{"id":"ASB-A-522376080","details":"In stpropnci_process_std of stpropnci_std.cc, there is a possible memory safety issue due to a missing bounds check. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.","aliases":["A-522376080","CVE-2026-58823"],"modified":"2026-11-10T17:02:23.040266809Z","published":"2026-09-01T00:00:00Z","references":[{"type":"ADVISORY","url":"https://source.android.com/security/bulletin/2026-09-01"},{"type":"FIX","url":"https://android.googlesource.com/platform/hardware/st/nfc/+/8a18f3300dd54ba02492f3351a539a91ca6f7fa7"}],"affected":[{"package":{"name":"platform/hardware/st/nfc","ecosystem":"Android"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"17-next:0"},{"fixed":"17-next:2026-09-01"}]}],"versions":["17-next"],"ecosystem_specific":{"vanir_signatures":[{"id":"ASB-A-522376080-47fee072","signature_type":"Line","signature_version":"v1","source":"https://android.googlesource.com/platform/hardware/st/nfc/+/95123eb7e9429abbc05cc574007e1007ffc26bed","target":{"file":"libstpropnci/src/stpropnci_std.cc"},"deprecated":false,"digest":{"line_hashes":["336732368967199200473969057376172564613","274204379239738338470749423880619071006","60507852778922621733235969457514015032","248023826389437380432432795785863641086","147517829825420363254114033661471249104","96955097241474769523896417404200672253","235270641724948836935338584147380676369","322584451111897561877707245940283691287","218715121412007040239404492831600826296","238028658042003054231947704135674370325","19242727262446347785528157386970691326","216860994750841078031031168952677853977","68055808558396590433297394597304551377","101342900596981767159321466503418547874","200448462302387494896315092898340885438"],"threshold":0.9}},{"id":"ASB-A-522376080-da124a89","signature_type":"Function","signature_version":"v1","source":"https://android.googlesource.com/platform/hardware/st/nfc/+/95123eb7e9429abbc05cc574007e1007ffc26bed","target":{"file":"libstpropnci/src/stpropnci_std.cc","function":"stpropnci_process_std"},"deprecated":false,"digest":{"function_hash":"3707116624033872267884619596308229912","length":19154}}],"fixes":["https://android.googlesource.com/platform/hardware/st/nfc/+/95123eb7e9429abbc05cc574007e1007ffc26bed"],"severity":"Critical","spl":"2026-09-01","types":["EoP"]},"database_specific":{"source":"https://storage.googleapis.com/android-osv/ASB-A-522376080.json"}},{"package":{"name":"platform/hardware/st/nfc","ecosystem":"Android"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"17:0"},{"fixed":"17:2026-09-01"}]}],"versions":["17"],"ecosystem_specific":{"severity":"Critical","spl":"2026-09-01","types":["EoP"],"vanir_signatures":[{"signature_type":"Function","signature_version":"v1","source":"https://android.googlesource.com/platform/hardware/st/nfc/+/6a80e802cc153b0d24109ad7fec53fd5a7fda664","target":{"file":"libstpropnci/src/stpropnci_std.cc","function":"stpropnci_process_std"},"deprecated":false,"digest":{"function_hash":"3707116624033872267884619596308229912","length":19154},"id":"ASB-A-522376080-6f2833c5"},{"signature_type":"Line","signature_version":"v1","source":"https://android.googlesource.com/platform/hardware/st/nfc/+/6a80e802cc153b0d24109ad7fec53fd5a7fda664","target":{"file":"libstpropnci/src/stpropnci_std.cc"},"deprecated":false,"digest":{"threshold":0.9,"line_hashes":["336732368967199200473969057376172564613","274204379239738338470749423880619071006","60507852778922621733235969457514015032","248023826389437380432432795785863641086","147517829825420363254114033661471249104","96955097241474769523896417404200672253","235270641724948836935338584147380676369","322584451111897561877707245940283691287","218715121412007040239404492831600826296","238028658042003054231947704135674370325","19242727262446347785528157386970691326","216860994750841078031031168952677853977","68055808558396590433297394597304551377","101342900596981767159321466503418547874","200448462302387494896315092898340885438"]},"id":"ASB-A-522376080-ccd47e07"}],"fixes":["https://android.googlesource.com/platform/hardware/st/nfc/+/6a80e802cc153b0d24109ad7fec53fd5a7fda664"]},"database_specific":{"source":"https://storage.googleapis.com/android-osv/ASB-A-522376080.json"}}],"schema_version":"1.9.2"}