{"id":"ASB-A-181346550","details":"In phNciNfc_RecvMfResp of phNxpExtns_MifareStd.cpp, there is a possible out of bounds read due to a missing bounds check. This could lead to remote information disclosure over NFC with no additional execution privileges needed. User interaction is not needed for exploitation.","aliases":["A-181346550","CVE-2021-0596"],"modified":"2026-09-18T15:47:37.392928379Z","published":"2021-07-01T00:00:00Z","references":[{"type":"ADVISORY","url":"https://source.android.com/security/bulletin/2021-07-01"},{"type":"FIX","url":"https://android.googlesource.com/platform/packages/apps/Nfc/+/61750f1181ace3ca390489599e36f0e3b725afb0"}],"affected":[{"package":{"name":"platform/packages/apps/Nfc","ecosystem":"Android"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"8.1:0"},{"fixed":"8.1:2021-07-01"}]}],"versions":["8.1"],"ecosystem_specific":{"severity":"High","spl":"2021-07-01","types":["ID"],"vanir_signatures":[{"signature_version":"v1","source":"https://android.googlesource.com/platform/packages/apps/Nfc/+/9732971aeda19c42e35355bbfacd81ade884ebe9","target":{"file":"nci/jni/extns/pn54x/src/mifare/phNxpExtns_MifareStd.c"},"deprecated":false,"digest":{"line_hashes":["2884847135485000758411603062137112485","211031454079573566250835353966381290903","168448207663940346394757902052089912696","169785102641856338326886928989804399309","173057411138899605570235583465545219128","52376486751754460832414206509296816762","11790136434654728879528561461751803502"],"threshold":0.9},"id":"ASB-A-181346550-8d3615b1","signature_type":"Line"},{"deprecated":false,"digest":{"function_hash":"262160023557380663008511136770307698610","length":2269},"id":"ASB-A-181346550-dc3e02c2","signature_type":"Function","signature_version":"v1","source":"https://android.googlesource.com/platform/packages/apps/Nfc/+/9732971aeda19c42e35355bbfacd81ade884ebe9","target":{"file":"nci/jni/extns/pn54x/src/mifare/phNxpExtns_MifareStd.c","function":"phNciNfc_RecvMfResp"}}],"fixes":["https://android.googlesource.com/platform/packages/apps/Nfc/+/9732971aeda19c42e35355bbfacd81ade884ebe9"]},"database_specific":{"source":"https://storage.googleapis.com/android-osv/ASB-A-181346550.json"}},{"package":{"name":"platform/packages/apps/Nfc","ecosystem":"Android"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"9:0"},{"fixed":"9:2021-07-01"}]}],"versions":["9"],"ecosystem_specific":{"spl":"2021-07-01","types":["ID"],"vanir_signatures":[{"deprecated":false,"digest":{"length":2276,"function_hash":"72945400507771723778522666653419942626"},"id":"ASB-A-181346550-773fd7db","signature_type":"Function","signature_version":"v1","source":"https://android.googlesource.com/platform/packages/apps/Nfc/+/c39c851616f674edb8d9fa98010768eef3ba1913","target":{"function":"phNciNfc_RecvMfResp","file":"nci/jni/extns/pn54x/src/mifare/phNxpExtns_MifareStd.cpp"}},{"id":"ASB-A-181346550-e7adecfc","match_only_versions":["9"],"signature_type":"Line","signature_version":"v1","source":"https://android.googlesource.com/platform/packages/apps/Nfc/+/c39c851616f674edb8d9fa98010768eef3ba1913","target":{"file":"nci/jni/extns/pn54x/src/mifare/phNxpExtns_MifareStd.cpp"},"deprecated":false,"digest":{"threshold":0.9,"line_hashes":["285685263254089793825752808025112685745","105930852586253385270607355452609178681","305390062134799501162388530095834398612","168448207663940346394757902052089912696","205285000149594638731812375834924927748","52376486751754