{"id":"ASB-A-268038643","details":"In onHostEmulationData of HostEmulationManager.java, there is a possible way for a general purpose NFC reader to read the full card number and expiry details when the device is in locked screen mode due to a logic error in the code. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation.","aliases":["A-268038643","CVE-2023-35671"],"modified":"2026-09-17T16:10:43.690857626Z","published":"2023-09-01T00:00:00Z","references":[{"type":"ADVISORY","url":"https://source.android.com/security/bulletin/2023-09-01"},{"type":"FIX","url":"https://android.googlesource.com/platform/packages/apps/Nfc/+/745632835f3d97513a9c2a96e56e1dc06c4e4176"}],"affected":[{"package":{"name":"platform/packages/apps/Nfc","ecosystem":"Android"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"13-next:0"},{"fixed":"13-next:2023-09-01"}]}],"versions":["13-next"],"ecosystem_specific":{"fixes":["https://android.googlesource.com/platform/packages/apps/Nfc/+/6cb53d963d376b97963120a4d2c7df961789e428"],"severity":"High","spl":"2023-09-01","types":["ID"],"vanir_signatures":[{"deprecated":false,"digest":{"line_hashes":["110866618968501505513047877639112891999","221764726489805107389971049563589762627","278520023814604683377314502770623374671","45428150385889769144377600164922333789"],"threshold":0.9},"id":"ASB-A-268038643-78ee6475","signature_type":"Line","signature_version":"v1","source":"https://android.googlesource.com/platform/packages/apps/Nfc/+/6cb53d963d376b97963120a4d2c7df961789e428","target":{"file":"src/com/android/nfc/cardemulation/HostEmulationManager.java"}},{"signature_version":"v1","source":"https://android.googlesource.com/platform/packages/apps/Nfc/+/6cb53d963d376b97963120a4d2c7df961789e428","target":{"file":"src/com/android/nfc/NfcService.java"},"deprecated":false,"digest":{"line_hashes":["287829365925445715483659298781676756817","93922054408343538861188962430576834619","199062318457883682300576972194368110861"],"threshold":0.9},"id":"ASB-A-268038643-f00b2907","signature_type":"Line"},{"source":"https://android.googlesource.com/platform/packages/apps/Nfc/+/6cb53d963d376b97963120a4d2c7df961789e428","target":{"file":"src/com/android/nfc/cardemulation/HostEmulationManager.java","function":"onHostEmulationData"},"deprecated":false,"digest":{"length":3419,"function_hash":"282346893729420854136991953993589179214"},"id":"ASB-A-268038643-f84a981c","signature_type":"Function","signature_version":"v1"}]},"database_specific":{"source":"https://storage.googleapis.com/android-osv/ASB-A-268038643.json"}},{"package":{"name":"platform/packages/apps/Nfc","ecosystem":"Android"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"11:0"},{"fixed":"11:2023-09-01"}]}],"versions":["11"],"ecosystem_specific":{"types":["ID"],"vanir_signatures":[{"deprecated":false,"digest":{"threshold":0.9,"line_hashes":["271055080462231680351012234498051702355","111552660683889881621406641232615389006","268906614407820728310099806307650203101","296109978503100678768439480874051096449","202336758225234101879251178291874369964"]},"id":"ASB-A-268038643-2b17aca5","signature_type":"Line","signature_version":"v1","source":"https://android.googlesource.com/platform/packages/apps/Nfc/+/d6d8f79fd8d605b3cb460895a8e3a11bcf0c22b0","target":{"file":"src/com/android/nfc/cardemulation/HostEmulationManager.java"}},{"source":"https://android.googlesource.com/platform/packages/apps/Nfc/+/d6d8f79fd8d605b3cb460895a8e3a11bcf0c22b0","target":{"file":"src/com/android/nfc/cardemulation/HostEmulationManager.java","function":"onHostEmulationData"},"deprecated":false,"digest":{"length":2867,"function_hash":"38986059855720312268682811721479119787"},"id":"ASB-A-268038643-d608cf36","signature_type":"Function","signature_version":"v1"},{"signature_version":"v1","source":"https://android.googlesource.com/platform/packages/apps/Nfc/+/d6d8f79fd8d605b3cb460895a8e3a11bcf0c22b0","target":{"file":"src/com/android/nfc/NfcService.java"},"deprecated":false,"digest":{"line_hashes":["287829365925445715483659298781676756817","93922054408343538861188962430576834619","199062318457883682300576972194368110861"],"threshold":0.9},"id":"ASB-A-268038643-ee5c0865","signature_type":"Line"}],"fixes":["https://android.googlesource.com/platform/packages/apps/Nfc/+/d6d8f79fd8d605b3cb460895a8e3a11bcf0c22b0"],"severity":"High","spl":"2023-09-01"},"database_specific":{"source":"https://storage.googleapis.com/android-osv/ASB-A-268038643.json"}},{"package":{"name":"platform/packages/apps/Nfc","ecosystem":"Android"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"12:0"},{"fixed":"12:2023-09-01"}]}],"versions":["12"],"ecosystem_specific":{"types":["ID"],"vanir_signatures":[{"deprecated":false,"digest":{"line_hashes":["287829365925445715483659298781676756817","93922054408343538861188962430576834619","199062318457883682300576972194368110861"],"threshold":0.9},"id":"ASB-A-268038643-24a45f01","signature_type":"Line","signature_version":"v1","source":"https://android.googlesource.com/platform/packages/apps/Nfc/+/d6d8f79fd8d605