CVE-2021-0930

—

CVSS 3.1

8.8 high

EPSS

<1%p43

Published

Dec 15, 2021 (Dec 15, 2021)

Modified

Jun 17, 2026

Description

In phNxpNciHal_process_ext_rsp of phNxpNciHal_ext.cc, there is a possible out of bounds write due to a missing bounds check. This could lead to remote code execution over NFC with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-10 Android-11 Android-12 Android-9Android ID: A-181660091

Vendors: google
Products: android
Weakness: CWE-787
Vector: CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

NVD CVE.org GitHub PoCs EPSS (0.5%)

In the news2 stories

Google fixes actively exploited Zero

Security AffairsNov 3, 06:31 UTC · Nov 3, 2021Exploit / PoC in the wildCVE-2021-1048 CVE-2021-0918 CVE-2021-0930+3 CVEs

Google Warns of New Android 0-Day Vulnerability Under Active Targeted Attacks

The Hacker NewsNov 3, 05:20 UTC · Nov 3, 2021Vulnerability in the wildCVE-2021-1048 CVE-2021-0918 CVE-2021-0930+8 CVEs