CVE-2020-0139

Name of the Vulnerable Software and Affected Versions Android versions Android-10

Description The issue is related to a possible out of bounds read due to an integer overflow in the NDEF MsgValidate function of ndef utils.c. This could lead to local information disclosure if a malformed NFC tag is provided by the firmware. Exploitation requires system execution privileges and does not need user interaction.

Recommendations For Android version Android-10, update to a version that includes the fix for this issue to prevent potential local information disclosure.