Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2018-9459 State: PUBLISHED Published: 2018-11-06T17:00:00Z Last Updated: 2024-09-16T20:06:56.127Z Vendors: Google Inc. Products: Android Problem Types: Elevation of privilege Description: In Attachment of Attachment.java and getFilePath of EmlAttachmentProvider.java, there is a possible Elevation of Privilege due to a path traversal error. This could lead to a remote escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation. Product: Android Versions: Android-6.0 Android-6.0.1 Android-7.0 Android-7.1.1 Android-7.1.2 Android-8.0 Android-8.1 Android ID: A-66230183. Additional Analyst Notes: - CVE Program Container: Refer
1 Android-7.1.2 Android-8.0 Android-8.1 Android ID: A-66230183. Additional Analyst Notes: - CVE Program Container: References: - https://source.android.com/security/bulletin/2018-08-01 - http://www.securitytracker.com/id/1041432
CVE ID: CVE-2018-9461 State: PUBLISHED Published: 2025-01-17T23:13:16.156Z Last Updated: 2025-03-18T20:34:39.938Z Vendors: Google Products: Android Description: In onAttachFragment of ShareIntentActivity.java, there is a possible way for an app to read files in the messages app due to a race condition. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://source.android.com/security/bulletin/pixel/2018-08-01
CVE ID: CVE-2018-9462 State: PUBLISHED Published: 2024-12-04T23:39:05.744Z Last Updated: 2024-12-05T15:25:07.949Z Vendors: Google Products: Android Description: In store_cmd of ftm4_pdc.c, there is a possible out of bounds write due to an incorrect bounds check. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://source.android.com/security/bulletin/pixel/2018-08-01
CVE ID: CVE-2018-9463 State: PUBLISHED Published: 2024-12-04T23:40:22.862Z Last Updated: 2024-12-05T15:23:30.413Z Vendors: Google Products: Android Description: In sw49408_irq_runtime_engine_debug of touch_sw49408.c, there is a possible out of bounds write due to an incorrect bounds check. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://source.android.com/security/bulletin/pixel/2018-08-01
CVE ID: CVE-2018-9464 State: PUBLISHED Published: 2025-01-17T23:14:03.492Z Last Updated: 2025-03-13T20:45:25.822Z Vendors: Google Products: Android Description: In multiple locations, there is a possible way to read protected files due to a missing permission check. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://source.android.com/security/bulletin/pixel/2018-08-01
CVE ID: CVE-2018-9465 State: PUBLISHED Published: 2018-11-06T17:00:00Z Last Updated: 2024-09-16T23:41:04.670Z Vendors: Google Inc. Products: Android Problem Types: Elevation of privilege Description: In task_get_unused_fd_flags of binder.c, there is a possible memory corruption due to a use after free. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation. Product: Android Versions: Android kernel Android ID: A-69164715 References: Upstream kernel. Additional Analyst Notes: - CVE Program Container: References: - https://source.android.com/security/bulletin/2018-08-01 - http://www.securitytracker.com/id
ram Container: References: - https://source.android.com/security/bulletin/2018-08-01 - http://www.securitytracker.com/id/1041432
CVE ID: CVE-2018-9466 State: PUBLISHED Published: 2024-11-19T22:21:20.706Z Last Updated: 2025-11-03T21:44:11.695Z Vendors: Google Products: Android Description: In the xmlSnprintfElementContent function of valid.c, there is a possible out of bounds write. This could lead to remote escalation of privilege in an unprivileged app with no additional execution privileges needed. User interaction is needed for exploitation. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://source.android.com/security/bulletin/2018-09-01
CVE ID: CVE-2018-9467 State: PUBLISHED Published: 2024-11-19T23:57:44.584Z Last Updated: 2024-11-21T15:33:34.617Z Vendors: Google Products: Android Description: In the getHost() function of UriTest.java, there is the possibility of incorrect web origin determination. This could lead to incorrect security decisions with no additional execution privileges needed. User interaction is not needed for exploitation. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://source.android.com/security/bulletin/2018-09-01
