Skip to content
OpenAdvisories
Unscored CVE-2020-0072 EUVD-2020-1579GHSA-fpm7-m99x-8x97

In rw_t2t_handle_tlv_detect_rsp of rw_t2t_ndef.cc, there is a possible out of bounds write due to a missing bounds check. This could lead t…

Published Apr 17, 2020 · Updated Aug 4, 2024 · Assigned by google_android

Platform: Android

Description

In rw_t2t_handle_tlv_detect_rsp of rw_t2t_ndef.cc, there is a possible out of bounds write due to a missing bounds check. This could lead to remote code execution over NFC with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-8.0 Android-8.1 Android-9 Android-10Android ID: A-147310271

Affected products

VendorProductAffectedFixed
— Android Android-8.0 Android-8.1 Android-9 Android-10 —

References