": {
"length": 4768.0,
"function_hash": "156941489692749725818092720589879950799"
},
"id": "ASB-A-221216105-36f0cca7",
"deprecated": false,
"signature_version": "v1",
"signature_type": "Function",
"source": "https://android.googlesource.com/platform/system/nfc/+/88c5c267e889699c71412022e3fcb03d20100e99",
"target": {
"function": "nfa_dm_check_set_config",
"file": "src/nfa/dm/nfa_dm_main.cc"
}
},
{
"digest": {
"threshold": 0.9,
"line_hashes": [
"228215901904264799496795337735341102715",
"17669025694038952674912891942475166015",
"20529047371298399982272447971778601430",
"99008648622485997403478422415536627075",
"286591029690804517788545255104721789690",
"232131448939947439337969491545383863719",
"304498648637370120616598659088557177407"
]
},
"id": "ASB-A-221216105-bc32815b",
"deprecated": false,
"signature_version": "v1",
"signature_type": "Line",
"source": "https://android.googlesource.com/platform/system/nfc/+/88c5c267e889699c71412022e3fcb03d20100e99",
"target": {
"file": "src/nfa/dm/nfa_dm_main.cc"
}
}
],
"fixes": [
"https://android.googlesource.com/platform/system/nfc/+/88c5c267e889699c71412022e3fcb03d20100e99"
],
"types": [
"EoP"
],
"spl": "2022-06-01",
"severity": "High"
}