460832414206509296816762","11790136434654728879528561461751803502"]}}],"fixes":["https://android.googlesource.com/platform/packages/apps/Nfc/+/c39c851616f674edb8d9fa98010768eef3ba1913"],"severity":"High"},"database_specific":{"source":"https://storage.googleapis.com/android-osv/ASB-A-181346550.json"}},{"package":{"name":"platform/packages/apps/Nfc","ecosystem":"Android"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"10:0"},{"fixed":"10:2021-07-01"}]}],"versions":["10"],"ecosystem_specific":{"fixes":["https://android.googlesource.com/platform/packages/apps/Nfc/+/c39c851616f674edb8d9fa98010768eef3ba1913"],"severity":"High","spl":"2021-07-01","types":["ID"],"vanir_signatures":[{"source":"https://android.googlesource.com/platform/packages/apps/Nfc/+/c39c851616f674edb8d9fa98010768eef3ba1913","target":{"file":"nci/jni/extns/pn54x/src/mifare/phNxpExtns_MifareStd.cpp","function":"phNciNfc_RecvMfResp"},"deprecated":false,"digest":{"function_hash":"72945400507771723778522666653419942626","length":2276},"id":"ASB-A-181346550-2d8bb336","signature_type":"Function","signature_version":"v1"},{"digest":{"line_hashes":["285685263254089793825752808025112685745","105930852586253385270607355452609178681","305390062134799501162388530095834398612","168448207663940346394757902052089912696","205285000149594638731812375834924927748","52376486751754460832414206509296816762","11790136434654728879528561461751803502"],"threshold":0.9},"id":"ASB-A-181346550-2f182af9","match_only_versions":["10"],"signature_type":"Line","signature_version":"v1","source":"https://android.googlesource.com/platform/packages/apps/Nfc/+/c39c851616f674edb8d9fa98010768eef3ba1913","target":{"file":"nci/jni/extns/pn54x/src/mifare/phNxpExtns_MifareStd.cpp"},"deprecated":false}]},"database_specific":{"source":"https://storage.googleapis.com/android-osv/ASB-A-181346550.json"}},{"package":{"name":"platform/packages/apps/Nfc","ecosystem":"Android"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"11:0"},{"fixed":"11:2021-07-01"}]}],"versions":["11"],"ecosystem_specific":{"spl":"2021-07-01","types":["ID"],"vanir_signatures":[{"target":{"file":"nci/jni/extns/pn54x/src/mifare/phNxpExtns_MifareStd.cpp","function":"phNciNfc_RecvMfResp"},"deprecated":false,"digest":{"function_hash":"72945400507771723778522666653419942626","length":2276},"id":"ASB-A-181346550-b0805140","signature_type":"Function","signature_version":"v1","source":"https://android.googlesource.com/platform/packages/apps/Nfc/+/c39c851616f674edb8d9fa98010768eef3ba1913"},{"match_only_versions":["11"],"signature_type":"Line","signature_version":"v1","source":"https://android.googlesource.com/platform/packages/apps/Nfc/+/c39c851616f674edb8d9fa98010768eef3ba1913","target":{"file":"nci/jni/extns/pn54x/src/mifare/phNxpExtns_MifareStd.cpp"},"deprecated":false,"digest":{"line_hashes":["285685263254089793825752808025112685745","105930852586253385270607355452609178681","305390062134799501162388530095834398612","168448207663940346394757902052089912696","205285000149594638731812375834924927748","52376486751754460832414206509296816762","11790136434654728879528561461751803502"],"threshold":0.9},"id":"ASB-A-181346550-d9b2325b"}],"fixes":["https://android.googlesource.com/platform/packages/apps/Nfc/+/c39c851616f674edb8d9fa98010768eef3ba1913"],"severity":"High"},"database_specific":{"source":"https://storage.googleapis.com/android-osv/ASB-A-181346550.json"}}],"schema_version":"1.9.0"}