piwi

3 exploits Active since Apr 2019
CVE-2019-2034 GITHUB HIGH c WORKING POC
Android 7.0-9 - Local Privilege Escalation via Integer Overflow in rw_i93_sm_read_ndef
In rw_i93_sm_read_ndef of rw_i93.cc, there is a possible out-of-bounds write due to an integer overflow. This could lead to local escalation of privilege in the NFC process with no additional execution privileges needed. User interaction is needed for exploitation. Product: Android. Versions: Android-7.0 Android-7.1.1 Android-7.1.2 Android-8.0 Android-8.1 Android-9. Android ID: A-122035770.
8 stars
CVSS 7.8
CVE-2019-2099 GITHUB HIGH c WORKING POC
Android 7.0-9 - Out-of-Bounds Write in nfa_rw_store_ndef_rx_buf
In nfa_rw_store_ndef_rx_buf of nfa_rw_act.cc, there is a possible out-of-bound write due to a missing bounds check. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is needed for exploitation. Product: Android. Versions: Android-7.0 Android-7.1.1 Android-7.1.2 Android-8.0 Android-8.1 Android-9. Android ID: A-123583388.
8 stars
CVSS 7.8
CVE-2021-34600 INTHEWILD MEDIUM WORKING POC
Telenot CompasX <32.0 - Info Disclosure
Telenot CompasX versions prior to 32.0 use a weak seed for random number generation leading to predictable AES keys used in the NFC tags used for local authorization of users. This may lead to total loss of trustworthiness of the installation.
CVSS 5.5