{"id":"ASB-A-181346550", "published":"2021-07-01T00:00:00Z", "modified":"2026-05-01T15:24:27.653932157Z", "aliases":["CVE-2021-0596", "A-181346550"], "details":"In phNciNfc_RecvMfResp of phNxpExtns_MifareStd.cpp, there is a possible out of bounds read due to a missing bounds check. This could lead to remote information disclosure over NFC with no additional execution privileges needed. User interaction is not needed for exploitation.", "affected":[{"package":{"name":"platform/packages/apps/Nfc", "ecosystem":"Android"}, "ranges":[{"type":"ECOSYSTEM", "events":[{"introduced":"8.1:0"}, {"fixed":"8.1:2021-07-01"}]}], "versions":["8.1"], "ecosystem_specific":{"fixes":["https://android.googlesource.com/platform/packages/apps/Nfc/+/9732971aeda19c42e35355bbfacd81ade884ebe9"], "severity":"High", "spl":"2021-07-01", "types":["ID"], "vanir_signatures":[{"deprecated":false, "digest":{"line_hashes":["2884847135485000758411603062137112485", "211031454079573566250835353966381290903", "168448207663940346394757902052089912696", "169785102641856338326886928989804399309", "173057411138899605570235583465545219128", "52376486751754460832414206509296816762", "11790136434654728879528561461751803502"], "threshold":0.9}, "id":"ASB-A-181346550-8d3615b1", "signature_type":"Line", "signature_version":"v1", "source":"https://android.googlesource.com/platform/packages/apps/Nfc/+/9732971aeda19c42e35355bbfacd81ade884ebe9", "target":{"file":"nci/jni/extns/pn54x/src/mifare/phNxpExtns_MifareStd.c"}}, {"deprecated":false, "digest":{"function_hash":"262160023557380663008511136770307698610", "length":2269}, "id":"ASB-A-181346550-dc3e02c2", "signature_type":"Function", "signature_version":"v1", "source":"https://android.googlesource.com/platform/packages/apps/Nfc/+/9732971aeda19c42e35355bbfacd81ade884ebe9", "target":{"file":"nci/jni/extns/pn54x/src/mifare/phNxpExtns_MifareStd.c", "function":"phNciNfc_RecvMfResp"}}]}}, {"package":{"name":"platform/packages/apps/Nfc", "ecosystem":"Android"}, "ranges":[{"type":"ECOSYSTEM", "events":[{"introduced":"9:0"}, {"fixed":"9:2021-07-01"}]}], "versions":["9"], "ecosystem_specific":{"fixes":["https://android.googlesource.com/platform/packages/apps/Nfc/+/c39c851616f674edb8d9fa98010768eef3ba1913"], "severity":"High", "spl":"2021-07-01", "types":["ID"], "vanir_signatures":[{"deprecated":false, "digest":{"function_hash":"72945400507771723778522666653419942626", "length":2276}, "id":"ASB-A-181346550-773fd7db", "signature_type":"Function", "signature_version":"v1", "source":"https://android.googlesource.com/platform/packages/apps/Nfc/+/c39c851616f674edb8d9fa98010768eef3ba1913", "target":{"file":"nci/jni/extns/pn54x/src/mifare/phNxpExtns_MifareStd.cpp", "function":"phNciNfc_RecvMfResp"}}, {"deprecated":false, "digest":{"line_hashes":["285685263254089793825752808025112685745", "105930852586253385270607355452609178681", "305390062134799501162388530095834398612", "168448207663940346394757902052089912696", "205285000149594638731812375834924927748", "52376486751754460832414206509296816762", "11790136434654728879528561461751803502"], "threshold":0.9}, "id":"ASB-A-181346550-e7adecfc", "match_only_versions":["9"], "signature_type":"Line", "signature_version":"v1", "source":"https://android.googlesource.com/platform/packages/apps/Nfc/+/c39c851616f674edb8d9fa98010768