ASB-A-392699284

See a problem?
Import Source
https://storage.googleapis.com/android-osv/ASB-A-392699284.json
JSON Data
https://api.osv.dev/v1/vulns/ASB-A-392699284
Aliases
Published
2026-03-01T00:00:00Z
Modified
2026-03-18T15:53:40.234473Z
Summary
[none]
Details

In multiple functions of Nfc.h, there is a possible use after free due to a race condition. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.

References

Affected packages

Android
platform/hardware/st/nfc

Package

Name
platform/hardware/st/nfc

Affected ranges

Type
ECOSYSTEM
Events
Introduced
16-qpr2-next:0
Fixed
16-qpr2-next:2026-03-01

Affected versions

Other
16-qpr2-next

Ecosystem specific 

{
    "types": [
        "EoP"
    ],
    "spl": "2026-03-01",
    "vanir_signatures": [
        {
            "id": "ASB-A-392699284-06a18809",
            "digest": {
                "line_hashes": [
                    "79796661121573200220071744186753808563",
                    "260676127609979959147088514220091680245",
                    "4744720766236171762223566416631281136",
                    "42304224396174553837754489067332586913",
                    "9343727692609402455908070722508534348",
                    "230749089815527001769992850225045251020",
                    "155605154296272474772440429335550660540",
                    "329304408206514442431867128541929060943",
                    "73890880300246223251455988817715098332",
                    "66487333191656139465205971458159557855",
                    "61010415226422664149445310127818561685",
                    "29714651309249216046414313261437647815",
                    "211893118048992337490058969478773962607",
                    "46769676938508527565289698180796837430",
                    "11295222368027826195083741734620076701",
                    "264372954472183302800051110910507753281",
                    "68111199641441598955153103211415680898",
                    "97208042744731146783035866392819633054"
                ],
                "threshold": 0.9
            },
            "signature_type": "Line",
            "source": "https://android.googlesource.com/platform/hardware/st/nfc/+/fc619c3348188ff0020cdeb7d4c4728a0246fe1a",
            "deprecated": false,
            "signature_version": "v1",
            "target": {
                "file": "aidl/Nfc.h"
            }
        }
    ],
    "fixes": [
        "https://android.googlesource.com/platform/hardware/st/nfc/+/fc619c3348188ff0020cdeb7d4c4728a0246fe1a"
    ],
    "severity": "High"
}

Database specific

source 
"https://storage.googleapis.com/android-osv/ASB-A-392699284.json"
platform/hardware/st/nfc

Package

Name
platform/hardware/st/nfc

Affected ranges

Type
ECOSYSTEM
Events
Introduced
15:0
Fixed
15:2026-03-01

Affected versions

Other
15

Ecosystem specific 

{
    "types": [
        "EoP"
    ],
    "spl": "2026-03-01",
    "vanir_signatures": [
        {
            "id": "ASB-A-392699284-7989541f",
            "digest": {
                "line_hashes": [
                    "79796661121573200220071744186753808563",
                    "260676127609979959147088514220091680245",
                    "4744720766236171762223566416631281136",
                    "82587891364957260158538153064737268168",
                    "49371139033785992900520374946111813212",
                    "230749089815527001769992850225045251020",
                    "155605154296272474772440429335550660540",
                    "329304408206514442431867128541929060943",
                    "73890880300246223251455988817715098332",
                    "66487333191656139465205971458159557855",
                    "61010415226422664149445310127818561685",
                    "29714651309249216046414313261437647815",
                    "211893118048992337490058969478773962607",
                    "46769676938508527565289698180796837430",
                    "11295222368027826195083741734620076701",
                    "264372954472183302800051110910507753281",
                    "68111199641441598955153103211415680898",
                    "97208042744731146783035866392819633054"
                ],
                "threshold": 0.9
            },
            "signature_type": "Line",
            "source": "https://android.googlesource.com/platform/hardware/st/nfc/+/8473fbf70ec5b09eec8e05d3ade55358d1d02b12",
            "deprecated": false,
            "signature_version": "v1",
            "target": {
                "file": "aidl/Nfc.h"
            }
        }
    ],
    "fixes": [
        "https://android.googlesource.com/platform/hardware/st/nfc/+/8473fbf70ec5b09eec8e05d3ade55358d1d02b12"
    ],
    "severity": "High"
}

Database specific

source 
"https://storage.googleapis.com/android-osv/ASB-A-392699284.json"
platform/hardware/st/nfc

