{"id":"PUB-A-221851879","details":"In llcp_dlc_proc_connect_pdu of llcp_dlc.cc, there is a possible out of bounds read due to a missing bounds check. This could lead to local information disclosure from the NFC stack with System execution privileges needed. User interaction is not needed for exploitation.","aliases":["A-221851879","CVE-2022-20198"],"modified":"2026-05-29T15:55:33.750044621Z","published":"2022-06-01T00:00:00Z","references":[{"type":"ADVISORY","url":"https://source.android.com/security/bulletin/2022-06-01"}],"affected":[{"package":{"name":"platform/system/nfc","ecosystem":"Android"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"12L-next:0"},{"fixed":"12L-next:2022-06-01"}]}],"versions":["12L-next"],"ecosystem_specific":{"spl":"2022-06-01","types":["ID"],"severity":"Moderate","vanir_signatures":[{"deprecated":false,"source":"https://android.googlesource.com/platform/system/nfc/+/3bd6b271212523d87b5fa8fffb796fa0f7ea2d5b","target":{"file":"src/nfc/llcp/llcp_dlc.cc"},"id":"PUB-A-221851879-62b6ab3c","match_only_versions":["12L-next"],"digest":{"threshold":0.9,"line_hashes":["118709664554816737621802419049163592235","286163928817953798049638101275702939276","304356395572074232260906006556492480583","129532464675689311367734691749568014801","229273656346315497071703875419135450243","86050258898373323912386669424735882105","329733073279900451231606779072118902045","10769968563030654716280263544134467521","291581543102045189692326982801169633284","217945050101807849232120360322427786126","35088334106378001939677805303070703382"]},"signature_version":"v1","signature_type":"Line"},{"source":"https://android.googlesource.com/platform/system/nfc/+/3bd6b271212523d87b5fa8fffb796fa0f7ea2d5b","deprecated":false,"target":{"file":"src/nfc/llcp/llcp_dlc.cc","function":"llcp_dlc_proc_connect_pdu"},"id":"PUB-A-221851879-ce0699be","match_only_versions":["12L-next"],"digest":{"length":2570,"function_hash":"79833251572700789355548821393694682279"},"signature_version":"v1","signature_type":"Function"}],"fixes":["https://android.googlesource.com/platform/system/nfc/+/3bd6b271212523d87b5fa8fffb796fa0f7ea2d5b"]},"database_specific":{"source":"https://storage.googleapis.com/android-osv/PUB-A-221851879.json"}},{"package":{"name":"platform/system/nfc","ecosystem":"Android"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"12L:0"},{"fixed":"12L:2022-06-01"}]}],"versions":["12L"],"ecosystem_specific":{"spl":"2022-06-01","types":["ID"],"severity":"Moderate","vanir_signatures":[{"source":"https://android.googlesource.com/platform/system/nfc/+/3bd6b271212523d87b5fa8fffb796fa0f7ea2d5b","deprecated":false,"target":{"file":"src/nfc/llcp/llcp_dlc.cc","function":"llcp_dlc_proc_connect_pdu"},"id":"PUB-A-221851879-3ca43e45","signature_version":"v1","digest":{"length":2570,"function_hash":"79833251572700789355548821393694682279"},"match_only_versions":["12L"],"signature_type":"Function"},{"source":"https://android.googlesource.com/platform/system/nfc/+/3bd6b271212523d87b5fa8fffb796fa0f7ea2d5b","deprecated":false,"target":{"file":"src/nfc/llcp/llcp_dlc.cc"},"id":"PUB-A-221851879-ecdc94fa","match_only_versions":["12L"],"digest":{"threshold":0.9,"line_hashes":["118709664554816737621802419049163592235","286163928817953798049638101275702939276","304356395572074232260906006556492480583","129532464675689311367734691749568014801","229273656346315497071703875419135450243","86050258898373323912386669424735882105","329733073279900451231606779072118902045","10769968563030654716280263544134467521","291581543102045189692326982801169633284","217945050101807849232120360322427786126","35088334106378001939677805303070703382"]},"signature_version":"v1","signature_type":"Line"}],"fixes":["https://android.googlesource.com/platform/system/nfc/+/3bd6b271212523d87b5fa8fffb796fa0f7ea2d5b"]},"database_specific":{"source":"https://storage.googleapis.com/android-osv/PUB-A-221851879.json"}}],"schema_version":"1.7.5"}