{"id":"ASB-A-181660091","details":"In phNxpNciHal_process_ext_rsp of phNxpNciHal_ext.cc, there is a possible out of bounds write due to a missing bounds check. This could lead to remote code execution over NFC with no additional execution privileges needed. User interaction is not needed for exploitation.","aliases":["A-181660091","CVE-2021-0930"],"modified":"2026-04-28T15:17:37.552933Z","published":"2021-11-01T00:00:00Z","references":[{"type":"ADVISORY","url":"https://source.android.com/security/bulletin/2021-11-01"},{"type":"FIX","url":"https://android.googlesource.com/platform/hardware/nxp/nfc/+/95e1dd94c3794bd175c3784fb5accfeac18a1787"}],"affected":[{"package":{"name":"platform/hardware/nxp/nfc","ecosystem":"Android"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"9:0"},{"fixed":"9:2021-11-01"}]}],"versions":["9"],"ecosystem_specific":{"severity":"Critical","vanir_signatures":[{"source":"https://android.googlesource.com/platform/hardware/nxp/nfc/+/528b21d3443efd763313a446624ea985f3d46722","digest":{"threshold":0.9,"line_hashes":["99860553623581235138285079328231545367","311109860135954883653537398728919786717","41132790401433254210318606601304368783","38742958951678416004525463072651252691","327045068271184269054905105808831680035","247327466993503976893419637353824382758","87593289755700552119713026055312392844","234271969641130123654654137111502201760","56196240256472743204171193358399311908"]},"signature_type":"Line","signature_version":"v1","deprecated":false,"target":{"file":"halimpl/hal/phNxpNciHal_ext.cc"},"id":"ASB-A-181660091-18d558ed"},{"source":"https://android.googlesource.com/platform/hardware/nxp/nfc/+/528b21d3443efd763313a446624ea985f3d46722","digest":{"function_hash":"42354174637122065909857040280248619789","length":7337},"signature_type":"Function","signature_version":"v1","deprecated":false,"target":{"file":"halimpl/hal/phNxpNciHal_ext.cc","function":"phNxpNciHal_process_ext_rsp"},"id":"ASB-A-181660091-c0c91fc4"}],"spl":"2021-11-01","types":["RCE"],"fixes":["https://android.googlesource.com/platform/hardware/nxp/nfc/+/528b21d3443efd763313a446624ea985f3d46722"]},"database_specific":{"source":"https://storage.googleapis.com/android-osv/ASB-A-181660091.json"}},{"package":{"name":"platform/hardware/nxp/nfc","ecosystem":"Android"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"10:0"},{"fixed":"10:2021-11-01"}]}],"versions":["10"],"ecosystem_specific":{"severity":"Critical","vanir_signatures":[{"source":"https://android.googlesource.com/platform/hardware/nxp/nfc/+/528b21d3443efd763313a446624ea985f3d46722","digest":{"threshold":0.9,"line_hashes":["99860553623581235138285079328231545367","311109860135954883653537398728919786717","41132790401433254210318606601304368783","38742958951678416004525463072651252691","327045068271184269054905105808831680035","247327466993503976893419637353824382758","87593289755700552119713026055312392844","234271969641130123654654137111502201760","56196240256472743204171193358399311908"]},"signature_type":"Line","signature_version":"v1","deprecated":false,"target":{"file":"halimpl/hal/phNxpNciHal_ext.cc"},"id":"ASB-A-181660091-3b51cc58"},{"source":"https://android.googlesource.com/platform/hardware/nxp/nfc/+/528b21d3443efd763313a446624ea985f3d46722","digest":{"function_hash":"42354174637122065909857040280248619789","length":7337},"signature_type":"Function","signature_version":"v1","deprecated":false,"target":{"file":"halimpl/hal/phNxpNciHal_ext.cc","function":"phNxpNciHal_process_ext_rsp"},"id":"ASB-A-181660091-ec72232b"}],"spl":"2021-11-01","types":["RCE"],"fixes":["https://android.googlesource.com/platform/hardware/nxp/nfc/+/528b21d3443efd763313a446624ea985f3d46722"]},"database_specific":{"source":"https://storage.googleapis.com/android-osv/ASB-A-181660091.json"}},{"package":{"name":"platform/hardware/nxp/nfc","ecosystem":"Android"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"11:0"},{"fixed":"11:2021-11-01"}]}],"versions":["11"],"ecosystem_specific":{"severity":"Critical","vanir_signatures":[{"source":"https://android.googlesource.com/platform/hardware/nxp/nfc/+/528b21d3443efd763313a446624ea985f3d46722","digest":{"threshold":0.9,"line_hashes":["99860553623581235138285079328231545367","311109860135954883653537398728919786717","41132790401433254210318606601304368783","38742958951678416004525463072651252691","327045068271184269054905105808831680035","247327466993503976893419637353824382758","87593289755700552119713026055312392844","234271969641130123654654137111502201760","56196240256472743204171193358399311908"]},"signature_type":"Line","signature_version":"v1","deprecated":false,"target":{"file":"halimpl/hal/phNxpNciHal_ext.cc"},"id":"ASB-A-181660091-33041a05"},{"source":"https://android.googlesource.com/platform/hardware/nxp/nfc/+/528b21d3443efd763313a446624ea985f3d46722","digest":{"function_hash":"42354174637122065909857040280248619789","length":7337},"signature_type":"Function","signature_version":"v1","deprecated":false,"target":{"file":"halimpl/hal/phNxpNciHal_ext.cc","function":"phNxpNciHal_process_ext_rsp"},"id":"ASB-A-181660091-63450e29"}],"spl":"2021-11-01","types":["RCE"],"fixes":["https://android.googlesource.com/platform/hardware/nxp/nfc/+/528b21d3443efd763313a446624ea985f3d46722"]},"database_specific":{"source":"https://storage.googleapis.com/android-osv/ASB-A-181660091.json"}},{"package":{"name":"platform/hardware/nxp/nfc","ecosystem":"Android"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"12:0"},{"fixed":"12:2021-11-01"}]}],"versions":["12"],"ecosystem_specific":{"severity":"Critical","vanir_signatures":[{"source":"https://android.googlesource.com/platform/hardware/nxp/nfc/+/1f58061034c8dbf14843d94a2ee8f70f4692d158","digest":{"function_hash":"71352292464839372914490855974666762429","length":7876},"signature_type":"Function","signature_version":"v1","deprecated":false,"target":{"file":"pn8x/halimpl/hal/phNxpNciHal_ext.cc","function":"phNxpNciHal_process_ext_rsp"},"id":"ASB-A-181660091-2eecf33f"},{"source":"https://android.googlesource.com/platform/hardware/nxp/nfc/+/1f58061034c8dbf14843d94a2ee8f70f4692d158","digest":{"threshold":0.9,"line_hashes":["99860553623581235138285079328231545367","311109860135954883653537398728919786717","41132790401433254210318606601304368783","38742958951678416004525463072651252691","327045068271184269054905105808831680035","247327466993503976893419637353824382758","87593289755700552119713026055312392844","234271969641130123654654137111502201760","56196240256472743204171193358399311908"]},"signature_type":"Line","signature_version":"v1","deprecated":false,"target":{"file":"pn8x/halimpl/hal/phNxpNciHal_ext.cc"},"id":"ASB-A-181660091-94fac09a"}],"spl":"2021-11-01","types":["RCE"],"fixes":["https://android.googlesource.com/platform/hardware/nxp/nfc/+/1f58061034c8dbf14843d94a2ee8f70f4692d158"]},"database_specific":{"source":"https://storage.googleapis.com/android-osv/ASB-A-181660091.json"}}],"schema_version":"1.7.5"}