CVE-2021-0930

Name of the Vulnerable Software and Affected Versions Android versions 9 through 12

Description The issue is related to a missing bounds check in the phNxpNciHal process ext rsp function of phNxpNciHal ext.cc, which could lead to a possible out of bounds write. This might result in remote code execution over NFC without requiring additional execution privileges. User interaction is not necessary for exploitation.

Recommendations For Android versions 9 through 12, apply the necessary patch to fix the missing bounds check in the phNxpNciHal process ext rsp function. At the moment, there is no information about a newer version that contains a fix for this vulnerability.