EUVD-2026-74024
GHSA-89fm-29gh-m87g
Severity by source
AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Local low-privilege access triggers ST NCI buffer overflow with no user interaction, achieving full system compromise on affected hardware.
Primary rating from Vendor (android).
CVSS VectorVendor: android
Lifecycle Timeline
2DescriptionCVE.org
In stpropnci_process_std of stpropnci_std.cc, there is a possible memory safety issue due to a missing bounds check. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.
AnalysisAI
Local privilege escalation in Android 17's STMicroelectronics NCI (NFC Controller Interface) driver allows a low-privileged local process to gain full system-level control via a missing bounds check in stpropnci_process_std() of stpropnci_std.cc. The missing input validation triggers a CWE-120 buffer overflow, achieving C:H/I:H/A:H impact with no user interaction required. …
Unlock full vulnerability intelligence
- Risk assessment & exploitation conditions
- Attack chain visualization
- Remediation with exact patch versions
- Threat intelligence from 22 sources
- Personal watchlist & email alerts
Free forever · No credit card required
Attack ChainAIDerived
Hypothetical attack flow derived from CVE metadata
Vulnerability AssessmentAI
| Exploitation | Requires a local attacker with low-privilege code execution on an Android 17 device that physically incorporates an STMicroelectronics NFC controller - devices using NXP or other NFC controllers do not include `stpropnci_std.cc` and are not affected. … Additional conditions and limiting factors are described in the full assessment. |
| Risk Assessment | The CVSS 7.8 vector (AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H) accurately characterizes the risk: exploitation is limited to local attackers with at least low-privilege code execution, reducing the attack surface compared to network-exploitable vulnerabilities. … Full risk analysis with EPSS, KEV, and SSVC signal comparison available after sign-in. |
| Exploit Scenario | Full exploit scenario with step-by-step reproduction available after sign-in. |
| Remediation | Apply the Android September 2026 Security Bulletin patches (security patch level 2026-09-01 or later), available from Google and OEM device partners via the advisory at https://source.android.com/docs/security/bulletin/2026/2026-09-01. … Detailed patch versions, workarounds, and compensating controls in full report. |
Recommended ActionAI
Within 24 hours: inventory all Android 17 devices and identify which contain the vulnerable STMicroelectronics NCI driver; document whether NFC functionality is operationally critical. …
Sign in for detailed remediation steps and compensating controls.
Threat intelligence, references, and detailed analysis are available after sign-in.
Same weakness CWE-120 – Classic Buffer Overflow
View allSame technique Privilege Escalation
View allShare
External POC / Exploit Code
Leaving vuln.today