{"id":"ASB-A-221856662", "published":"2022-06-01T00:00:00Z", "modified":"2026-04-30T15:48:46.890647439Z", "aliases":["CVE-2022-20131", "A-221856662"], "details":"In nci_proc_rf_management_ntf of nci_hrcv.cc, there is a possible out of bounds read due to a missing bounds check. This could lead to remote information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation.", "affected":[{"package":{"name":"platform/system/nfc", "ecosystem":"Android"}, "ranges":[{"type":"ECOSYSTEM", "events":[{"introduced":"12L-next:0"}, {"fixed":"12L-next:2022-06-01"}]}], "versions":["12L-next"], "ecosystem_specific":{"fixes":["https://android.googlesource.com/platform/system/nfc/+/1c6ab25b3d76c2ced764dc649bec6cf05aecd198"], "severity":"High", "spl":"2022-06-01", "types":["ID"], "vanir_signatures":[{"deprecated":false, "digest":{"line_hashes":["34975717492042135901446728523998989999", "90413502481760613099594574736873831887", "320523821704544772715334960455628891026"], "threshold":0.9}, "id":"ASB-A-221856662-6d23832a", "signature_type":"Line", "signature_version":"v1", "source":"https://android.googlesource.com/platform/system/nfc/+/1c6ab25b3d76c2ced764dc649bec6cf05aecd198", "target":{"file":"src/nfc/nfc/nfc_ncif.cc"}}, {"deprecated":false, "digest":{"function_hash":"42002811067232942361744446294019484761", "length":1027}, "id":"ASB-A-221856662-98a39881", "signature_type":"Function", "signature_version":"v1", "source":"https://android.googlesource.com/platform/system/nfc/+/1c6ab25b3d76c2ced764dc649bec6cf05aecd198", "target":{"file":"src/nfc/nfc/nfc_ncif.cc", "function":"nfc_ncif_proc_ee_discover_req"}}]}}, {"package":{"name":"platform/system/nfc", "ecosystem":"Android"}, "ranges":[{"type":"ECOSYSTEM", "events":[{"introduced":"10:0"}, {"fixed":"10:2022-06-01"}]}], "versions":["10"], "ecosystem_specific":{"fixes":["https://android.googlesource.com/platform/system/nfc/+/1c6ab25b3d76c2ced764dc649bec6cf05aecd198"], "severity":"High", "spl":"2022-06-01", "types":["ID"], "vanir_signatures":[{"deprecated":false, "digest":{"function_hash":"42002811067232942361744446294019484761", "length":1027}, "id":"ASB-A-221856662-028b263c", "signature_type":"Function", "signature_version":"v1", "source":"https://android.googlesource.com/platform/system/nfc/+/1c6ab25b3d76c2ced764dc649bec6cf05aecd198", "target":{"file":"src/nfc/nfc/nfc_ncif.cc", "function":"nfc_ncif_proc_ee_discover_req"}}, {"deprecated":false, "digest":{"line_hashes":["34975717492042135901446728523998989999", "90413502481760613099594574736873831887", "320523821704544772715334960455628891026"], "threshold":0.9}, "id":"ASB-A-221856662-ac37e2ef", "signature_type":"Line", "signature_version":"v1", "source":"https://android.googlesource.com/platform/system/nfc/+/1c6ab25b3d76c2ced764dc649bec6cf05aecd198", "target":{"file":"src/nfc/nfc/nfc_ncif.cc"}}]}}, {"package":{"name":"platform/system/nfc", "ecosystem":"Android"}, "ranges":[{"type":"ECOSYSTEM", "events":[{"introduced":"11:0"}, {"fixed":"11:2022-06-01"}]}], "versions":["11"], "ecosystem_specific":{"fixes":["https://android.googlesource.com/platform/system/nfc/+/1c6ab25b3d76c2ced764dc649bec6cf05aecd198"], "severity":"High", "spl":"2022-06-01", "types":["ID"], "vanir_signatures":[{"deprecated":false, "digest":{"function_hash":"42002811067232942361744446294019484761", "length":1027}, "id":"ASB-A-221856662-30