{"id":"ASB-A-522376080","details":"In stpropnci_process_std of stpropnci_std.cc, there is a possible memory safety issue due to a missing bounds check. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.","aliases":["A-522376080","CVE-2026-58823"],"modified":"2026-09-09T15:15:54.249544283Z","published":"2026-09-01T00:00:00Z","references":[{"type":"ADVISORY","url":"https://source.android.com/security/bulletin/2026-09-01"}],"affected":[{"package":{"name":"platform/hardware/st/nfc","ecosystem":"Android"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"17-next:0"},{"fixed":"17-next:2026-09-01"}]}],"versions":["17-next"],"ecosystem_specific":{"types":["EoP"],"vanir_signatures":[{"digest":{"line_hashes":["336732368967199200473969057376172564613","274204379239738338470749423880619071006","60507852778922621733235969457514015032","248023826389437380432432795785863641086","147517829825420363254114033661471249104","96955097241474769523896417404200672253","235270641724948836935338584147380676369","322584451111897561877707245940283691287","218715121412007040239404492831600826296","238028658042003054231947704135674370325","19242727262446347785528157386970691326","216860994750841078031031168952677853977","68055808558396590433297394597304551377","101342900596981767159321466503418547874","200448462302387494896315092898340885438"],"threshold":0.9},"id":"ASB-A-522376080-47fee072","signature_type":"Line","signature_version":"v1","source":"https://android.googlesource.com/platform/hardware/st/nfc/+/95123eb7e9429abbc05cc574007e1007ffc26bed","target":{"file":"libstpropnci/src/stpropnci_std.cc"},"deprecated":false},{"signature_version":"v1","source":"https://android.googlesource.com/platform/hardware/st/nfc/+/95123eb7e9429abbc05cc574007e1007ffc26bed","target":{"file":"libstpropnci/src/stpropnci_std.cc","function":"stpropnci_process_std"},"deprecated":false,"digest":{"function_hash":"3707116624033872267884619596308229912","length":19154},"id":"ASB-A-522376080-da124a89","signature_type":"Function"}],"fixes":["https://android.googlesource.com/platform/hardware/st/nfc/+/95123eb7e9429abbc05cc574007e1007ffc26bed"],"severity":"Critical","spl":"2026-09-01"},"database_specific":{"source":"https://storage.googleapis.com/android-osv/ASB-A-522376080.json"}},{"package":{"name":"platform/hardware/st/nfc","ecosystem":"Android"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"17:0"},{"fixed":"17:2026-09-01"}]}],"versions":["17"],"ecosystem_specific":{"spl":"2026-09-01","types":["EoP"],"vanir_signatures":[{"deprecated":false,"digest":{"function_hash":"3707116624033872267884619596308229912","length":19154},"id":"ASB-A-522376080-6f2833c5","signature_type":"Function","signature_version":"v1","source":"https://android.googlesource.com/platform/hardware/st/nfc/+/6a80e802cc153b0d24109ad7fec53fd5a7fda664","target":{"function":"stpropnci_process_std","file":"libstpropnci/src/stpropnci_std.cc"}},{"signature_version":"v1","source":"https://android.googlesource.com/platform/hardware/st/nfc/+/6a80e802cc153b0d24109ad7fec53fd5a7fda664","target":{"file":"libstpropnci/src/stpropnci_std.cc"},"deprecated":false,"digest":{"line_hashes":["336732368967199200473969057376172564613","274204379239738338470749423880619071006","60507852778922621733235969457514015032","248023826389437380432432795785863641086","147517829825420363254114033661471249104","96955097241474769523896417404200672253","235270641724948836935338584147380676369","322584451111897561877707245940283691287","218715121412007040239404492831600826296","238028658042003054231947704135674370325","19242727262446347785528157386970691326","216860994750841078031031168952677853977","68055808558396590433297394597304551377","101342900596981767159321466503418547874","200448462302387494896315092898340885438"],"threshold":0.9},"id":"ASB-A-522376080-ccd47e07","signature_type":"Line"}],"fixes":["https://android.googlesource.com/platform/hardware/st/nfc/+/6a80e802cc153b0d24109ad7fec53fd5a7fda664"],"severity":"Critical"},"database_specific":{"source":"https://storage.googleapis.com/android-osv/ASB-A-522376080.json"}}],"schema_version":"1.9.0"}