PUB-A-221851879

See a problem?

Import Source

https://storage.googleapis.com/android-osv/PUB-A-221851879.json

JSON Data

https://api.osv.dev/v1/vulns/PUB-A-221851879

Aliases

A-221851879
CVE-2022-20198

Published

2022-06-01T00:00:00Z

Modified

2024-11-06T12:16:03.231308Z

Summary

[none]

Details

In llcpdlcprocconnectpdu of llcp_dlc.cc, there is a possible out of bounds read due to a missing bounds check. This could lead to local information disclosure from the NFC stack with System execution privileges needed. User interaction is not needed for exploitation.

References

https://source.android.com/security/bulletin/2022-06-01

Affected packages

Android / platform/system/nfc

Package

Name: platform/system/nfc

Affected ranges

Type: ECOSYSTEM
Events: Introduced

12L-next:0

Fixed

12L-next:2022-06-01

Affected versions

Other

12L-next

Ecosystem specific

{
    "vanir_signatures": [
        {
            "match_only_versions": [
                "12L-next"
            ],
            "digest": {
                "threshold": 0.9,
                "line_hashes": [
                    "118709664554816737621802419049163592235",
                    "286163928817953798049638101275702939276",
                    "304356395572074232260906006556492480583",
                    "129532464675689311367734691749568014801",
                    "229273656346315497071703875419135450243",
                    "86050258898373323912386669424735882105",
                    "329733073279900451231606779072118902045",
                    "10769968563030654716280263544134467521",
                    "291581543102045189692326982801169633284",
                    "217945050101807849232120360322427786126",
                    "35088334106378001939677805303070703382"
                ]
            },
            "id": "PUB-A-221851879-62b6ab3c",
            "source": "https://android.googlesource.com/platform/system/nfc/+/3bd6b271212523d87b5fa8fffb796fa0f7ea2d5b",
            "deprecated": false,
            "signature_version": "v1",
            "target": {
                "file": "src/nfc/llcp/llcp_dlc.cc"
            },
            "signature_type": "Line"
        },
        {
            "match_only_versions": [
                "12L-next"
            ],
            "digest": {
                "length": 2570.0,
                "function_hash": "79833251572700789355548821393694682279"
            },
            "id": "PUB-A-221851879-ce0699be",
            "source": "https://android.googlesource.com/platform/system/nfc/+/3bd6b271212523d87b5fa8fffb796fa0f7ea2d5b",
            "deprecated": false,
            "signature_version": "v1",
            "target": {
                "file": "src/nfc/llcp/llcp_dlc.cc",
                "function": "llcp_dlc_proc_connect_pdu"
            },
            "signature_type": "Function"
        }
    ],
    "fixes": [
        "https://android.googlesource.com/platform/system/nfc/+/3bd6b271212523d87b5fa8fffb796fa0f7ea2d5b"
    ],
    "spl": "2022-06-01",
    "severity": "Moderate",
    "types": [
        "ID"
    ]
}