{"id":"ASB-A-181660091", "published":"2021-11-01T00:00:00Z", "modified":"2026-04-30T15:48:46.890647439Z", "aliases":["CVE-2021-0930", "A-181660091"], "details":"In phNxpNciHal_process_ext_rsp of phNxpNciHal_ext.cc, there is a possible out of bounds write due to a missing bounds check. This could lead to remote code execution over NFC with no additional execution privileges needed. User interaction is not needed for exploitation.", "affected":[{"package":{"name":"platform/hardware/nxp/nfc", "ecosystem":"Android"}, "ranges":[{"type":"ECOSYSTEM", "events":[{"introduced":"9:0"}, {"fixed":"9:2021-11-01"}]}], "versions":["9"], "ecosystem_specific":{"fixes":["https://android.googlesource.com/platform/hardware/nxp/nfc/+/528b21d3443efd763313a446624ea985f3d46722"], "severity":"Critical", "spl":"2021-11-01", "types":["RCE"], "vanir_signatures":[{"deprecated":false, "digest":{"line_hashes":["99860553623581235138285079328231545367", "311109860135954883653537398728919786717", "41132790401433254210318606601304368783", "38742958951678416004525463072651252691", "327045068271184269054905105808831680035", "247327466993503976893419637353824382758", "87593289755700552119713026055312392844", "234271969641130123654654137111502201760", "56196240256472743204171193358399311908"], "threshold":0.9}, "id":"ASB-A-181660091-18d558ed", "signature_type":"Line", "signature_version":"v1", "source":"https://android.googlesource.com/platform/hardware/nxp/nfc/+/528b21d3443efd763313a446624ea985f3d46722", "target":{"file":"halimpl/hal/phNxpNciHal_ext.cc"}}, {"deprecated":false, "digest":{"function_hash":"42354174637122065909857040280248619789", "length":7337}, "id":"ASB-A-181660091-c0c91fc4", "signature_type":"Function", "signature_version":"v1", "source":"https://android.googlesource.com/platform/hardware/nxp/nfc/+/528b21d3443efd763313a446624ea985f3d46722", "target":{"file":"halimpl/hal/phNxpNciHal_ext.cc", "function":"phNxpNciHal_process_ext_rsp"}}]}}, {"package":{"name":"platform/hardware/nxp/nfc", "ecosystem":"Android"}, "ranges":[{"type":"ECOSYSTEM", "events":[{"introduced":"10:0"}, {"fixed":"10:2021-11-01"}]}], "versions":["10"], "ecosystem_specific":{"fixes":["https://android.googlesource.com/platform/hardware/nxp/nfc/+/528b21d3443efd763313a446624ea985f3d46722"], "severity":"Critical", "spl":"2021-11-01", "types":["RCE"], "vanir_signatures":[{"deprecated":false, "digest":{"line_hashes":["99860553623581235138285079328231545367", "311109860135954883653537398728919786717", "41132790401433254210318606601304368783", "38742958951678416004525463072651252691", "327045068271184269054905105808831680035", "247327466993503976893419637353824382758", "87593289755700552119713026055312392844", "234271969641130123654654137111502201760", "56196240256472743204171193358399311908"], "threshold":0.9}, "id":"ASB-A-181660091-3b51cc58", "signature_type":"Line", "signature_version":"v1", "source":"https://android.googlesource.com/platform/hardware/nxp/nfc/+/528b21d3443efd763313a446624ea985f3d46722", "target":{"file":"halimpl/hal/phNxpNciHal_ext.cc"}}, {"deprecated":false, "digest":{"function_hash":"42354174637122065909857040280248619789", "length":7337}, "id":"ASB-A-181660091-ec72232b", "signature_type":"Function", "signature_version":"v1", "source":"https://android.googlesource.com/platform/hardware/nxp/nfc/+/528b21d3443efd763313a446624ea985f3d46722