PT-2020-16619
CVE-2020-27043
·
Published
2020-12-15
·
Updated
2020-12-16
Description by
CVSS 3.1
4.4
MediumMetricsAV:L/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N
Name of the Vulnerable Software and Affected Versions
Android versions Android-11
Description
In the
nfc enabled function of nfc main.cc, there is a possible out of bounds read due to an incorrect increment. This could lead to local information disclosure via firmware with System execution privileges needed. User interaction is not needed for exploitation.Recommendations
For Android version Android-11, consider restricting access to the
nfc enabled function in nfc main.cc to minimize the risk of exploitation until a patch is available. Found an issue in the description? Have something to add? Feel free to write us 👾