eef3ba1913", "target":{"file":"nci/jni/extns/pn54x/src/mifare/phNxpExtns_MifareStd.cpp"}}]}}, {"package":{"name":"platform/packages/apps/Nfc", "ecosystem":"Android"}, "ranges":[{"type":"ECOSYSTEM", "events":[{"introduced":"10:0"}, {"fixed":"10:2021-07-01"}]}], "versions":["10"], "ecosystem_specific":{"fixes":["https://android.googlesource.com/platform/packages/apps/Nfc/+/c39c851616f674edb8d9fa98010768eef3ba1913"], "severity":"High", "spl":"2021-07-01", "types":["ID"], "vanir_signatures":[{"deprecated":false, "digest":{"function_hash":"72945400507771723778522666653419942626", "length":2276}, "id":"ASB-A-181346550-2d8bb336", "signature_type":"Function", "signature_version":"v1", "source":"https://android.googlesource.com/platform/packages/apps/Nfc/+/c39c851616f674edb8d9fa98010768eef3ba1913", "target":{"file":"nci/jni/extns/pn54x/src/mifare/phNxpExtns_MifareStd.cpp", "function":"phNciNfc_RecvMfResp"}}, {"deprecated":false, "digest":{"line_hashes":["285685263254089793825752808025112685745", "105930852586253385270607355452609178681", "305390062134799501162388530095834398612", "168448207663940346394757902052089912696", "205285000149594638731812375834924927748", "52376486751754460832414206509296816762", "11790136434654728879528561461751803502"], "threshold":0.9}, "id":"ASB-A-181346550-2f182af9", "match_only_versions":["10"], "signature_type":"Line", "signature_version":"v1", "source":"https://android.googlesource.com/platform/packages/apps/Nfc/+/c39c851616f674edb8d9fa98010768eef3ba1913", "target":{"file":"nci/jni/extns/pn54x/src/mifare/phNxpExtns_MifareStd.cpp"}}]}}, {"package":{"name":"platform/packages/apps/Nfc", "ecosystem":"Android"}, "ranges":[{"type":"ECOSYSTEM", "events":[{"introduced":"11:0"}, {"fixed":"11:2021-07-01"}]}], "versions":["11"], "ecosystem_specific":{"fixes":["https://android.googlesource.com/platform/packages/apps/Nfc/+/c39c851616f674edb8d9fa98010768eef3ba1913"], "severity":"High", "spl":"2021-07-01", "types":["ID"], "vanir_signatures":[{"deprecated":false, "digest":{"function_hash":"72945400507771723778522666653419942626", "length":2276}, "id":"ASB-A-181346550-b0805140", "signature_type":"Function", "signature_version":"v1", "source":"https://android.googlesource.com/platform/packages/apps/Nfc/+/c39c851616f674edb8d9fa98010768eef3ba1913", "target":{"file":"nci/jni/extns/pn54x/src/mifare/phNxpExtns_MifareStd.cpp", "function":"phNciNfc_RecvMfResp"}}, {"deprecated":false, "digest":{"line_hashes":["285685263254089793825752808025112685745", "105930852586253385270607355452609178681", "305390062134799501162388530095834398612", "168448207663940346394757902052089912696", "205285000149594638731812375834924927748", "52376486751754460832414206509296816762", "11790136434654728879528561461751803502"], "threshold":0.9}, "id":"ASB-A-181346550-d9b2325b", "match_only_versions":["11"], "signature_type":"Line", "signature_version":"v1", "source":"https://android.googlesource.com/platform/packages/apps/Nfc/+/c39c851616f674edb8d9fa98010768eef3ba1913", "target":{"file":"nci/jni/extns/pn54x/src/mifare/phNxpExtns_MifareStd.cpp"}}]}}], "references":[{"type":"ADVISORY", "url":"https://source.android.com/security/bulletin/2021-07-01"}, {"type":"FIX", "url":"https://android.googlesource.com/platform/packages/apps/Nfc/+/61750f1181ace3ca390489599e36f0e3b725afb0"}]}