Package

Name
platform/hardware/st/nfc

Affected ranges

Type
ECOSYSTEM
Events
Introduced
16:0
Fixed
16:2026-03-01

Affected versions

Other
16

Ecosystem specific 

{
    "types": [
        "EoP"
    ],
    "spl": "2026-03-01",
    "vanir_signatures": [
        {
            "id": "ASB-A-392699284-ca5429e6",
            "digest": {
                "line_hashes": [
                    "79796661121573200220071744186753808563",
                    "260676127609979959147088514220091680245",
                    "4744720766236171762223566416631281136",
                    "42304224396174553837754489067332586913",
                    "9343727692609402455908070722508534348",
                    "230749089815527001769992850225045251020",
                    "155605154296272474772440429335550660540",
                    "329304408206514442431867128541929060943",
                    "73890880300246223251455988817715098332",
                    "66487333191656139465205971458159557855",
                    "61010415226422664149445310127818561685",
                    "29714651309249216046414313261437647815",
                    "211893118048992337490058969478773962607",
                    "46769676938508527565289698180796837430",
                    "11295222368027826195083741734620076701",
                    "264372954472183302800051110910507753281",
                    "68111199641441598955153103211415680898",
                    "97208042744731146783035866392819633054"
                ],
                "threshold": 0.9
            },
            "signature_type": "Line",
            "source": "https://android.googlesource.com/platform/hardware/st/nfc/+/33b3c128e0f480f6e421761b85c5f00289b62449",
            "deprecated": false,
            "signature_version": "v1",
            "target": {
                "file": "aidl/Nfc.h"
            }
        }
    ],
    "fixes": [
        "https://android.googlesource.com/platform/hardware/st/nfc/+/33b3c128e0f480f6e421761b85c5f00289b62449"
    ],
    "severity": "High"
}

Database specific

source 
"https://storage.googleapis.com/android-osv/ASB-A-392699284.json"
platform/hardware/st/nfc

Package

Name
platform/hardware/st/nfc

Affected ranges

Type
ECOSYSTEM
Events
Introduced
16-qpr2:0
Fixed
16-qpr2:2026-03-01

Affected versions

Other
16-qpr2

Ecosystem specific 

{
    "types": [
        "EoP"
    ],
    "spl": "2026-03-01",
    "vanir_signatures": [
        {
            "id": "ASB-A-392699284-944cd6ee",
            "digest": {
                "line_hashes": [
                    "79796661121573200220071744186753808563",
                    "260676127609979959147088514220091680245",
                    "4744720766236171762223566416631281136",
                    "42304224396174553837754489067332586913",
                    "9343727692609402455908070722508534348",
                    "230749089815527001769992850225045251020",
                    "155605154296272474772440429335550660540",
                    "329304408206514442431867128541929060943",
                    "73890880300246223251455988817715098332",
                    "66487333191656139465205971458159557855",
                    "61010415226422664149445310127818561685",
                    "29714651309249216046414313261437647815",
                    "211893118048992337490058969478773962607",
                    "46769676938508527565289698180796837430",
                    "11295222368027826195083741734620076701",
                    "264372954472183302800051110910507753281",
                    "68111199641441598955153103211415680898",
                    "97208042744731146783035866392819633054"
                ],
                "threshold": 0.9
            },
            "signature_type": "Line",
            "source": "https://android.googlesource.com/platform/hardware/st/nfc/+/446428a1e9c89be2074dcedb745c1b8f39b23235",
            "deprecated": false,
            "signature_version": "v1",
            "target": {
                "file": "aidl/Nfc.h"
            }
        }
    ],
    "fixes": [
        "https://android.googlesource.com/platform/hardware/st/nfc/+/446428a1e9c89be2074dcedb745c1b8f39b23235"
    ],
    "severity": "High"
}

Database specific

source 
"https://storage.googleapis.com/android-osv/ASB-A-392699284.json"
platform/hardware/st/nfc

Package

Name
platform/hardware/st/nfc

Affected ranges

Type
ECOSYSTEM
Events
Introduced
14:0
Fixed
14:2026-03-01

Affected versions

Other
14

Ecosystem specific 

{
    "types": [
        "EoP"
    ],
    "spl": "2026-03-01",
    "vanir_signatures": [
        {
            "id": "ASB-A-392699284-3bc8ab03",
            "digest": {
                "line_hashes": [
                    "79796661121573200220071744186753808563",
                    "260676127609979959147088514220091680245",
                    "4744720766236171762223566416631281136",
                    "82587891364957260158538153064737268168",
                    "49371139033785992900520374946111813212",
                    "230749089815527001769992850225045251020",
                    "155605154296272474772440429335550660540",
                    "329304408206514442431867128541929060943",
                    "73890880300246223251455988817715098332",
                    "66487333191656139465205971458159557855",
                    "61010415226422664149445310127818561685",
                    "29714651309249216046414313261437647815",
                    "211893118048992337490058969478773962607",
                    "46769676938508527565289698180796837430",
                    "11295222368027826195083741734620076701",
                    "264372954472183302800051110910507753281",
                    "68111199641441598955153103211415680898",
                    "97208042744731146783035866392819633054"
                ],
                "threshold": 0.9
            },
            "signature_type": "Line",
            "source": "https://android.googlesource.com/platform/hardware/st/nfc/+/07468d68ad37d8a7a430eb6433d6ca0e9ed9c589",
            "deprecated": false,
            "signature_version": "v1",
            "target": {
                "file": "aidl/Nfc.h"
            }
        }
    ],
    "fixes": [
        "https://android.googlesource.com/platform/hardware/st/nfc/+/07468d68ad37d8a7a430eb6433d6ca0e9ed9c589"
    ],
    "severity": "High"
}

Database specific

source 
"https://storage.googleapis.com/android-osv/ASB-A-392699284.json"