Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2022-20339 State: PUBLISHED Published: 2022-08-11T15:30:26 Last Updated: 2024-08-03T02:10:44.651Z Vendors: n/a Products: Android Problem Types: Information disclosure Description: In Android, there is a possible access of network neighbor table information due to an insecure SEpolicy configuration. This could lead to local information disclosure of network topography with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-13Android ID: A-171572148 Additional Analyst Notes: - CVE Program Container: References: - https://source.android.com/security/bulletin/android-13
CVE ID: CVE-2022-20340 State: PUBLISHED Published: 2022-08-11T15:30:40 Last Updated: 2024-08-03T02:10:44.550Z Vendors: n/a Products: Android Problem Types: Information disclosure Description: In SELinux policy, there is a possible way of inferring which websites are being opened in the browser due to a missing permission check. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-13Android ID: A-166269532 Additional Analyst Notes: - CVE Program Container: References: - https://source.android.com/security/bulletin/android-13
CVE ID: CVE-2022-20341 State: PUBLISHED Published: 2022-08-11T15:30:52 Last Updated: 2024-08-03T02:10:44.766Z Vendors: n/a Products: Android Problem Types: Information disclosure Description: In ConnectivityService, there is a possible bypass of network permissions due to a missing permission check. This could lead to local information disclosure of tethering interfaces with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-13Android ID: A-162952629 Additional Analyst Notes: - CVE Program Container: References: - https://source.android.com/security/bulletin/android-13
CVE ID: CVE-2022-20342 State: PUBLISHED Published: 2022-08-11T15:31:05 Last Updated: 2024-08-03T02:10:44.552Z Vendors: n/a Products: Android Problem Types: Information disclosure Description: In WiFi, there is a possible disclosure of WiFi password to the end user due to an insecure default value. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-13Android ID: A-143534321 Additional Analyst Notes: - CVE Program Container: References: - https://source.android.com/security/bulletin/android-13
CVE ID: CVE-2022-20344 State: PUBLISHED Published: 2022-08-09T20:20:54 Last Updated: 2024-08-03T02:10:44.692Z Vendors: n/a Products: Android Problem Types: Elevation of privilege Description: In stealReceiveChannel of EventThread.cpp, there is a possible way to interfere with process communication due to a race condition. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-10 Android-11 Android-12 Android-12LAndroid ID: A-232541124 Additional Analyst Notes: - CVE Program Container: References: - https://source.android.com/security/bulletin/2022-08-01
CVE ID: CVE-2022-20345 State: PUBLISHED Published: 2022-08-09T20:21:10.000Z Last Updated: 2025-10-20T17:54:21.857Z Vendors: n/a Products: Android Problem Types: Remote code execution Description: In l2cble_process_sig_cmd of l2c_ble.cc, there is a possible out of bounds write due to a missing bounds check. This could lead to remote code execution over Bluetooth with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-12 Android-12LAndroid ID: A-230494481 Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://source.android.com/security/bulletin/2022-08-01
CVE ID: CVE-2022-20346 State: PUBLISHED Published: 2022-08-09T20:21:24.000Z Last Updated: 2025-10-20T17:55:17.947Z Vendors: n/a Products: Android Problem Types: Information disclosure Description: In updateAudioTrackInfoFromESDS_MPEG4Audio of MPEG4Extractor.cpp, there is a possible out of bounds read due to an incorrect bounds check. This could lead to remote information disclosure with no additional execution privileges needed. User interaction is needed for exploitation.Product: AndroidVersions: Android-10 Android-11 Android-12 Android-12LAndroid ID: A-230493653 Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://source.android.com/security/bul
l Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://source.android.com/security/bulletin/2022-08-01
CVE ID: CVE-2022-20347 State: PUBLISHED Published: 2022-08-09T20:21:49.000Z Last Updated: 2025-10-20T17:56:37.857Z Vendors: n/a Products: Android Problem Types: Elevation of privilege Description: In onAttach of ConnectedDeviceDashboardFragment.java, there is a possible permission bypass due to a confused deputy. This could lead to remote escalation of privilege in Bluetooth settings with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-10 Android-11 Android-12 Android-12LAndroid ID: A-228450811 Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://source.android.com/securi
itional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://source.android.com/security/bulletin/2022-08-01
CVE ID: CVE-2022-20348 State: PUBLISHED Published: 2022-08-09T20:22:04 Last Updated: 2024-08-03T02:10:44.625Z Vendors: n/a Products: Android Problem Types: Elevation of privilege Description: In updateState of LocationServicesWifiScanningPreferenceController.java, there is a possible admin restriction bypass due to a missing permission check. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-10 Android-11 Android-12 Android-12LAndroid ID: A-228315529 Additional Analyst Notes: - CVE Program Container: References: - https://source.android.com/security/bulletin/2022-0
529 Additional Analyst Notes: - CVE Program Container: References: - https://source.android.com/security/bulletin/2022-08-01
CVE ID: CVE-2022-20349 State: PUBLISHED Published: 2022-08-09T20:22:17 Last Updated: 2024-08-03T02:10:44.656Z Vendors: n/a Products: Android Problem Types: Elevation of privilege Description: In WifiScanningPreferenceController and BluetoothScanningPreferenceController, there is a possible admin restriction bypass due to a missing permission check. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-10 Android-11 Android-12 Android-12LAndroid ID: A-228315522 Additional Analyst Notes: - CVE Program Container: References: - https://source.android.com/security/bulletin/
228315522 Additional Analyst Notes: - CVE Program Container: References: - https://source.android.com/security/bulletin/2022-08-01
CVE ID: CVE-2022-20350 State: PUBLISHED Published: 2022-08-09T20:22:32.000Z Last Updated: 2025-10-20T17:57:27.175Z Vendors: n/a Products: Android Problem Types: Information disclosure Description: In onCreate of NotificationAccessConfirmationActivity.java, there is a possible way to trick the victim to grant notification access to the wrong app due to improper input validation. This could lead to local information disclosure with User execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-10 Android-11 Android-12 Android-12LAndroid ID: A-228178437 Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: -
id-12LAndroid ID: A-228178437 Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://source.android.com/security/bulletin/2022-08-01
CVE ID: CVE-2022-20351 State: PUBLISHED Published: 2022-10-11T00:00:00 Last Updated: 2024-08-03T02:10:44.472Z Vendors: n/a Products: Android Problem Types: Information disclosure Description: In queryInternal of CallLogProvider.java, there is a possible access to voicemail information due to SQL injection. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-10 Android-11 Android-12 Android-12LAndroid ID: A-224771921 Additional Analyst Notes: - CVE Program Container: References: - https://source.android.com/security/bulletin/2022-10-01
CVE ID: CVE-2022-20352 State: PUBLISHED Published: 2022-08-09T20:22:46 Last Updated: 2024-08-03T02:10:44.490Z Vendors: n/a Products: Android Problem Types: Information disclosure Description: In addProviderRequestListener of LocationManagerService.java, there is a possible way to learn which packages request location information due to a missing permission check. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-12 Android-12LAndroid ID: A-222473855 Additional Analyst Notes: - CVE Program Container: References: - https://source.android.com/security/bulletin/2022-08-
