{"id":"ASB-A-522376080", "published":"2026-09-01T00:00:00Z", "modified":"2026-09-10T15:43:18.983809180Z", "aliases":["CVE-2026-58823", "A-522376080"], "details":"In stpropnci_process_std of stpropnci_std.cc, there is a possible memory safety issue due to a missing bounds check. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.", "affected":[{"package":{"name":"platform/hardware/st/nfc", "ecosystem":"Android"}, "ranges":[{"type":"ECOSYSTEM", "events":[{"introduced":"17-next:0"}, {"fixed":"17-next:2026-09-01"}]}], "versions":["17-next"], "ecosystem_specific":{"fixes":["https://android.googlesource.com/platform/hardware/st/nfc/+/95123eb7e9429abbc05cc574007e1007ffc26bed"], "severity":"Critical", "spl":"2026-09-01", "types":["EoP"], "vanir_signatures":[{"deprecated":false, "digest":{"line_hashes":["336732368967199200473969057376172564613", "274204379239738338470749423880619071006", "60507852778922621733235969457514015032", "248023826389437380432432795785863641086", "147517829825420363254114033661471249104", "96955097241474769523896417404200672253", "235270641724948836935338584147380676369", "322584451111897561877707245940283691287", "218715121412007040239404492831600826296", "238028658042003054231947704135674370325", "19242727262446347785528157386970691326", "216860994750841078031031168952677853977", "68055808558396590433297394597304551377", "101342900596981767159321466503418547874", "200448462302387494896315092898340885438"], "threshold":0.9}, "id":"ASB-A-522376080-47fee072", "signature_type":"Line", "signature_version":"v1", "source":"https://android.googlesource.com/platform/hardware/st/nfc/+/95123eb7e9429abbc05cc574007e1007ffc26bed", "target":{"file":"libstpropnci/src/stpropnci_std.cc"}}, {"deprecated":false, "digest":{"function_hash":"3707116624033872267884619596308229912", "length":19154}, "id":"ASB-A-522376080-da124a89", "signature_type":"Function", "signature_version":"v1", "source":"https://android.googlesource.com/platform/hardware/st/nfc/+/95123eb7e9429abbc05cc574007e1007ffc26bed", "target":{"file":"libstpropnci/src/stpropnci_std.cc", "function":"stpropnci_process_std"}}]}}, {"package":{"name":"platform/hardware/st/nfc", "ecosystem":"Android"}, "ranges":[{"type":"ECOSYSTEM", "events":[{"introduced":"17:0"}, {"fixed":"17:2026-09-01"}]}], "versions":["17"], "ecosystem_specific":{"fixes":["https://android.googlesource.com/platform/hardware/st/nfc/+/6a80e802cc153b0d24109ad7fec53fd5a7fda664"], "severity":"Critical", "spl":"2026-09-01", "types":["EoP"], "vanir_signatures":[{"deprecated":false, "digest":{"function_hash":"3707116624033872267884619596308229912", "length":19154}, "id":"ASB-A-522376080-6f2833c5", "signature_type":"Function", "signature_version":"v1", "source":"https://android.googlesource.com/platform/hardware/st/nfc/+/6a80e802cc153b0d24109ad7fec53fd5a7fda664", "target":{"file":"libstpropnci/src/stpropnci_std.cc", "function":"stpropnci_process_std"}}, {"deprecated":false, "digest":{"line_hashes":["336732368967199200473969057376172564613", "274204379239738338470749423880619071006", "60507852778922621733235969457514015032", "248023826389437380432432795785863641086", "147517829825420363254114033661471249104", "96955097241474769523896417404200672253", "235270641724948836935338584147380676369", "322584451111897561877707245940283691287", "218715121412007040239404492831600826296", "238028658042003054231947704135674370325", "19242727262446347785528157386970691326", "216860994750841078031031168952677853977", "68055808558396590433297394597304551377", "101342900596981767159321466503418547874", "200448462302387494896315092898340885438"], "threshold":0.9}, "id":"ASB-A-522376080-ccd47e07", "signature_type":"Line", "signature_version":"v1", "source":"https://android.googlesource.com/platform/hardware/st/nfc/+/6a80e802cc153b0d24109ad7fec53fd5a7fda664", "target":{"file":"libstpropnci/src/stpropnci_std.cc"}}]}}], "references":[{"type":"ADVISORY", "url":"https://source.android.com/security/bulletin/2026-09-01"}]}