Skip to content
OpenAdvisories
Unscored CVE-2020-0070 EUVD-2020-1577GHSA-q5p4-cr98-99w2

In rw_t2t_update_lock_attributes of rw_t2t_ndef.cc, there is a possible out of bounds write due to a missing bounds check. This could lead …

Published Apr 17, 2020 · Updated Aug 4, 2024 · Assigned by google_android

Platform: Android

Description

In rw_t2t_update_lock_attributes of rw_t2t_ndef.cc, there is a possible out of bounds write due to a missing bounds check. This could lead to remote code execution over NFC with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-8.0 Android-8.1 Android-9 Android-10Android ID: A-148159613

Affected products

VendorProductAffectedFixed
— Android Android-8.0 Android-8.1 Android-9 Android-10 —

References