CVE ID: CVE-2018-9468 State: PUBLISHED Published: 2024-11-20T16:51:52.139Z Last Updated: 2024-11-20T19:04:34.956Z Vendors: Google Products: Android Description: In query of DownloadManager.java, there is a possible read/write of arbitrary files due to a permissions bypass. This could lead to local information disclosure and file rewriting with no additional execution privileges needed. User interaction is not needed for exploitation. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://source.android.com/security/bulletin/2018-09-01
CVE ID: CVE-2018-9469 State: PUBLISHED Published: 2024-11-20T16:53:36.233Z Last Updated: 2024-11-20T19:08:05.439Z Vendors: Google Products: Android Description: In multiple functions of ShortcutService.java, there is a possible creation of a spoofed shortcut due to a missing permission check. This could lead to local escalation of privilege in a privileged app with no additional execution privileges needed. User interaction is needed for exploitation. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://source.android.com/security/bulletin/2018-09-01
CVE ID: CVE-2018-9470 State: PUBLISHED Published: 2024-11-20T17:15:09.674Z Last Updated: 2024-11-20T19:00:33.228Z Vendors: Google Products: Android Description: In bff_Scanner_addOutPos of Scanner.c, there is a possible out-of-bounds write due to an incorrect bounds check. This could lead to remote escalation of privilege in an unprivileged app with no additional execution privileges needed. User interaction is needed for exploitation. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://source.android.com/security/bulletin/2018-09-01
CVE ID: CVE-2018-9471 State: PUBLISHED Published: 2024-11-20T17:16:53.353Z Last Updated: 2024-11-20T18:38:12.566Z Vendors: Google Products: Android Description: In the deserialization constructor of NanoAppFilter.java, there is a possible loss of data due to type confusion. This could lead to local escalation of privilege in the system server with no additional execution privileges needed. User interaction is not needed for exploitation. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://source.android.com/security/bulletin/2018-09-01
CVE ID: CVE-2018-9472 State: PUBLISHED Published: 2024-11-20T17:24:01.971Z Last Updated: 2024-11-20T19:08:31.192Z Vendors: Google Products: Android Description: In xmlMemStrdupLoc of xmlmemory.c, there is a possible out-of-bounds write due to an integer overflow. This could lead to remote code execution in an unprivileged process with no additional execution privileges needed. User interaction is needed for exploitation. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://source.android.com/security/bulletin/2018-09-01
CVE ID: CVE-2018-9473 State: PUBLISHED Published: 2018-10-02T19:00:00Z Last Updated: 2024-09-17T04:09:25.363Z Vendors: Google Inc. Products: Android Problem Types: Remote code execution Description: In ihevcd_parse_sei_payload of ihevcd_parse_headers.c, there is a possible out-of-bounds write due to an integer overflow. This could lead to remote code execution with no additional execution privileges needed. User interaction is needed for exploitation. Product: Android Versions: Android-8.0 Android ID: A-65484460 Additional Analyst Notes: - CVE Program Container: References: - https://source.android.com/security/bulletin/2018-10-01%2C - http://www.securityfocus.com/bid/105481 - https://androi
- https://source.android.com/security/bulletin/2018-10-01%2C - http://www.securityfocus.com/bid/105481 - https://android.googlesource.com/platform/external/libhevc/+/9f0fb67540d2259e4930d9bd5f1a1a6fb95af862
CVE ID: CVE-2018-9474 State: PUBLISHED Published: 2024-11-20T17:25:46.569Z Last Updated: 2024-11-20T18:29:24.620Z Vendors: Google Products: Android Description: In writeToParcel of MediaPlayer.java, there is a possible serialization/deserialization mismatch due to improper input validation. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://source.android.com/security/bulletin/2018-09-01
CVE ID: CVE-2018-9475 State: PUBLISHED Published: 2024-11-20T17:27:37.227Z Last Updated: 2024-11-20T18:28:21.519Z Vendors: Google Products: Android Description: In HeadsetInterface::ClccResponse of btif_hf.cc, there is a possible out of bounds stack write due to a missing bounds check. This could lead to remote escalation of privilege via Bluetooth, if the recipient has enabled SIP calls with no additional execution privileges needed. User interaction is not needed for exploitation. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://source.android.com/security/bulletin/2018-09-01