b3cb460895a8e3a11bcf0c22b0","target":{"file":"src/com/android/nfc/NfcService.java"}},{"signature_type":"Line","signature_version":"v1","source":"https://android.googlesource.com/platform/packages/apps/Nfc/+/d6d8f79fd8d605b3cb460895a8e3a11bcf0c22b0","target":{"file":"src/com/android/nfc/cardemulation/HostEmulationManager.java"},"deprecated":false,"digest":{"threshold":0.9,"line_hashes":["271055080462231680351012234498051702355","111552660683889881621406641232615389006","268906614407820728310099806307650203101","296109978503100678768439480874051096449","202336758225234101879251178291874369964"]},"id":"ASB-A-268038643-69c6ab67"},{"digest":{"function_hash":"38986059855720312268682811721479119787","length":2867},"id":"ASB-A-268038643-9bd9d88f","signature_type":"Function","signature_version":"v1","source":"https://android.googlesource.com/platform/packages/apps/Nfc/+/d6d8f79fd8d605b3cb460895a8e3a11bcf0c22b0","target":{"file":"src/com/android/nfc/cardemulation/HostEmulationManager.java","function":"onHostEmulationData"},"deprecated":false}],"fixes":["https://android.googlesource.com/platform/packages/apps/Nfc/+/d6d8f79fd8d605b3cb460895a8e3a11bcf0c22b0"],"severity":"High","spl":"2023-09-01"},"database_specific":{"source":"https://storage.googleapis.com/android-osv/ASB-A-268038643.json"}},{"package":{"name":"platform/packages/apps/Nfc","ecosystem":"Android"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"12L:0"},{"fixed":"12L:2023-09-01"}]}],"versions":["12L"],"ecosystem_specific":{"spl":"2023-09-01","types":["ID"],"vanir_signatures":[{"source":"https://android.googlesource.com/platform/packages/apps/Nfc/+/be02c1590cd11eb6c045bac7c30bd3ec8c22e80c","target":{"file":"src/com/android/nfc/cardemulation/HostEmulationManager.java","function":"onHostEmulationData"},"deprecated":false,"digest":{"function_hash":"339381844574271533070577803431177444728","length":3210},"id":"ASB-A-268038643-0d9e4128","signature_type":"Function","signature_version":"v1"},{"digest":{"line_hashes":["110866618968501505513047877639112891999","221764726489805107389971049563589762627","278520023814604683377314502770623374671","45428150385889769144377600164922333789"],"threshold":0.9},"id":"ASB-A-268038643-366dfb0f","signature_type":"Line","signature_version":"v1","source":"https://android.googlesource.com/platform/packages/apps/Nfc/+/be02c1590cd11eb6c045bac7c30bd3ec8c22e80c","target":{"file":"src/com/android/nfc/cardemulation/HostEmulationManager.java"},"deprecated":false},{"source":"https://android.googlesource.com/platform/packages/apps/Nfc/+/be02c1590cd11eb6c045bac7c30bd3ec8c22e80c","target":{"file":"src/com/android/nfc/NfcService.java"},"deprecated":false,"digest":{"line_hashes":["287829365925445715483659298781676756817","93922054408343538861188962430576834619","199062318457883682300576972194368110861"],"threshold":0.9},"id":"ASB-A-268038643-36a40dd0","signature_type":"Line","signature_version":"v1"}],"fixes":["https://android.googlesource.com/platform/packages/apps/Nfc/+/be02c1590cd11eb6c045bac7c30bd3ec8c22e80c"],"severity":"High"},"database_specific":{"source":"https://storage.googleapis.com/android-osv/ASB-A-268038643.json"}},{"package":{"name":"platform/packages/apps/Nfc","ecosystem":"Android"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"13:0"},{"fixed":"13:2023-09-01"}]}],"versions":["13"],"ecosystem_specific":{"severity":"High","spl":"2023-09-01","types":["ID"],"vanir_signatures":[{"digest":{"line_hashes":["110866618968501505513047877639112891999","221764726489805107389971049563589762627","278520023814604683377314502770623374671","45428150385889769144377600164922333789"],"threshold":0.9},"id":"ASB-A-268038643-404d49c5","signature_type":"Line","signature_version":"v1","source":"https://android.googlesource.com/platform/packages/apps/Nfc/+/6cb53d963d376b97963120a4d2c7df961789e428","target":{"file":"src/com/android/nfc/cardemulation/HostEmulationManager.java"},"deprecated":false},{"source":"https://android.googlesource.com/platform/packages/apps/Nfc/+/6cb53d963d376b97963120a4d2c7df961789e428","target":{"file":"src/com/android/nfc/cardemulation/HostEmulationManager.java","function":"onHostEmulationData"},"deprecated":false,"digest":{"length":3419,"function_hash":"282346893729420854136991953993589179214"},"id":"ASB-A-268038643-6c98d179","signature_type":"Function","signature_version":"v1"},{"digest":{"threshold":0.9,"line_hashes":["287829365925445715483659298781676756817","93922054408343538861188962430576834619","199062318457883682300576972194368110861"]},"id":"ASB-A-268038643-9258a251","signature_type":"Line","signature_version":"v1","source":"https://android.googlesource.com/platform/packages/apps/Nfc/+/6cb53d963d376b97963120a4d2c7df961789e428","target":{"file":"src/com/android/nfc/NfcService.java"},"deprecated":false}],"fixes":["https://android.googlesource.com/platform/packages/apps/Nfc/+/6cb53d963d376b97963120a4d2c7df961789e428"]},"database_specific":{"source":"https://storage.googleapis.com/android-osv/ASB-A-268038643.json"}}],"schema_version":"1.9.0"}