{"id":"ASB-A-181660091","details":"In phNxpNciHal_process_ext_rsp of phNxpNciHal_ext.cc, there is a possible out of bounds write due to a missing bounds check. This could lead to remote code execution over NFC with no additional execution privileges needed. User interaction is not needed for exploitation.","aliases":["A-181660091","CVE-2021-0930"],"modified":"2026-09-18T15:47:37.392928379Z","published":"2021-11-01T00:00:00Z","references":[{"type":"ADVISORY","url":"https://source.android.com/security/bulletin/2021-11-01"},{"type":"FIX","url":"https://android.googlesource.com/platform/hardware/nxp/nfc/+/95e1dd94c3794bd175c3784fb5accfeac18a1787"}],"affected":[{"package":{"name":"platform/hardware/nxp/nfc","ecosystem":"Android"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"9:0"},{"fixed":"9:2021-11-01"}]}],"versions":["9"],"ecosystem_specific":{"spl":"2021-11-01","types":["RCE"],"vanir_signatures":[{"source":"https://android.googlesource.com/platform/hardware/nxp/nfc/+/528b21d3443efd763313a446624ea985f3d46722","target":{"file":"halimpl/hal/phNxpNciHal_ext.cc"},"deprecated":false,"digest":{"line_hashes":["99860553623581235138285079328231545367","311109860135954883653537398728919786717","41132790401433254210318606601304368783","38742958951678416004525463072651252691","327045068271184269054905105808831680035","247327466993503976893419637353824382758","87593289755700552119713026055312392844","234271969641130123654654137111502201760","56196240256472743204171193358399311908"],"threshold":0.9},"id":"ASB-A-181660091-18d558ed","signature_type":"Line","signature_version":"v1"},{"signature_version":"v1","source":"https://android.googlesource.com/platform/hardware/nxp/nfc/+/528b21d3443efd763313a446624ea985f3d46722","target":{"file":"halimpl/hal/phNxpNciHal_ext.cc","function":"phNxpNciHal_process_ext_rsp"},"deprecated":false,"digest":{"length":7337,"function_hash":"42354174637122065909857040280248619789"},"id":"ASB-A-181660091-c0c91fc4","signature_type":"Function"}],"fixes":["https://android.googlesource.com/platform/hardware/nxp/nfc/+/528b21d3443efd763313a446624ea985f3d46722"],"severity":"Critical"},"database_specific":{"source":"https://storage.googleapis.com/android-osv/ASB-A-181660091.json"}},{"package":{"name":"platform/hardware/nxp/nfc","ecosystem":"Android"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"10:0"},{"fixed":"10:2021-11-01"}]}],"versions":["10"],"ecosystem_specific":{"types":["RCE"],"vanir_signatures":[{"id":"ASB-A-181660091-3b51cc58","signature_type":"Line","signature_version":"v1","source":"https://android.googlesource.com/platform/hardware/nxp/nfc/+/528b21d3443efd763313a446624ea985f3d46722","target":{"file":"halimpl/hal/phNxpNciHal_ext.cc"},"deprecated":false,"digest":{"line_hashes":["99860553623581235138285079328231545367","311109860135954883653537398728919786717","41132790401433254210318606601304368783","38742958951678416004525463072651252691","327045068271184269054905105808831680035","247327466993503976893419637353824382758","87593289755700552119713026055312392844","234271969641130123654654137111502201760","56196240256472743204171193358399311908"],"threshold":0.9}},{"deprecated":false,"digest":{"function_hash":"42354174637122065909857040280248619789","length":7337},"id":"ASB-A-181660091-ec72232b","signature_type":"Function","signature_version":"v1","source":"https://android.googlesource.com/platform/hardware/nxp/nfc/+/528b21d3443efd763313a446624ea985f3d46722","target":{"file":"halimpl/hal/phNxpNciHal_ext.cc","function":"phNxpNciHal_process_ext_rsp"}}],"fixes":["https://android.googlesource.com/platform/hardware/nxp/nfc/+/528b21d3443efd763313a446624ea985f3d46722"],"severity":"Critical","spl":"2021-11-01"},"database_specific":{"source":"https://storage.googleapis.com/android-osv/ASB-A-181660091.json"}},{"package":{"name":"platform/hardware/nxp/nfc","ecosystem":"Android"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"11:0"},{"fixed":"11:2021-11-01"}]}],"versions":["11"],"ecosystem_specific":{"severity":"Critical","spl":"2021-11-01","types":["RCE"],"vanir_signatures":[{"signature_type":"Line","signature_version":"v1","source":"https://android.googlesource.com/platform/hardware/nxp/nfc/+/528b21d3443efd763313a446624ea985f3d46722","target":{"file":"halimpl/hal/phNxpNciHal_ext.cc"},"deprecated":false,"digest":{"line_hashes":["99860553623581235138285079328231545367","311109860135954883653537398728919786717","41132790401433254210318606601304368783","38742958951678416004525463072651252691","327045068271184269054905105808831680035","247327466993503976893419637353824382758","87593289755700552119713026055312392844","234271969641130123654654137111502201760","56196240256472743204171193358399311908"],"threshold":0.9},"id":"ASB-A-181660091-33041a05"},{"digest":{"length":7337,"function_hash":"42354174637122065909857040280248619789"},"id":"ASB-A-181660091-63450e29","signature_type":"Function","signature_version":"v1","source":"https://android.googlesource.com/platform/hardware/nxp/nfc/+/528b21d3443efd763313a446624ea985f3d46722","target":{"function":"phNxpNciHal_process_ext_rsp","file":"halimpl/hal/phNxpNciHal_ext.cc"},"deprecated":false}],"fixes":["https://android.googlesource.com/platform/hardware/nxp/nfc/+/528b21d3443efd763313a446624ea985f3d46722"]},"database_specific":{"source":"https://storage.googleapis.com/android-osv/ASB-A-181660091.json"}},{"package":{"name":"platform/hardware/nxp/nfc","ecosystem":"Android"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"12:0"},{"fixed":"12:2021-11-01"}]}],"versions":["12"],"ecosystem_specific":{"vanir_signatures":[{"id":"ASB-A-181660091-2eecf33f","signature_type":"Function","signature_version":"v1","source":"https://android.googlesource.com/platform/hardware/nxp/nfc/+/1f58061034c8dbf14843d94a2ee8f70f4692d158","target":{"file":"pn8x/halimpl/hal/phNxpNciHal_ext.cc","function":"phNxpNciHal_process_ext_rsp"},"deprecated":false,"digest":{"length":7876,"function_hash":"71352292464839372914490855974666762429"}},{"signature_type":"Line","signature_version":"v1","source":"https://android.googlesource.com/platform/hardware/nxp/nfc/+/1f58061034c8dbf14843d94a2ee8f70f4692d158","target":{"file":"pn8x/halimpl/hal/phNxpNciHal_ext.cc"},"deprecated":false,"digest":{"line_hashes":["99860553623581235138285079328231545367","311109860135954883653537398728919786717","41132790401433254210318606601304368783","38742958951678416004525463072651252691","327045068271184269054905105808831680035","247327466993503976893419637353824382758","87593289755700552119713026055312392844","234271969641130123654654137111502201760","56196240256472743204171193358399311908"],"threshold":0.9},"id":"ASB-A-181660091-94fac09a"}],"fixes":["https://android.googlesource.com/platform/hardware/nxp/nfc/+/1f58061034c8dbf14843d94a2ee8f70f4692d158"],"severity":"Critical","spl":"2021-11-01","types":["RCE"]},"database_specific":{"source":"https://storage.googleapis.com/android-osv/ASB-A-181660091.json"}}],"schema_version":"1.9.0"}