)]}'
{
  "commit": "ebcfc2564b95916fdcbc99582c947ba2e9586ea6",
  "tree": "a61b7a1ca89f43e26bdd9a164c6be7c9efdc3461",
  "parents": [
    "2ad8845ad77ea509c99df902f115580c4118cc35"
  ],
  "author": {
    "name": "Kyle Hsiao",
    "email": "kylehsiao@google.com",
    "time": "Mon May 18 11:51:11 2026 +0000"
  },
  "committer": {
    "name": "Android Build Coastguard Worker",
    "email": "android-build-coastguard-worker@google.com",
    "time": "Thu Jul 09 19:07:20 2026 -0700"
  },
  "message": "Fix Heap OOBW in nfa_t4tnfcee_store_rx_buf()\n\nImplement bounds check in nfa_t4tnfcee_store_rx_buf to prevent heap\nout-of-bounds write when reading data from T4T NFCEE.\n\nAlso fix adjacent vulnerabilities in nfa_nfcee_act.cc:\n- Fix uint16 underflow in nfa_t4tnfcee_store_cc_info.\n- Fix pointer underflow in nfa_t4tnfcee_check_sw.\n- Add NULL check for p_dataBuf allocation.\n\nBug: 508390497\nTest: R/W T4T tags\nFlag: EXEMPT CVE_FIX\n(cherry picked from commit dcbd63d5d860243c331b8308f2192bdaefddb65f)\nCherrypick-From: https://googleplex-android-review.googlesource.com/q/commit:760cb019461de52a31da9d038735abdd18b1e64e\nMerged-In: I6c39b1f2dbf8ab6aa3d2d8ddc73abecc4a72598a\nChange-Id: I6c39b1f2dbf8ab6aa3d2d8ddc73abecc4a72598a\n",
  "tree_diff": [
    {
      "type": "modify",
      "old_id": "af978aaba4d50d22434b9ff6497e7d6fc9c5c260",
      "old_mode": 33188,
      "old_path": "libnfc-nci/src/nfa/include/nfa_nfcee_int.h",
      "new_id": "11d58628dfcf1adabbaa2493c6c56e1ce4f4329e",
      "new_mode": 33188,
      "new_path": "libnfc-nci/src/nfa/include/nfa_nfcee_int.h"
    },
    {
      "type": "modify",
      "old_id": "e32d0e1be53d11021189df33f894e1123131e2ba",
      "old_mode": 33188,
      "old_path": "libnfc-nci/src/nfa/ndefnfcee/t4t/nfa_nfcee_act.cc",
      "new_id": "ed95becf268c4632af3810c4360bee66332637e9",
      "new_mode": 33188,
      "new_path": "libnfc-nci/src/nfa/ndefnfcee/t4t/nfa_nfcee_act.cc"
    }
  ]
}