5 Additional Analyst Notes: - CVE Program Container: References: - https://source.android.com/security/bulletin/2022-08-01
CVE ID: CVE-2022-20353 State: PUBLISHED Published: 2022-08-09T20:23:01 Last Updated: 2024-08-03T02:10:44.648Z Vendors: n/a Products: Android Problem Types: Information disclosure Description: In onSaveRingtone of DefaultRingtonePreference.java, there is a possible inappropriate file read due to improper input validation. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-10 Android-11 Android-12 Android-12LAndroid ID: A-221041256 Additional Analyst Notes: - CVE Program Container: References: - https://source.android.com/security/bulletin/2022-08-01
CVE ID: CVE-2022-20354 State: PUBLISHED Published: 2022-08-09T20:23:16 Last Updated: 2024-08-03T02:10:44.600Z Vendors: n/a Products: Android Problem Types: Elevation of privilege Description: In onDefaultNetworkChanged of Vpn.java, there is a possible way to disable VPN due to a logic error in the code. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-11 Android-12 Android-12LAndroid ID: A-219546241 Additional Analyst Notes: - CVE Program Container: References: - https://source.android.com/security/bulletin/2022-08-01
CVE ID: CVE-2022-20355 State: PUBLISHED Published: 2022-08-09T20:23:30 Last Updated: 2024-08-03T02:10:44.525Z Vendors: n/a Products: Android Problem Types: Denial of service Description: In get of PacProxyService.java, there is a possible system service crash due to improper input validation. This could lead to local denial of service with User execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-10 Android-11 Android-12 Android-12LAndroid ID: A-219498290 Additional Analyst Notes: - CVE Program Container: References: - https://source.android.com/security/bulletin/2022-08-01
CVE ID: CVE-2022-20356 State: PUBLISHED Published: 2022-08-09T20:23:45.000Z Last Updated: 2025-09-08T18:44:23.748Z Vendors: n/a Products: Android Problem Types: Elevation of privilege Description: In shouldAllowFgsWhileInUsePermissionLocked of ActiveServices.java, there is a possible way to start foreground service from background due to improper input validation. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-11 Android-12 Android-12LAndroid ID: A-215003903 Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://source.
D: A-215003903 Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://source.android.com/security/bulletin/2022-08-01
CVE ID: CVE-2022-20357 State: PUBLISHED Published: 2022-08-09T20:23:56 Last Updated: 2024-08-03T02:10:44.742Z Vendors: n/a Products: Android Problem Types: Information disclosure Description: In writeToParcel of SurfaceControl.cpp, there is a possible information disclosure due to uninitialized data. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-12 Android-12LAndroid ID: A-214999987 Additional Analyst Notes: - CVE Program Container: References: - https://source.android.com/security/bulletin/2022-08-01
CVE ID: CVE-2022-20358 State: PUBLISHED Published: 2022-08-09T20:24:16.000Z Last Updated: 2025-09-03T19:05:24.540Z Vendors: n/a Products: Android Problem Types: Information disclosure Description: In startSync of AbstractThreadedSyncAdapter.java, there is a possible way to access protected content of content providers due to a missing permission check. This could lead to local information disclosure with User execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-10 Android-11 Android-12 Android-12LAndroid ID: A-203229608 Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://source.android.com
608 Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://source.android.com/security/bulletin/2022-08-01
CVE ID: CVE-2022-20359 State: REJECTED Published: 2022-08-09T20:24:34 Last Updated: 2022-09-06T17:19:03 Description: No description available.
