Detections
Analytics
CVE-2021-0870
high
Description
In RW_SetActivatedTagType of rw_main.cc, there is possible memory corruption due to a race condition. This could lead to remote code execution with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-9 Android-10 Android-11 Android-8.1Android ID: A-192472262
References
https://www.cisa.gov/news-events/ics-advisories/icsa-24-074-07
https://source.android.com/security/bulletin/2021-10-01
http://packetstormsecurity.com/files/164704/Android-NFC-Type-Confusion.html