In nciprocrfmanagementntf of nci_hrcv.cc, there is a possible out of bounds read due to a missing bounds check. This could lead to remote information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation.
{
"spl": "2022-06-01",
"fixes": [
"https://android.googlesource.com/platform/system/nfc/+/1c6ab25b3d76c2ced764dc649bec6cf05aecd198"
],
"types": [
"ID"
],
"vanir_signatures": [
{
"signature_type": "Line",
"signature_version": "v1",
"deprecated": false,
"digest": {
"line_hashes": [
"34975717492042135901446728523998989999",
"90413502481760613099594574736873831887",
"320523821704544772715334960455628891026"
],
"threshold": 0.9
},
"source": "https://android.googlesource.com/platform/system/nfc/+/1c6ab25b3d76c2ced764dc649bec6cf05aecd198",
"target": {
"file": "src/nfc/nfc/nfc_ncif.cc"
},
"id": "ASB-A-221856662-6d23832a"
},
{
"signature_type": "Function",
"signature_version": "v1",
"deprecated": false,
"digest": {
"length": 1027.0,
"function_hash": "42002811067232942361744446294019484761"
},
"source": "https://android.googlesource.com/platform/system/nfc/+/1c6ab25b3d76c2ced764dc649bec6cf05aecd198",
"target": {
"function": "nfc_ncif_proc_ee_discover_req",
"file": "src/nfc/nfc/nfc_ncif.cc"
},
"id": "ASB-A-221856662-98a39881"
}
],
"severity": "High"
}
{
"spl": "2022-06-01",
"fixes": [
"https://android.googlesource.com/platform/system/nfc/+/1c6ab25b3d76c2ced764dc649bec6cf05aecd198"
],
"types": [
"ID"
],
"vanir_signatures": [
{
"signature_type": "Function",
"signature_version": "v1",
"deprecated": false,
"digest": {
"length": 1027.0,
"function_hash": "42002811067232942361744446294019484761"
},
"source": "https://android.googlesource.com/platform/system/nfc/+/1c6ab25b3d76c2ced764dc649bec6cf05aecd198",
"target": {
"function": "nfc_ncif_proc_ee_discover_req",
"file": "src/nfc/nfc/nfc_ncif.cc"
},
"id": "ASB-A-221856662-028b263c"
},
{
"signature_type": "Line",
"signature_version": "v1",
"deprecated": false,
"digest": {
"line_hashes": [
"34975717492042135901446728523998989999",
"90413502481760613099594574736873831887",
"320523821704544772715334960455628891026"
],
"threshold": 0.9
},
"source": "https://android.googlesource.com/platform/system/nfc/+/1c6ab25b3d76c2ced764dc649bec6cf05aecd198",
"target": {
"file": "src/nfc/nfc/nfc_ncif.cc"
},
"id": "ASB-A-221856662-ac37e2ef"
}
],
"severity": "High"
}
{
"spl": "2022-06-01",
"fixes": [
"https://android.googlesource.com/platform/system/nfc/+/1c6ab25b3d76c2ced764dc649bec6cf05aecd198"
],
"types": [
"ID"
],
"vanir_signatures": [
{
"signature_type": "Function",
"signature_version": "v1",
"deprecated": false,
"digest": {
"length": 1027.0,
"function_hash": "42002811067232942361744446294019484761"
},
"source": "https://android.googlesource.com/platform/system/nfc/+/1c6ab25b3d76c2ced764dc649bec6cf05aecd198",
"target": {
"function": "nfc_ncif_proc_ee_discover_req",
"file": "src/nfc/nfc/nfc_ncif.cc"
},
"id": "ASB-A-221856662-30dbb4ef"
},
{
"signature_type": "Line",
"signature_version": "v1",
"deprecated": false,
"digest": {
"line_hashes": [
"34975717492042135901446728523998989999",
"90413502481760613099594574736873831887",
"320523821704544772715334960455628891026"
],
"threshold": 0.9
},
"source": "https://android.googlesource.com/platform/system/nfc/+/1c6ab25b3d76c2ced764dc649bec6cf05aecd198",
"target": {
"file": "src/nfc/nfc/nfc_ncif.cc"
},
"id": "ASB-A-221856662-b6f4718d"
}
],
"severity": "High"
}
{
"spl": "2022-06-01",
"fixes": [
"https://android.googlesource.com/platform/system/nfc/+/1c6ab25b3d76c2ced764dc649bec6cf05aecd198"
],
"types": [
"ID"
],
"vanir_signatures": [
{
"signature_type": "Function",
"signature_version": "v1",
"deprecated": false,
"digest": {
"length": 1027.0,
"function_hash": "42002811067232942361744446294019484761"
},
"source": "https://android.googlesource.com/platform/system/nfc/+/1c6ab25b3d76c2ced764dc649bec6cf05aecd198",
"target": {
"function": "nfc_ncif_proc_ee_discover_req",
"file": "src/nfc/nfc/nfc_ncif.cc"
},
"id": "ASB-A-221856662-6064fd98"
},
{
"signature_type": "Line",
"signature_version": "v1",
"deprecated": false,
"digest": {
"line_hashes": [
"34975717492042135901446728523998989999",
"90413502481760613099594574736873831887",
"320523821704544772715334960455628891026"
],
"threshold": 0.9
},
"source": "https://android.googlesource.com/platform/system/nfc/+/1c6ab25b3d76c2ced764dc649bec6cf05aecd198",
"target": {
"file": "src/nfc/nfc/nfc_ncif.cc"
},
"id": "ASB-A-221856662-795c2ca3"
}
],
"severity": "High"
}
{
"spl": "2022-06-01",
"fixes": [
"https://android.googlesource.com/platform/system/nfc/+/1c6ab25b3d76c2ced764dc649bec6cf05aecd198"
],
"types": [
"ID"
],
"vanir_signatures": [
{
"signature_type": "Line",
"signature_version": "v1",
"deprecated": false,
"digest": {
"line_hashes": [
"34975717492042135901446728523998989999",
"90413502481760613099594574736873831887",
"320523821704544772715334960455628891026"
],
"threshold": 0.9
},
"source": "https://android.googlesource.com/platform/system/nfc/+/1c6ab25b3d76c2ced764dc649bec6cf05aecd198",
"target": {
"file": "src/nfc/nfc/nfc_ncif.cc"
},
"id": "ASB-A-221856662-3b25cf81"
},
{
"signature_type": "Function",
"signature_version": "v1",
"deprecated": false,
"digest": {
"length": 1027.0,
"function_hash": "42002811067232942361744446294019484761"
},
"source": "https://android.googlesource.com/platform/system/nfc/+/1c6ab25b3d76c2ced764dc649bec6cf05aecd198",
"target": {
"function": "nfc_ncif_proc_ee_discover_req",
"file": "src/nfc/nfc/nfc_ncif.cc"
},
"id": "ASB-A-221856662-70d24653"
}
],
"severity": "High"
}