CVE-2021-0930

CVSS 3.1: 8.8 high
EPSS: <1%p43
Published: Dec 15, 2021 · Dec 15, 2021
Modified: Jun 17, 2026

Analyze CVE-2021-0930 with Vani AIImpact, affected versions, exploitation status, mitigations and detection

Description · NVD

In phNxpNciHal_process_ext_rsp of phNxpNciHal_ext.cc, there is a possible out of bounds write due to a missing bounds check. This could lead to remote code execution over NFC with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-10 Android-11 Android-12 Android-9Android ID: A-181660091

Vendors: google

Products: android

Weakness: CWE-787

Vector: CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

NVD CVE.org GitHub PoCs EPSS (0.5%)

In the news

2 stories

Google fixes actively exploited Zero

Security AffairsNov 3, 06:31 UTC · Nov 3, 2021Exploit / PoCExploitedCVE-2021-1048 CVE-2021-0918 CVE-2021-0930+33

Google Warns of New Android 0-Day Vulnerability Under Active Targeted Attacks

The Hacker NewsNov 3, 05:20 UTC · Nov 3, 2021VulnerabilityExploitedCVE-2021-1048 CVE-2021-0918 CVE-2021-0930+81