CVE ID: CVE-2018-9476 State: PUBLISHED Published: 2018-10-02T19:00:00Z Last Updated: 2024-09-17T02:11:01.458Z Vendors: Google Inc. Products: Android Problem Types: Elevation of privilege Description: In avrc_pars_browsing_cmd of avrc_pars_tg.cc, there is a possible use-after-free due to improper locking. This could lead to remote escalation of privilege in the Bluetooth service with no additional execution privileges needed. User interaction is not needed for exploitation. Product: Android Versions: Android-8.0 Android-8.1 Android ID: A-109699112 Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/105482 - https://source.android.com/security/bull
CVE Program Container: References: - http://www.securityfocus.com/bid/105482 - https://source.android.com/security/bulletin/2018-10-01%2C - https://android.googlesource.com/platform/system/bt/+/dd28d8ddf2985d654781770c691c60b45d7f32b4
CVE ID: CVE-2018-9477 State: PUBLISHED Published: 2024-11-20T17:28:44.954Z Last Updated: 2024-11-20T19:02:26.920Z Vendors: Google Products: Android Description: In the development options section of the Settings app, there is a possible authentication bypass due to a missing permission check. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is needed for exploitation. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://source.android.com/security/bulletin/2018-09-01
CVE ID: CVE-2018-9478 State: PUBLISHED Published: 2024-11-20T17:30:49.093Z Last Updated: 2024-11-20T18:27:16.585Z Vendors: Google Products: Android Description: In process_service_attr_req and process_service_search_attr_req of sdp_server.cc, there is an out of bounds write due to a missing bounds check. This could lead to remote code execution with no additional execution privileges needed. User interaction is not needed for exploitation. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://source.android.com/security/bulletin/2018-09-01
CVE ID: CVE-2018-9479 State: PUBLISHED Published: 2024-11-20T17:37:56.046Z Last Updated: 2024-11-20T18:26:08.864Z Vendors: Google Products: Android Description: In process_service_attr_req and process_service_search_attr_req of sdp_server.cc, there is an out of bounds write due to a missing bounds check. This could lead to remote code execution with no additional execution privileges needed. User interaction is not needed for exploitation. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://source.android.com/security/bulletin/2018-09-01
CVE ID: CVE-2018-9480 State: PUBLISHED Published: 2024-11-20T17:39:03.431Z Last Updated: 2024-11-20T18:23:57.635Z Vendors: Google Products: Android Description: In bta_hd_get_report_act of bta_hd_act.cc, there is a possible out-of-bounds read due to improper input validation. This could lead to remote information disclosure in the Bluetooth service with no additional execution privileges needed. User interaction is not needed for exploitation. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://source.android.com/security/bulletin/2018-09-01
CVE ID: CVE-2018-9481 State: PUBLISHED Published: 2024-11-20T17:40:25.846Z Last Updated: 2024-12-05T21:50:01.040Z Vendors: Google Products: Android Description: In bta_hd_set_report_act of bta_hd_act.cc, there is a possible out-of-bounds read due to an integer overflow. This could lead to remote information disclosure in the Bluetooth service with no additional execution privileges needed. User interaction is not needed for exploitation. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://lists.apache.org/thread.html/rcb8bae0b289d71d18a3220be256c1dfcc4d9ab49d2d6e07d1eac7c9d@%3Cdev.trafficserver.apache.org%3E
CVE ID: CVE-2018-9482 State: PUBLISHED Published: 2024-11-20T17:41:49.187Z Last Updated: 2024-11-20T18:21:54.329Z Vendors: Google Products: Android Description: In intr_data_copy_cb of btif_hd.cc, there is a possible out of bounds read due to an integer overflow. This could lead to local information disclosure in the Bluetooth service with no additional execution privileges needed. User interaction is not needed for exploitation. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://source.android.com/security/bulletin/2018-09-01
CVE ID: CVE-2018-9483 State: PUBLISHED Published: 2024-11-20T17:43:28.756Z Last Updated: 2024-11-20T18:20:38.165Z Vendors: Google Products: Android Description: In bta_dm_remove_sec_dev_entry of bta_dm_act.cc, there is a possible out of bounds read due to a use after free. This could lead to remote information disclosure over bluetooth with no additional execution privileges needed. User interaction is not needed for exploitation. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://source.android.com/security/bulletin/2018-09-01
