Loading HuntDB...

GHSA-27vg-mg2m-7qv2

GitHub Security Advisory

⚠ Unreviewed HIGH Has CVE

Advisory Details

In the nfc_hci_cmd_received() function of core.c, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege in the kernel with no additional execution privileges needed. User interaction is not needed for exploitation. Product: Android. Versions: Android kernel. Android ID: A-62679701.

Related CVEs

Key Information

GHSA ID
GHSA-27vg-mg2m-7qv2
Published
May 14, 2022 3:24 AM
Last Modified
May 14, 2022 3:24 AM
CVSS Score
7.5 /10
Primary Ecosystem
Unknown
Primary Package
Unknown
GitHub Reviewed
✗ No

Dataset

Last updated: July 3, 2025 6:26 AM

Data from GitHub Advisory Database. This information is provided for research and educational purposes.