CVE-2023-21241: Out of Bounds Write in libnfc-nci
Summary
CVE-2023-21241: In rw_i93_send_to_upper of rw_i93.cc, there is a possible out of bounds write due to an integer overflow. Affects platform/system/nfc across 5 version ranges.
>= 11:0, < 11:2023-07-01
>= 12:0, < 12:2023-07-01
>= 12L:0, < 12L:2023-07-01
>= 13:0, < 13:2023-07-01
>= 13-next:0, < 13-next:2023-07-01
Fixed in 13-next:2023-07-01. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Background
The package under scrutiny is platform/system/nfc, which is a component of the Android ecosystem. It provides functionality for Near Field Communication (NFC) capabilities on Android devices. NFC allows for communication between devices in close proximity, enabling various applications such as contactless payments and file sharing. The libnfc-nci library is responsible for handling NFC communication protocols. However, a vulnerability has been discovered in the rw_i93_send_to_upper function of the rw_i93.cc file, which can lead to an out of bounds write due to an integer overflow.
Vulnerability Detail
The vulnerability in rw_i93_send_to_upper arises from an integer overflow, which can result in an out of bounds write. An attacker could exploit this vulnerability to escalate their privileges locally without requiring additional execution privileges. Notably, user interaction is not necessary for exploitation. The impact of this vulnerability could be severe, potentially allowing an attacker to gain unauthorized access or perform unauthorized actions on the affected device.
How To Fix
Minimum fixed version
13-next:2023-07-01
This is the first release that contains the fix.
Tip — Not sure which version your app runs? Vulert can match this fix to it. Scan free →
Workaround
No workaround has been provided for this vulnerability. It is necessary to apply the official fix by updating the platform/system/nfc package to a non-vulnerable version.
Conclusion
In conclusion, the platform/system/nfc package in the Android ecosystem is vulnerable to an out of bounds write vulnerability in the rw_i93_send_to_upper function of the libnfc-nci library. This vulnerability can be exploited to locally escalate privileges without requiring additional execution privileges. It is crucial to update the package to a fixed version to mitigate the risk of exploitation. For further support on vulnerability remediation, please contact DevNack.com.
See every vulnerability recorded for platform/system/nfc →
FAQ
The vulnerability could allow an attacker to locally escalate their privileges without requiring additional execution privileges. This could potentially lead to unauthorized access or unauthorized actions on the affected device.
No, user interaction is not needed for exploitation of this vulnerability.
Versions 11, 12, 12L, and 13 of the Android ecosystem are affected by this vulnerability.
The recommended mitigation is to update the platform/system/nfc package to a fixed version.
More information about the fix can be found in the official Android platform/system/nfc documentation.
Related vulnerabilities
Recent vulnerabilities recorded for platform/system/nfc.
