In MfcTransceive of phNxpExtnsMifareStd.cpp, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.
{
"spl": "2023-01-01",
"fixes": [
"https://android.googlesource.com/platform/packages/apps/Nfc/+/f5f24d0ea2bcc33f18915c4c7369f803c45e53b0"
],
"types": [
"EoP"
],
"vanir_signatures": [
{
"match_only_versions": [
"10"
],
"signature_type": "Function",
"deprecated": false,
"digest": {
"length": 2934.0,
"function_hash": "491234445431674369959365845299383756"
},
"target": {
"function": "Mfc_Transceive",
"file": "nci/jni/extns/pn54x/src/mifare/phNxpExtns_MifareStd.cpp"
},
"id": "ASB-A-241387741-9c86bde8",
"source": "https://android.googlesource.com/platform/packages/apps/Nfc/+/f5f24d0ea2bcc33f18915c4c7369f803c45e53b0",
"signature_version": "v1"
},
{
"match_only_versions": [
"10"
],
"signature_type": "Line",
"deprecated": false,
"digest": {
"line_hashes": [
"321778718133220861691615052611595777015",
"10690049686860309665648263714545916169",
"255462703431065603926902241986586911324"
],
"threshold": 0.9
},
"target": {
"file": "nci/jni/extns/pn54x/src/mifare/phNxpExtns_MifareStd.cpp"
},
"id": "ASB-A-241387741-fe146e78",
"source": "https://android.googlesource.com/platform/packages/apps/Nfc/+/f5f24d0ea2bcc33f18915c4c7369f803c45e53b0",
"signature_version": "v1"
}
],
"severity": "High"
}