CVE ID: CVE-2022-20360 State: PUBLISHED Published: 2022-08-09T20:24:47.000Z Last Updated: 2025-10-20T17:58:14.031Z Vendors: n/a Products: Android Problem Types: Elevation of privilege Description: In setChecked of SecureNfcPreferenceController.java, there is a missing permission check. This could lead to local escalation of privilege from the guest user with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-10 Android-11 Android-12 Android-12LAndroid ID: A-228314987 Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://source.android.com/security/bulletin/2022-08-01
CVE ID: CVE-2022-20361 State: PUBLISHED Published: 2022-08-09T20:25:00.000Z Last Updated: 2025-08-27T18:46:04.782Z Vendors: n/a Products: Android Problem Types: Elevation of privilege Description: In btif_dm_auth_cmpl_evt of btif_dm.cc, there is a possible vulnerability in Cross-Transport Key Derivation due to Weakness in Bluetooth Standard. This could lead to remote escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-10 Android-11 Android-12 Android-12LAndroid ID: A-231161832 Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://source.android.com
832 Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://source.android.com/security/bulletin/2022-08-01
CVE ID: CVE-2022-20362 State: PUBLISHED Published: 2022-08-11T15:31:19 Last Updated: 2024-08-03T02:10:44.492Z Vendors: n/a Products: Android Problem Types: Remote code execution Description: In Bluetooth, there is a possible out of bounds write due to an integer overflow. This could lead to remote code execution over Bluetooth with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-13Android ID: A-230756082 Additional Analyst Notes: - CVE Program Container: References: - https://source.android.com/security/bulletin/android-13
CVE ID: CVE-2022-20364 State: PUBLISHED Published: 2022-09-14T00:00:00 Last Updated: 2024-08-03T02:10:44.656Z Vendors: n/a Products: Android Problem Types: Elevation of privilege Description: In sysmmu_unmap of TBD, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android kernelAndroid ID: A-233606615References: N/A Additional Analyst Notes: - CVE Program Container: References: - https://source.android.com/security/bulletin/pixel/2022-10-01
CVE ID: CVE-2022-20365 State: PUBLISHED Published: 2022-08-11T14:58:59 Last Updated: 2024-08-03T02:10:44.604Z Vendors: n/a Products: Android Problem Types: Elevation of privilege Description: Product: AndroidVersions: Android kernelAndroid ID: A-229632566References: N/A Additional Analyst Notes: - CVE Program Container: References: - https://source.android.com/security/bulletin/pixel/2022-08-01
CVE ID: CVE-2022-20366 State: PUBLISHED Published: 2022-08-11T14:59:11 Last Updated: 2024-08-03T02:10:44.612Z Vendors: n/a Products: Android Problem Types: Elevation of privilege Description: In ioctl_dpm_clk_update of lwis_ioctl.c, there is a possible out of bounds write due to an integer overflow. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android kernelAndroid ID: A-225877745References: N/A Additional Analyst Notes: - CVE Program Container: References: - https://source.android.com/security/bulletin/pixel/2022-08-01
CVE ID: CVE-2022-20367 State: PUBLISHED Published: 2022-08-11T14:59:24 Last Updated: 2024-08-03T02:10:44.683Z Vendors: n/a Products: Android Problem Types: Elevation of privilege Description: In construct_transaction of lwis_ioctl.c, there is a possible out of bounds write due to an integer overflow. This could lead to local escalation of privilege in the kernel with System execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android kernelAndroid ID: A-225877459References: N/A Additional Analyst Notes: - CVE Program Container: References: - https://source.android.com/security/bulletin/pixel/2022-08-01
CVE ID: CVE-2022-20368 State: PUBLISHED Published: 2022-08-11T14:59:35 Last Updated: 2024-08-03T02:10:44.623Z Vendors: n/a Products: Android Problem Types: Elevation of privilege Description: Product: AndroidVersions: Android kernelAndroid ID: A-224546354References: Upstream kernel Additional Analyst Notes: - CVE Program Container: References: - https://source.android.com/security/bulletin/pixel/2022-08-01
