CVE-2026-95400: Android/:unknown: vulnerability

Q: What level of access does an attacker need to exploit this issue?

The issue is described as allowing local escalation of privilege with no additional execution privileges needed. User interaction is not required.

Q: What component should defenders investigate when assessing exposure?

The affected code is StNfc_hal_write in hal_st21nfc.cc, which indicates the ST21 NFC HAL implementation. The provided data identifies Android but does not specify affected versions or devices.

Published Nov 1, 2026

Updated

In StNfchalwrite of halst21nfc.cc, there is a possible way to trigger an out of bounds write into global memory due to an incorrect bounds check. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.

Affected Software

1 affected componentFixes available

android/:unknown:>=:0<:2026-11-05

:2026-11-05

Event History

Nov 1, 2026

Advisory Published

via OSV·12:00 AM

Data Sourced

via OSV·12:00 AM

DescriptionAffected Software

Frequently Asked Questions

What level of access does an attacker need to exploit this issue?

The issue is described as allowing local escalation of privilege with no additional execution privileges needed. User interaction is not required.

What component should defenders investigate when assessing exposure?

The affected code is StNfc_hal_write in hal_st21nfc.cc, which indicates the ST21 NFC HAL implementation. The provided data identifies Android but does not specify affected versions or devices.

CVE-2026-95400: Android/:unknown: vulnerability

Affected Software

Event History

Frequently Asked Questions

What level of access does an attacker need to exploit this issue?

What component should defenders investigate when assessing exposure?

Company

Resources

Contact

Frequently Asked Questions

What level of access does an attacker need to exploit this issue?

What component should defenders investigate when assessing exposure?