", "target":{"file":"halimpl/hal/phNxpNciHal_ext.cc", "function":"phNxpNciHal_process_ext_rsp"}}]}}, {"package":{"name":"platform/hardware/nxp/nfc", "ecosystem":"Android"}, "ranges":[{"type":"ECOSYSTEM", "events":[{"introduced":"11:0"}, {"fixed":"11:2021-11-01"}]}], "versions":["11"], "ecosystem_specific":{"fixes":["https://android.googlesource.com/platform/hardware/nxp/nfc/+/528b21d3443efd763313a446624ea985f3d46722"], "severity":"Critical", "spl":"2021-11-01", "types":["RCE"], "vanir_signatures":[{"deprecated":false, "digest":{"line_hashes":["99860553623581235138285079328231545367", "311109860135954883653537398728919786717", "41132790401433254210318606601304368783", "38742958951678416004525463072651252691", "327045068271184269054905105808831680035", "247327466993503976893419637353824382758", "87593289755700552119713026055312392844", "234271969641130123654654137111502201760", "56196240256472743204171193358399311908"], "threshold":0.9}, "id":"ASB-A-181660091-33041a05", "signature_type":"Line", "signature_version":"v1", "source":"https://android.googlesource.com/platform/hardware/nxp/nfc/+/528b21d3443efd763313a446624ea985f3d46722", "target":{"file":"halimpl/hal/phNxpNciHal_ext.cc"}}, {"deprecated":false, "digest":{"function_hash":"42354174637122065909857040280248619789", "length":7337}, "id":"ASB-A-181660091-63450e29", "signature_type":"Function", "signature_version":"v1", "source":"https://android.googlesource.com/platform/hardware/nxp/nfc/+/528b21d3443efd763313a446624ea985f3d46722", "target":{"file":"halimpl/hal/phNxpNciHal_ext.cc", "function":"phNxpNciHal_process_ext_rsp"}}]}}, {"package":{"name":"platform/hardware/nxp/nfc", "ecosystem":"Android"}, "ranges":[{"type":"ECOSYSTEM", "events":[{"introduced":"12:0"}, {"fixed":"12:2021-11-01"}]}], "versions":["12"], "ecosystem_specific":{"fixes":["https://android.googlesource.com/platform/hardware/nxp/nfc/+/1f58061034c8dbf14843d94a2ee8f70f4692d158"], "severity":"Critical", "spl":"2021-11-01", "types":["RCE"], "vanir_signatures":[{"deprecated":false, "digest":{"function_hash":"71352292464839372914490855974666762429", "length":7876}, "id":"ASB-A-181660091-2eecf33f", "signature_type":"Function", "signature_version":"v1", "source":"https://android.googlesource.com/platform/hardware/nxp/nfc/+/1f58061034c8dbf14843d94a2ee8f70f4692d158", "target":{"file":"pn8x/halimpl/hal/phNxpNciHal_ext.cc", "function":"phNxpNciHal_process_ext_rsp"}}, {"deprecated":false, "digest":{"line_hashes":["99860553623581235138285079328231545367", "311109860135954883653537398728919786717", "41132790401433254210318606601304368783", "38742958951678416004525463072651252691", "327045068271184269054905105808831680035", "247327466993503976893419637353824382758", "87593289755700552119713026055312392844", "234271969641130123654654137111502201760", "56196240256472743204171193358399311908"], "threshold":0.9}, "id":"ASB-A-181660091-94fac09a", "signature_type":"Line", "signature_version":"v1", "source":"https://android.googlesource.com/platform/hardware/nxp/nfc/+/1f58061034c8dbf14843d94a2ee8f70f4692d158", "target":{"file":"pn8x/halimpl/hal/phNxpNciHal_ext.cc"}}]}}], "references":[{"type":"ADVISORY", "url":"https://source.android.com/security/bulletin/2021-11-01"}, {"type":"FIX", "url":"https://android.googlesource.com/platform/hardware/nxp/nfc/+/95e1dd94c3794bd175c3784fb5accfeac18a1787"}]}