CVE ID: CVE-2022-20369 State: PUBLISHED Published: 2022-08-11T00:00:00 Last Updated: 2024-08-03T02:10:44.612Z Vendors: n/a Products: Android Problem Types: Elevation of privilege Description: In v4l2_m2m_querybuf of v4l2-mem2mem.c, there is a possible out of bounds write due to improper input validation. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android kernelAndroid ID: A-223375145References: Upstream kernel Additional Analyst Notes: - CVE Program Container: References: - https://source.android.com/security/bulletin/pixel/2022-08-01 - https://lists.debian.org/debian-lts-
iner: References: - https://source.android.com/security/bulletin/pixel/2022-08-01 - https://lists.debian.org/debian-lts-announce/2022/12/msg00034.html
CVE ID: CVE-2022-20370 State: PUBLISHED Published: 2022-08-11T15:00:10 Last Updated: 2024-08-03T02:10:44.879Z Vendors: n/a Products: Android Problem Types: Information disclosure Description: Product: AndroidVersions: Android kernelAndroid ID: A-215730643References: N/A Additional Analyst Notes: - CVE Program Container: References: - https://source.android.com/security/bulletin/pixel/2022-08-01
CVE ID: CVE-2022-20371 State: PUBLISHED Published: 2022-08-11T15:00:21 Last Updated: 2024-08-03T02:10:44.843Z Vendors: n/a Products: Android Problem Types: Elevation of privilege Description: In dm_bow_dtr and related functions of dm-bow.c, there is a possible use after free due to a race condition. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android kernelAndroid ID: A-195565510References: Upstream kernel Additional Analyst Notes: - CVE Program Container: References: - https://source.android.com/security/bulletin/pixel/2022-08-01
CVE ID: CVE-2022-20372 State: PUBLISHED Published: 2022-08-11T15:00:36 Last Updated: 2024-08-03T02:10:44.657Z Vendors: n/a Products: Android Problem Types: Elevation of privilege Description: In exynos5_i2c_irq of (TBD), there is a possible out of bounds write due to a use after free. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android kernelAndroid ID: A-195480799References: N/A Additional Analyst Notes: - CVE Program Container: References: - https://source.android.com/security/bulletin/pixel/2022-08-01
CVE ID: CVE-2022-20373 State: PUBLISHED Published: 2022-08-11T15:00:50 Last Updated: 2024-08-03T02:10:44.684Z Vendors: n/a Products: Android Problem Types: Elevation of privilege Description: In st21nfc_loc_set_polaritymode of fc/st21nfc.c, there is a possible use after free due to a race condition. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android kernelAndroid ID: A-208269510References: N/A Additional Analyst Notes: - CVE Program Container: References: - https://source.android.com/security/bulletin/pixel/2022-08-01
CVE ID: CVE-2022-20374 State: REJECTED Published: 2022-08-11T15:01:04 Last Updated: 2022-09-06T22:19:14 Description: No description available.
CVE ID: CVE-2022-20375 State: PUBLISHED Published: 2022-08-11T15:01:15 Last Updated: 2024-08-03T02:10:44.711Z Vendors: n/a Products: Android Problem Types: Denial of service Description: In LteRrcNrProAsnDecode of LteRrcNr_Codec.c, there is a possible out of bounds read due to a missing bounds check. This could lead to remote denial of service with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android kernelAndroid ID: A-180956894References: N/A Additional Analyst Notes: - CVE Program Container: References: - https://source.android.com/security/bulletin/pixel/2022-08-01
CVE ID: CVE-2022-20376 State: PUBLISHED Published: 2022-08-11T15:01:29 Last Updated: 2024-08-03T02:10:44.674Z Vendors: n/a Products: Android Problem Types: Elevation of privilege Description: In trusty_log_seq_start of trusty-log.c, there is a possible use after free due to improper locking. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android kernelAndroid ID: A-216130110References: N/A Additional Analyst Notes: - CVE Program Container: References: - https://source.android.com/security/bulletin/pixel/2022-08-01
CVE ID: CVE-2022-20377 State: PUBLISHED Published: 2022-08-11T15:01:43 Last Updated: 2024-08-03T02:10:44.549Z Vendors: n/a Products: Android Problem Types: Elevation of privilege Description: In TBD of keymaster_ipc.cpp, there is a possible to force gatekeeper, fingerprint, and faceauth to use a known HMAC key. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android kernelAndroid ID: A-222339795References: N/A Additional Analyst Notes: - CVE Program Container: References: - https://source.android.com/security/bulletin/pixel/2022-08-01