CVE-2023-20905: Out-of-Bounds Write in Mfc_Transceive of libnfc_nci_jni.so
Summary
CVE-2023-20905: In Mfc_Transceive of phNxpExtns_MifareStd.cpp, there is a possible out of bounds write due to a missing bounds check. Affects platform/packages/apps/Nfc versions >= 10:0, < 10:2023-01-01. Fixed in 10:2023-01-01. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Background
The package under scrutiny is platform/packages/apps/Nfc, which is a component of the Android ecosystem. It is responsible for handling Near Field Communication (NFC) functionality on Android devices. NFC allows for communication between devices in close proximity, enabling various applications such as contactless payments, data transfer, and access control. This vulnerability specifically affects the Mfc_Transceive function in the phNxpExtns_MifareStd.cpp file of the libnfc_nci_jni.so library.
Vulnerability Detail
The vulnerability arises due to a missing bounds check in the Mfc_Transceive function. This flaw can be exploited to perform an out-of-bounds write, potentially leading to local escalation of privilege. The vulnerability does not require any additional execution privileges or user interaction for exploitation. An attacker could leverage this vulnerability to gain elevated privileges on the affected Android device. The vulnerability was introduced in Android version 10 and has been fixed in a subsequent update.
How To Fix
Minimum fixed version
10:2023-01-01
This is the first release that contains the fix.
Tip — Not sure which version your app runs? Vulert can match this fix to it. Scan free →
Workaround
There is no specific workaround mentioned for this vulnerability.
Conclusion
In conclusion, the platform/packages/apps/Nfc package in the Android ecosystem is vulnerable to an out-of-bounds write in the Mfc_Transceive function. This vulnerability can be exploited to gain elevated privileges on the affected Android device. It is recommended to update the package to a version that includes the fix to mitigate this vulnerability. For further support on vulnerability remediation, you can contact DevNack.com.
See every vulnerability recorded for platform/packages/apps/Nfc →
FAQ
This vulnerability could allow an attacker to gain elevated privileges on the affected Android device, potentially leading to unauthorized access, data theft, or further compromise of the device.
No, this vulnerability does not require any user interaction for exploitation.
This vulnerability was introduced in Android version 10.0 and has been fixed in a subsequent update.
There are no known instances of this vulnerability being exploited in the wild at the time of this report.
Yes, you can use Vulert's playground at Vulert Scanner to check if your application is affected by this vulnerability. Vulert monitors and alerts in real-time for open-source vulnerabilities without requiring access to the code or installation.
Related vulnerabilities
Recent vulnerabilities recorded for platform/packages/apps/Nfc.
