CVE-2019-2178

HighCVSS 7.8/10Last modified Jun 17, 2026

Description

In rw_t4t_sm_read_ndef of rw_t4t in Android 7.1.1, 7.1.2, 8.0, 8.1 and 9, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege in the NFC service with no additional execution privileges needed. User interaction is not needed for exploitation.

Metrics

CVSS 3.0 7.8/10CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Weakness enumeration

CWE-787

Affected software

No affected versions have been published.

Timeline

Published: Sep 5, 2019
Last modified: Jun 17, 2026
NVD status: Modified

Related CVEs from 2019

CVE-2019-21795.5In NDEF_MsgValidate of ndef_utils in Android 7.1.1, 7.1.2, 8.0, 8.1 and 9, there is a possible out of bounds read due to an integer overflow CVE-2019-21805.5In ippSetValueTag of ipp.c in Android 8.0, 8.1 and 9, there is a possible out of bounds read due to improper input validation. This could le CVE-2019-21817.8In binder_transaction of binder.c in the Android kernel, there is a possible out of bounds write due to an integer overflow. This could lead CVE-2019-21827.8In the Android kernel in the kernel MMU code there is a possible execution path leaving some kernel text and rodata pages writable. This cou CVE-2019-21835.5In generateServicesMap of RegisteredServicesCache.java, there is a possible account protection bypass due to a caching optimization. This co CVE-2019-21848.8In PV_DecodePredictedIntraDC of dec_pred_intra_dc.cpp, there is a possible out of bounds write due to a missing bounds check. This could lea CVE-2019-21858.8In VlcDequantH263IntraBlock_SH of vlc_dequant.cpp, there is a possible out of bounds write due to a missing bounds check. This could lead to CVE-2019-21868.8In GetMBheader of combined_decode.cpp, there is a possible out of bounds write due to a missing bounds check. This could lead to remote code CVE-2019-21875.5In nfc_ncif_decode_rf_params of nfc_ncif.cc, there is a possible out of bounds read due to an integer underflow. This could lead to local in CVE-2019-21886.4In the Easel driver, there is possible memory corruption due to race conditions. This could lead to local escalation of privilege with Syste CVE-2019-21896.4In the Easel driver, there is possible memory corruption due to race conditions. This could lead to local escalation of privilege with Syste CVE-2019-21904.3In LG's LAF component, there is a possible leak of information in a protected disk partition due to a missing bounds check. This could lead