CVE-2026-95400
In StNfc_hal_write of hal_st21nfc.cc, there is a possible way to trigger an out of bounds write into global memory due to an incorrect bounds check. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.
What each source reports
OSVPUB-A-522374536 No score
In StNfc_hal_write of hal_st21nfc.cc, there is a possible way to trigger an out of bounds write into global memory due to an incorrect bounds check. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.
- Record
PUB-A-522374536- Updated
- 2026-11-05
Affected packages
| Package | Affected | Fixed |
|---|---|---|
:unknown:Android |
:0 up to :2026-11-05, plus listed versions Device specific |
:2026-11-05 |
History
| Recorded | Changed | Sources |
|---|---|---|
| facts | OSV | |
| first indexed | OSV |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2026-95400 is a vulnerability with no CVSS score yet in :unknown:, published November 1, 2026. No source lists public exploit code. Fixed in :unknown: :2026-11-05.