CVE-2022-42542
published 2022-12-16CVE-2022-42542: In phNxpNciHal_core_initialized of phNxpNciHal.cc, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation…
PriorityP429medium6.7CVSS 3.1
AVLACLPRHUINSUCHIHAH
EPSS
0.17%
6.3th percentile
In phNxpNciHal_core_initialized of phNxpNciHal.cc, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-13Android ID: A-231445184
Affected
3 ranges
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| android | — | — | |
| android | — | — | |
| platform | hardware_nxp_nfc | >= 13:0 < 13:2022-12-01 | 13:2022-12-01 |
Stop checking back — get the weekly exploitation signal.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
VulDB
Google Android 13.0 phNxpNciHal.cc phNxpNciHal_core_initialized out-of-bounds write (A-231445184 / EUVD-2022-45609)
vuldb·2026-08-18·CVSS 6.7
CVE-2022-42542 [MEDIUM] Google Android 13.0 phNxpNciHal.cc phNxpNciHal_core_initialized out-of-bounds write (A-231445184 / EUVD-2022-45609)
A vulnerability identified as critical has been detected in Google Android 13.0. Affected is the function phNxpNciHal_core_initialized of the file phNxpNciHal.cc. This manipulation causes out-of-bounds write.
This vulnerability is tracked as CVE-2022-42542. The attack is restricted to local execution. No exploit exists.
It is recommended to apply a patch to fix this issue.
GHSA
GHSA-gfmw-c2xw-hvjj: In phNxpNciHal_core_initialized of phNxpNciHal
ghsa_unreviewed·2022-12-21
CVE-2022-42542 [MEDIUM] CWE-787 GHSA-gfmw-c2xw-hvjj: In phNxpNciHal_core_initialized of phNxpNciHal
In phNxpNciHal_core_initialized of phNxpNciHal.cc, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-13Android ID: A-231445184
OSV
CVE-2022-42542: In phNxpNciHal_core_initialized of phNxpNciHal
osv·2022-12-01
CVE-2022-42542 CVE-2022-42542: In phNxpNciHal_core_initialized of phNxpNciHal
In phNxpNciHal_core_initialized of phNxpNciHal.cc, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation.
No detection rules found.
No public exploits indexed.
No writeups or analysis indexed.
2022-12-16
Published