dbb4ef", "signature_type":"Function", "signature_version":"v1", "source":"https://android.googlesource.com/platform/system/nfc/+/1c6ab25b3d76c2ced764dc649bec6cf05aecd198", "target":{"file":"src/nfc/nfc/nfc_ncif.cc", "function":"nfc_ncif_proc_ee_discover_req"}}, {"deprecated":false, "digest":{"line_hashes":["34975717492042135901446728523998989999", "90413502481760613099594574736873831887", "320523821704544772715334960455628891026"], "threshold":0.9}, "id":"ASB-A-221856662-b6f4718d", "signature_type":"Line", "signature_version":"v1", "source":"https://android.googlesource.com/platform/system/nfc/+/1c6ab25b3d76c2ced764dc649bec6cf05aecd198", "target":{"file":"src/nfc/nfc/nfc_ncif.cc"}}]}}, {"package":{"name":"platform/system/nfc", "ecosystem":"Android"}, "ranges":[{"type":"ECOSYSTEM", "events":[{"introduced":"12:0"}, {"fixed":"12:2022-06-01"}]}], "versions":["12"], "ecosystem_specific":{"fixes":["https://android.googlesource.com/platform/system/nfc/+/1c6ab25b3d76c2ced764dc649bec6cf05aecd198"], "severity":"High", "spl":"2022-06-01", "types":["ID"], "vanir_signatures":[{"deprecated":false, "digest":{"function_hash":"42002811067232942361744446294019484761", "length":1027}, "id":"ASB-A-221856662-6064fd98", "signature_type":"Function", "signature_version":"v1", "source":"https://android.googlesource.com/platform/system/nfc/+/1c6ab25b3d76c2ced764dc649bec6cf05aecd198", "target":{"file":"src/nfc/nfc/nfc_ncif.cc", "function":"nfc_ncif_proc_ee_discover_req"}}, {"deprecated":false, "digest":{"line_hashes":["34975717492042135901446728523998989999", "90413502481760613099594574736873831887", "320523821704544772715334960455628891026"], "threshold":0.9}, "id":"ASB-A-221856662-795c2ca3", "signature_type":"Line", "signature_version":"v1", "source":"https://android.googlesource.com/platform/system/nfc/+/1c6ab25b3d76c2ced764dc649bec6cf05aecd198", "target":{"file":"src/nfc/nfc/nfc_ncif.cc"}}]}}, {"package":{"name":"platform/system/nfc", "ecosystem":"Android"}, "ranges":[{"type":"ECOSYSTEM", "events":[{"introduced":"12L:0"}, {"fixed":"12L:2022-06-01"}]}], "versions":["12L"], "ecosystem_specific":{"fixes":["https://android.googlesource.com/platform/system/nfc/+/1c6ab25b3d76c2ced764dc649bec6cf05aecd198"], "severity":"High", "spl":"2022-06-01", "types":["ID"], "vanir_signatures":[{"deprecated":false, "digest":{"line_hashes":["34975717492042135901446728523998989999", "90413502481760613099594574736873831887", "320523821704544772715334960455628891026"], "threshold":0.9}, "id":"ASB-A-221856662-3b25cf81", "signature_type":"Line", "signature_version":"v1", "source":"https://android.googlesource.com/platform/system/nfc/+/1c6ab25b3d76c2ced764dc649bec6cf05aecd198", "target":{"file":"src/nfc/nfc/nfc_ncif.cc"}}, {"deprecated":false, "digest":{"function_hash":"42002811067232942361744446294019484761", "length":1027}, "id":"ASB-A-221856662-70d24653", "signature_type":"Function", "signature_version":"v1", "source":"https://android.googlesource.com/platform/system/nfc/+/1c6ab25b3d76c2ced764dc649bec6cf05aecd198", "target":{"file":"src/nfc/nfc/nfc_ncif.cc", "function":"nfc_ncif_proc_ee_discover_req"}}]}}], "references":[{"type":"ADVISORY", "url":"https://source.android.com/security/bulletin/2022-06-01"}, {"type":"FIX", "url":"https://android.googlesource.com/platform/system/nfc/+/1c6ab25b3d76c2ced764dc649bec6cf05aecd198"}]}