Track vulnerabilities like this one. Sign up free to get alerted when software you use is affected.
4.4

Google Android NFC driver may reveal local data

CVE-2021-0541 · published 5 years ago
Summary

The NFC driver used in Google Android devices can read data it shouldn’t because it fails to check the size of incoming information. This could allow someone with access to the device to see internal details without any user interaction. Apply the latest software update from Google to fix the issue.

What to do
  • Update google platform/hardware/nxp/nfc to version 11:2021-06-01.
Affected software
Ecosystem VendorProductAffected versions
Android google platform/hardware/nxp/nfc >= 11:0, < 11:2021-06-01
Fix: upgrade to 11:2021-06-01
– google android 11.0
cpe:2.3:o:google:android:11.0:*:*:*:*:*:*:*
Original advisory text
In phNxpNciHal_ext_process_nfc_init_rsp of phNxpNciHal_ext.cc, there is a possible out of bounds read due to a missing bounds check. This could lead to local information disclosure in the NFC serve...
In phNxpNciHal_ext_process_nfc_init_rsp of phNxpNciHal_ext.cc, there is a possible out of bounds read due to a missing bounds check. This could lead to local information disclosure in the NFC server with System execution privileges needed. User interaction is not needed for exploitation.
References
Severity
4.4 Medium
Exploitation
<1% chance of attack within 30 days
Type
CWE-125Out-of-bounds Read
Timeline
Published1 Jun 2021
Updated26 Oct 2026
First seen8 Sep 2026
Sources
PUB-A-169258455 · OSV
CVE-2021-0541 · NVD
Track software like this
Free during beta