Skip to content
OpenAdvisories
Unscored CVE-2020-0071 EUVD-2020-1578GHSA-rmfh-4vqx-qf9v

In rw_t2t_extract_default_locks_info of rw_t2t_ndef.cc, there is a possible out of bounds write due to a missing bounds check. This could l…

Published Apr 17, 2020 · Updated Aug 4, 2024 · Assigned by google_android

Platform: Android

Description

In rw_t2t_extract_default_locks_info of rw_t2t_ndef.cc, there is a possible out of bounds write due to a missing bounds check. This could lead to remote code execution over NFC with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-8.0 Android-8.1 Android-9 Android-10Android ID: A-147310721

Affected products

VendorProductAffectedFixed
— Android Android-8.0 Android-8.1 Android-9 Android-10 —

References