CVE ID: CVE-2018-9484 State: PUBLISHED Published: 2024-11-20T17:45:25.547Z Last Updated: 2024-11-20T18:19:50.606Z Vendors: Google Products: Android Description: In l2cu_send_peer_config_rej of l2c_utils.cc, there is a possible out of bounds read due to a missing bounds check. This could lead to remote information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://source.android.com/security/bulletin/2018-09-01
CVE ID: CVE-2018-9485 State: PUBLISHED Published: 2024-11-20T17:47:28.369Z Last Updated: 2024-11-20T18:17:33.923Z Vendors: Google Products: Android Description: In l2cble_process_sig_cmd of l2c_ble.cc, there is a possible out of bounds read due to a missing bounds check. This could lead to remote information disclosure over bluetooth with no additional execution privileges needed. User interaction is not needed for exploitation. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://source.android.com/security/bulletin/2018-09-01
CVE ID: CVE-2018-9486 State: PUBLISHED Published: 2024-11-20T17:49:09.777Z Last Updated: 2024-11-20T18:16:36.714Z Vendors: Google Products: Android Description: In hidh_l2cif_data_ind of hidh_conn.cc, there is a possible out of bounds read due to a missing bounds check. This could lead to local information disclosure over bluetooth with no additional execution privileges needed. User interaction is not needed for exploitation. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://source.android.com/security/bulletin/2018-09-01
CVE ID: CVE-2018-9487 State: PUBLISHED Published: 2024-11-20T17:50:13.832Z Last Updated: 2024-11-20T18:15:43.463Z Vendors: Google Products: Android Description: In setVpnForcedLocked of Vpn.java, there is a possible blocking of internet traffic through vpn due to a bad uid check. This could lead to local denial of service with no additional execution privileges needed. User interaction is needed for exploitation. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://source.android.com/security/bulletin/2018-09-01
CVE ID: CVE-2018-9488 State: PUBLISHED Published: 2018-11-06T17:00:00Z Last Updated: 2024-09-17T01:50:46.089Z Vendors: Google Inc. Products: Android Problem Types: Elevation of privilege Description: In the SELinux permissions of crash_dump.te, there is a permissions bypass due to a missing restriction. This could lead to a local escalation of privilege, with System privileges needed. User interaction is not needed for exploitation. Product: Android Versions: Android-8.0 Android-8.1 Android-9.0 Android ID: A-110107376. Additional Analyst Notes: - CVE Program Container: References: - https://source.android.com/security/bulletin/2018-09-01 - https://www.exploit-db.com/exploits/45379/
CVE ID: CVE-2018-9489 State: PUBLISHED Published: 2018-11-06T17:00:00Z Last Updated: 2024-09-16T20:22:34.166Z Vendors: Google Inc. Products: Android Problem Types: Information Disclosure Description: When wifi is switched, function sendNetworkStateChangeBroadcast of WifiStateMachine.java broadcasts an intent including detailed wifi network information. This could lead to information disclosure with no execution privileges needed. User interaction is not needed for exploitation. Product: Android Versions: Android-7.0 Android-7.1.1 Android-7.1.2 Android-8.0 Android-8.1 Android-9.0 Android ID: A-77286245. Additional Analyst Notes: - CVE Program Container: References: - https://wwws.nightwatchcy
d-9.0 Android ID: A-77286245. Additional Analyst Notes: - CVE Program Container: References: - https://wwws.nightwatchcybersecurity.com/2018/08/29/sensitive-data-exposure-via-wifi-broadcasts-in-android-os-cve-2018-9489/ - http://www.securitytracker.com/id/1041590
CVE ID: CVE-2018-9490 State: PUBLISHED Published: 2018-10-02T19:00:00Z Last Updated: 2024-09-16T18:29:26.810Z Vendors: Google Inc. Products: Android Problem Types: Elevation of privilege Description: In CollectValuesOrEntriesImpl of elements.cc, there is possible remote code execution due to type confusion. This could lead to remote escalation of privilege with no additional execution privileges needed. User interaction is needed for exploitation. Product: Android. Versions: Android-7.0 Android-7.1.1 Android-7.1.2 Android-8.0 Android-8.1 Android-9.0 Android ID: A-111274046 Additional Analyst Notes: - CVE Program Container: References: - https://android.googlesource.com/platform/external/chro
