Beveiligingsadvies

CVE-2023-35671

CVE-kwetsbaarheidsdetails - eXtreme Datacenter Security Operations

Gepubliceerd 2023-09-11 20:09:53
Laatst bijgewerkt 2024-09-26 14:34:53
Toegewezen door google_android
CVSS-score geen score
Status PUBLISHED

Beschrijving

In onHostEmulationData of HostEmulationManager.java, there is a possible way for a general purpose NFC reader to read the full card number and expiry details when the device is in locked screen mode due to a logic error in the code. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation.