{"id":"ASB-A-230356196","details":"In phNxpNciHal_write_unlocked of phNxpNciHal.cc, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.","aliases":["A-230356196","CVE-2022-20462"],"modified":"2026-09-18T15:47:37.392928379Z","published":"2022-11-01T00:00:00Z","references":[{"type":"ADVISORY","url":"https://source.android.com/security/bulletin/2022-11-01"},{"type":"FIX","url":"https://android.googlesource.com/platform/hardware/nxp/nfc/+/4ef6287d7b4d2f9857ca3faa1c79f070cbd80e06"}],"affected":[{"package":{"name":"platform/hardware/nxp/nfc","ecosystem":"Android"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"10:0"},{"fixed":"10:2022-11-01"}]}],"versions":["10"],"ecosystem_specific":{"vanir_signatures":[{"digest":{"function_hash":"95941805404000749890334167924536138770","length":7162},"id":"ASB-A-230356196-2b426fc1","signature_type":"Function","signature_version":"v1","source":"https://android.googlesource.com/platform/hardware/nxp/nfc/+/a0c461b91a67f6ee0e86f856bcea2bdac2318491","target":{"file":"halimpl/hal/phNxpNciHal_ext.cc","function":"phNxpNciHal_write_ext"},"deprecated":false},{"deprecated":false,"digest":{"line_hashes":["219055300527710120337293274866049803551","336381885887554992179558876792283641179","57139778833048232178722579575282040841","191085082137101845790661836300778798488"],"threshold":0.9},"id":"ASB-A-230356196-a07b1aa5","signature_type":"Line","signature_version":"v1","source":"https://android.googlesource.com/platform/hardware/nxp/nfc/+/a0c461b91a67f6ee0e86f856bcea2bdac2318491","target":{"file":"halimpl/hal/phNxpNciHal_ext.cc"}}],"fixes":["https://android.googlesource.com/platform/hardware/nxp/nfc/+/a0c461b91a67f6ee0e86f856bcea2bdac2318491"],"severity":"High","spl":"2022-11-01","types":["EoP"]},"database_specific":{"source":"https://storage.googleapis.com/android-osv/ASB-A-230356196.json"}},{"package":{"name":"platform/hardware/nxp/nfc","ecosystem":"Android"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"11:0"},{"fixed":"11:2022-11-01"}]}],"versions":["11"],"ecosystem_specific":{"spl":"2022-11-01","types":["EoP"],"vanir_signatures":[{"deprecated":false,"digest":{"function_hash":"95941805404000749890334167924536138770","length":7162},"id":"ASB-A-230356196-11865510","signature_type":"Function","signature_version":"v1","source":"https://android.googlesource.com/platform/hardware/nxp/nfc/+/a0c461b91a67f6ee0e86f856bcea2bdac2318491","target":{"file":"halimpl/hal/phNxpNciHal_ext.cc","function":"phNxpNciHal_write_ext"}},{"signature_type":"Line","signature_version":"v1","source":"https://android.googlesource.com/platform/hardware/nxp/nfc/+/a0c461b91a67f6ee0e86f856bcea2bdac2318491","target":{"file":"halimpl/hal/phNxpNciHal_ext.cc"},"deprecated":false,"digest":{"threshold":0.9,"line_hashes":["219055300527710120337293274866049803551","336381885887554992179558876792283641179","57139778833048232178722579575282040841","191085082137101845790661836300778798488"]},"id":"ASB-A-230356196-25735f29"}],"fixes":["https://android.googlesource.com/platform/hardware/nxp/nfc/+/a0c461b91a67f6ee0e86f856bcea2bdac2318491"],"severity":"High"},"database_specific":{"source":"https://storage.googleapis.com/android-osv/ASB-A-230356196.json"}},{"package":{"name":"platform/hardware/nxp/nfc","ecosystem":"Android"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