Out-of-Bounds Write Vulnerability in Android NFC Process

CVE-2019-2034

Summary

An out-of-bounds write vulnerability exists in the Android NFC process due to an integer overflow in the rw_i93_sm_read_ndef function of rw_i93.cc. This issue can potentially allow for local privilege escalation without requiring additional execution privileges. Exploitation of this vulnerability necessitates user interaction, posing a risk if a user is manipulated into interacting with a crafted NFC tag or message. It's crucial for users on affected Android versions to remain vigilant and apply security updates.

References