Additional Analyst Notes: - CVE Program Container: References: - https://android.googlesource.com/platform/external/chromium-libpac/+/948d4753664cc4e6b33cc3de634ac8fd5f781382%2C - https://source.android.com/security/bulletin/2018-10-01%2C - http://www.securityfocus.com/bid/105484 - https://android.googlesource.com/platform/external/v8/+/a24543157ae2cdd25da43e20f4e48a07481e6ceb
CVE ID: CVE-2018-9491 State: PUBLISHED Published: 2018-10-02T19:00:00Z Last Updated: 2024-09-17T00:11:26.761Z Vendors: Google Inc. Products: Android Problem Types: Remote code execution Description: In AMediaCodecCryptoInfo_new of NdkMediaCodec.cpp, there is a possible out-of-bounds write due to an integer overflow. This could lead to remote code execution in external apps with no additional execution privileges needed. User interaction is needed for exploitation. Product: Android Versions: Android-7.0 Android-7.1.1 Android-7.1.2 Android-8.0 Android-8.1 Android-9.0 Android ID: A-111603051 Additional Analyst Notes: - CVE Program Container: References: - https://source.android.com/security/bul
ID: A-111603051 Additional Analyst Notes: - CVE Program Container: References: - https://source.android.com/security/bulletin/2018-10-01%2C - http://www.securityfocus.com/bid/105484 - https://android.googlesource.com/platform/frameworks/av/+/2b4667baa5a2badbdfec1794156ee17d4afef37c
CVE ID: CVE-2018-9492 State: PUBLISHED Published: 2018-10-02T19:00:00Z Last Updated: 2024-09-16T22:31:12.845Z Vendors: Google Inc. Products: Android Problem Types: Elevation of privilege Description: In checkGrantUriPermissionLocked of ActivityManagerService.java, there is a possible permissions bypass. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation. Product: Android Versions: Android-8.0 Android-8.1 Android-9.0 Android ID: A-111934948 Additional Analyst Notes: - CVE Program Container: References: - https://source.android.com/security/bulletin/2018-10-01%2C - http://www.securityfocus.com/bid/105
ntainer: References: - https://source.android.com/security/bulletin/2018-10-01%2C - http://www.securityfocus.com/bid/105484 - https://android.googlesource.com/platform/frameworks/base/+/962fb40991f15be4f688d960aa00073683ebdd20
CVE ID: CVE-2018-9493 State: PUBLISHED Published: 2018-10-02T19:00:00Z Last Updated: 2024-09-16T22:46:09.161Z Vendors: Google Inc. Products: Android Problem Types: Information disclosure Description: In the content provider of the download manager, there is a possible SQL injection due to improper input validation. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation. Product: Android Versions: Android-7.0 Android-7.1.1 Android-7.1.2 Android-8.0 Android-8.1 Android-9.0 Android ID: A-111085900 Additional Analyst Notes: - CVE Program Container: References: - https://source.android.com/security/bulletin/2
11085900 Additional Analyst Notes: - CVE Program Container: References: - https://source.android.com/security/bulletin/2018-10-01%2C - https://android.googlesource.com/platform/frameworks/base/+/ebc250d16c747f4161167b5ff58b3aea88b37acf - http://www.securityfocus.com/bid/105484 - https://android.googlesource.com/platform/frameworks/base/+/462aaeaa616e0bb1342e8ef7b472acc0cbc93deb%2C - https://android.googlesource.com/platform/packages/providers/DownloadProvider/+/e7364907439578ce5334bce20bb03fef2e88b107%2C
CVE ID: CVE-2018-9496 State: PUBLISHED Published: 2018-10-02T19:00:00Z Last Updated: 2024-09-16T23:30:21.359Z Vendors: Google Inc. Products: Android Problem Types: Remote code execution Description: In ixheaacd_real_synth_fft_p3 of ixheaacd_esbr_fft.c there is a possible out of bounds write due to a missing bounds check. This could lead to remote code execution with no additional execution privileges needed. User interaction is needed for exploitation. Product: Android Versions: Android-9.0 Android ID: A-110769924 Additional Analyst Notes: - CVE Program Container: References: - https://source.android.com/security/bulletin/2018-10-01%2C - http://www.securityfocus.com/bid/105481 - https://andr
s: - https://source.android.com/security/bulletin/2018-10-01%2C - http://www.securityfocus.com/bid/105481 - https://android.googlesource.com/platform/external/libxaac/+/04e8cd58f075bec5892e369c8deebca9c67e855c