"12:0"},{"fixed":"12:2022-11-01"}]}],"versions":["12"],"ecosystem_specific":{"types":["EoP"],"vanir_signatures":[{"digest":{"line_hashes":["219055300527710120337293274866049803551","336381885887554992179558876792283641179","57139778833048232178722579575282040841","191085082137101845790661836300778798488"],"threshold":0.9},"id":"ASB-A-230356196-486fd4fb","signature_type":"Line","signature_version":"v1","source":"https://android.googlesource.com/platform/hardware/nxp/nfc/+/9b103dd005ba3b4a33d54518e879010254d897ae","target":{"file":"snxxx/halimpl/hal/phNxpNciHal_ext.cc"},"deprecated":false},{"target":{"file":"pn8x/halimpl/hal/phNxpNciHal_ext.cc","function":"phNxpNciHal_write_ext"},"deprecated":false,"digest":{"function_hash":"70202436915826428778370366148075471606","length":7169},"id":"ASB-A-230356196-b5c90b9d","signature_type":"Function","signature_version":"v1","source":"https://android.googlesource.com/platform/hardware/nxp/nfc/+/9b103dd005ba3b4a33d54518e879010254d897ae"},{"target":{"function":"phNxpNciHal_write_ext","file":"snxxx/halimpl/hal/phNxpNciHal_ext.cc"},"deprecated":false,"digest":{"function_hash":"105225332814135071589178724913404180392","length":7356},"id":"ASB-A-230356196-b5fed546","signature_type":"Function","signature_version":"v1","source":"https://android.googlesource.com/platform/hardware/nxp/nfc/+/9b103dd005ba3b4a33d54518e879010254d897ae"},{"target":{"file":"pn8x/halimpl/hal/phNxpNciHal_ext.cc"},"deprecated":false,"digest":{"threshold":0.9,"line_hashes":["219055300527710120337293274866049803551","336381885887554992179558876792283641179","57139778833048232178722579575282040841","191085082137101845790661836300778798488"]},"id":"ASB-A-230356196-f404a935","signature_type":"Line","signature_version":"v1","source":"https://android.googlesource.com/platform/hardware/nxp/nfc/+/9b103dd005ba3b4a33d54518e879010254d897ae"}],"fixes":["https://android.googlesource.com/platform/hardware/nxp/nfc/+/9b103dd005ba3b4a33d54518e879010254d897ae"],"severity":"High","spl":"2022-11-01"},"database_specific":{"source":"https://storage.googleapis.com/android-osv/ASB-A-230356196.json"}},{"package":{"name":"platform/hardware/nxp/nfc","ecosystem":"Android"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"12L:0"},{"fixed":"12L:2022-11-01"}]}],"versions":["12L"],"ecosystem_specific":{"severity":"High","spl":"2022-11-01","types":["EoP"],"vanir_signatures":[{"id":"ASB-A-230356196-0587a633","signature_type":"Line","signature_version":"v1","source":"https://android.googlesource.com/platform/hardware/nxp/nfc/+/9b103dd005ba3b4a33d54518e879010254d897ae","target":{"file":"pn8x/halimpl/hal/phNxpNciHal_ext.cc"},"deprecated":false,"digest":{"line_hashes":["219055300527710120337293274866049803551","336381885887554992179558876792283641179","57139778833048232178722579575282040841","191085082137101845790661836300778798488"],"threshold":0.9}},{"source":"https://android.googlesource.com/platform/hardware/nxp/nfc/+/9b103dd005ba3b4a33d54518e879010254d897ae","target":{"function":"phNxpNciHal_write_ext","file":"snxxx/halimpl/hal/phNxpNciHal_ext.cc"},"deprecated":false,"digest":{"function_hash":"105225332814135071589178724913404180392","length":7356},"id":"ASB-A-230356196-7015178c","signature_type":"Function","signature_version":"v1"},{"digest":{"line_hashes":["219055300527710