In phNxpNciHalprocessextrsp of phNxpNciHalext.cc, there is a possible out of bounds write due to an integer overflow. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation.
{ "vanir_signatures": [ { "digest": { "length": 7773.0, "function_hash": "144957320661705057696024866343318128348" }, "id": "PUB-A-169258743-be804e2e", "source": "https://android.googlesource.com/platform/hardware/nxp/nfc/+/fc44434f7728cdf6cd6e29729dfdb79d2f1809e4", "deprecated": false, "signature_version": "v1", "target": { "file": "halimpl/hal/phNxpNciHal_ext.cc", "function": "phNxpNciHal_process_ext_rsp" }, "signature_type": "Function" }, { "digest": { "threshold": 0.9, "line_hashes": [ "110608516626049271395258159091629464579", "199172325690527993752378671901326361324", "19184127120336552583878525553097528016", "178353908166092922115802535596088121917" ] }, "id": "PUB-A-169258743-cdf3fa2f", "source": "https://android.googlesource.com/platform/hardware/nxp/nfc/+/fc44434f7728cdf6cd6e29729dfdb79d2f1809e4", "deprecated": false, "signature_version": "v1", "target": { "file": "halimpl/hal/phNxpNciHal_ext.cc" }, "signature_type": "Line" } ], "fixes": [ "https://android.googlesource.com/platform/hardware/nxp/nfc/+/fc44434f7728cdf6cd6e29729dfdb79d2f1809e4" ], "spl": "2021-06-01", "severity": "Moderate", "types": [ "EoP" ] }