CVE-2025-0096
In handlePollingLoopData of hal_fwlog.cc, there is a possible out of bounds write due to a heap buffer overflow. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.
What each source reports
OSVASB-A-356630194 No score
In handlePollingLoopData of hal_fwlog.cc, there is a possible out of bounds write due to a heap buffer overflow. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.
- Record
ASB-A-356630194- Updated
- 2026-11-05
Affected packages
| Package | Affected | Fixed |
|---|---|---|
platform/hardware/st/nfcAndroid |
15-next:0 up to 15-next:2025-02-01, plus listed versions 15-next |
15-next:2025-02-01 |
platform/hardware/st/nfcAndroid |
15:0 up to 15:2025-02-01, plus listed versions 15 |
15:2025-02-01 |
History
| Recorded | Changed | Sources |
|---|---|---|
| facts | OSV | |
| first indexed | OSV |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2025-0096 is a vulnerability with no CVSS score yet in platform/hardware/st/nfc, published February 1, 2025. No source lists public exploit code. Fixed in platform/hardware/st/nfc 15-next:2025-02-01.