ASB-A-522376080

See a problem?

Import Source

https://storage.googleapis.com/android-osv/ASB-A-522376080.json

JSON Data

https://api.osv.dev/v1/vulns/ASB-A-522376080

Aliases

A-522376080
CVE-2026-58823

Published

2026-09-01T00:00:00Z

Modified

2026-09-09T15:15:54Z

Summary

[none]

Details

In stpropnci_process_std of stpropnci_std.cc, there is a possible memory safety issue due to a missing bounds check. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.

References

https://source.android.com/security/bulletin/2026-09-01

Affected packages

Android / platform/hardware/st/nfc

Package

Name: platform/hardware/st/nfc

Affected ranges

Type: ECOSYSTEM
Events: Introduced

17-next:0

Fixed

17-next:2026-09-01

Affected versions

Other

17-next

Ecosystem specific

{
    "fixes": [
        "https://android.googlesource.com/platform/hardware/st/nfc/+/95123eb7e9429abbc05cc574007e1007ffc26bed"
    ],
    "severity": "Critical",
    "spl": "2026-09-01",
    "types": [
        "EoP"
    ],
    "vanir_signatures": [
        {
            "deprecated": false,
            "digest": {
                "line_hashes": [
                    "336732368967199200473969057376172564613",
                    "274204379239738338470749423880619071006",
                    "60507852778922621733235969457514015032",
                    "248023826389437380432432795785863641086",
                    "147517829825420363254114033661471249104",
                    "96955097241474769523896417404200672253",
                    "235270641724948836935338584147380676369",
                    "322584451111897561877707245940283691287",
                    "218715121412007040239404492831600826296",
                    "238028658042003054231947704135674370325",
                    "19242727262446347785528157386970691326",
                    "216860994750841078031031168952677853977",
                    "68055808558396590433297394597304551377",
                    "101342900596981767159321466503418547874",
                    "200448462302387494896315092898340885438"
                ],
                "threshold": 0.9
            },
            "id": "ASB-A-522376080-47fee072",
            "signature_type": "Line",
            "signature_version": "v1",
            "source": "https://android.googlesource.com/platform/hardware/st/nfc/+/95123eb7e9429abbc05cc574007e1007ffc26bed",
            "target": {
                "file": "libstpropnci/src/stpropnci_std.cc"
            }
        },
        {
            "deprecated": false,
            "digest": {
                "function_hash": "3707116624033872267884619596308229912",
                "length": 19154
            },
            "id": "ASB-A-522376080-da124a89",
            "signature_type": "Function",
            "signature_version": "v1",
            "source": "https://android.googlesource.com/platform/hardware/st/nfc/+/95123eb7e9429abbc05cc574007e1007ffc26bed",
            "target": {
                "file": "libstpropnci/src/stpropnci_std.cc",
                "function": "stpropnci_process_std"
            }
        }
    ]
}

Database specific

source

"https://storage.googleapis.com/android-osv/ASB-A-522376080.json"