120337293274866049803551","336381885887554992179558876792283641179","57139778833048232178722579575282040841","191085082137101845790661836300778798488"],"threshold":0.9},"id":"ASB-A-230356196-77485ea1","signature_type":"Line","signature_version":"v1","source":"https://android.googlesource.com/platform/hardware/nxp/nfc/+/9b103dd005ba3b4a33d54518e879010254d897ae","target":{"file":"snxxx/halimpl/hal/phNxpNciHal_ext.cc"},"deprecated":false},{"deprecated":false,"digest":{"length":7169,"function_hash":"70202436915826428778370366148075471606"},"id":"ASB-A-230356196-e88d2d93","signature_type":"Function","signature_version":"v1","source":"https://android.googlesource.com/platform/hardware/nxp/nfc/+/9b103dd005ba3b4a33d54518e879010254d897ae","target":{"file":"pn8x/halimpl/hal/phNxpNciHal_ext.cc","function":"phNxpNciHal_write_ext"}}],"fixes":["https://android.googlesource.com/platform/hardware/nxp/nfc/+/9b103dd005ba3b4a33d54518e879010254d897ae"]},"database_specific":{"source":"https://storage.googleapis.com/android-osv/ASB-A-230356196.json"}},{"package":{"name":"platform/hardware/nxp/nfc","ecosystem":"Android"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"13:0"},{"fixed":"13:2022-11-01"}]}],"versions":["13"],"ecosystem_specific":{"spl":"2022-11-01","types":["EoP"],"vanir_signatures":[{"target":{"file":"snxxx/halimpl/hal/phNxpNciHal_ext.cc"},"deprecated":false,"digest":{"threshold":0.9,"line_hashes":["219055300527710120337293274866049803551","336381885887554992179558876792283641179","57139778833048232178722579575282040841","191085082137101845790661836300778798488"]},"id":"ASB-A-230356196-5b3c07de","signature_type":"Line","signature_version":"v1","source":"https://android.googlesource.com/platform/hardware/nxp/nfc/+/9b103dd005ba3b4a33d54518e879010254d897ae"},{"target":{"function":"phNxpNciHal_write_ext","file":"snxxx/halimpl/hal/phNxpNciHal_ext.cc"},"deprecated":false,"digest":{"function_hash":"105225332814135071589178724913404180392","length":7356},"id":"ASB-A-230356196-6c0dec57","signature_type":"Function","signature_version":"v1","source":"https://android.googlesource.com/platform/hardware/nxp/nfc/+/9b103dd005ba3b4a33d54518e879010254d897ae"},{"signature_version":"v1","source":"https://android.googlesource.com/platform/hardware/nxp/nfc/+/9b103dd005ba3b4a33d54518e879010254d897ae","target":{"file":"pn8x/halimpl/hal/phNxpNciHal_ext.cc","function":"phNxpNciHal_write_ext"},"deprecated":false,"digest":{"function_hash":"70202436915826428778370366148075471606","length":7169},"id":"ASB-A-230356196-cb6360f1","signature_type":"Function"},{"signature_type":"Line","signature_version":"v1","source":"https://android.googlesource.com/platform/hardware/nxp/nfc/+/9b103dd005ba3b4a33d54518e879010254d897ae","target":{"file":"pn8x/halimpl/hal/phNxpNciHal_ext.cc"},"deprecated":false,"digest":{"threshold":0.9,"line_hashes":["219055300527710120337293274866049803551","336381885887554992179558876792283641179","57139778833048232178722579575282040841","191085082137101845790661836300778798488"]},"id":"ASB-A-230356196-f63627da"}],"fixes":["https://android.googlesource.com/platform/hardware/nxp/nfc/+/9b103dd005ba3b4a33d54518e879010254d897ae"],"severity":"High"},"database_specific":{"source":"https://storage.googleapis.com/android-osv/ASB-A-230356196.json"}}],"schema_version":"1.9.0"}