Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2021-0376 State: PUBLISHED Published: 2021-03-10T15:57:41 Last Updated: 2024-08-03T15:40:01.109Z Vendors: n/a Products: Android Problem Types: Elevation of privilege Description: In checkUriPermission and related functions of MediaProvider.java, there is a possible way to access external files due to a permissions bypass. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-11Android ID: A-115619667 Additional Analyst Notes: - CVE Program Container: References: - https://source.android.com/security/bulletin/pixel/2021-03-01
CVE ID: CVE-2021-0377 State: PUBLISHED Published: 2021-03-10T15:59:29 Last Updated: 2024-08-03T15:40:01.446Z Vendors: n/a Products: Android Problem Types: Elevation of privilege Description: In DeltaPerformer::Write of delta_performer.cc, there is a possible use of untrusted input due to improper input validation. This could lead to a local bypass of defense in depth protections with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-11Android ID: A-160800689 Additional Analyst Notes: - CVE Program Container: References: - https://source.android.com/security/bulletin/pixel/2021-03-01
CVE ID: CVE-2021-0378 State: PUBLISHED Published: 2021-03-10T16:00:46 Last Updated: 2024-08-03T15:40:00.905Z Vendors: n/a Products: Android Problem Types: Information disclosure Description: In getNbits of pvmp3_getbits.cpp, there is a possible out of bounds read due to a heap buffer overflow. This could lead to remote information disclosure with no additional execution privileges needed. User interaction is needed for exploitation.Product: AndroidVersions: Android-11Android ID: A-154076193 Additional Analyst Notes: - CVE Program Container: References: - https://source.android.com/security/bulletin/pixel/2021-03-01
CVE ID: CVE-2021-0379 State: PUBLISHED Published: 2021-03-10T16:01:13 Last Updated: 2024-08-03T15:40:00.601Z Vendors: n/a Products: Android Problem Types: Information disclosure Description: In getUpTo17bits of pvmp3_getbits.cpp, there is a possible out of bounds read due to a heap buffer overflow. This could lead to remote information disclosure with no additional execution privileges needed. User interaction is needed for exploitation.Product: AndroidVersions: Android-11Android ID: A-154075955 Additional Analyst Notes: - CVE Program Container: References: - https://source.android.com/security/bulletin/pixel/2021-03-01
CVE ID: CVE-2021-0380 State: PUBLISHED Published: 2021-03-10T16:02:07 Last Updated: 2024-08-03T15:40:01.244Z Vendors: n/a Products: Android Problem Types: Elevation of privilege Description: In onReceive of DcTracker.java, there is a possible way to trigger a provisioning URL and modify other telephony settings due to a missing permission check. This could lead to local escalation of privilege during the onboarding flow with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-11Android ID: A-172459128 Additional Analyst Notes: - CVE Program Container: References: - https://source.android.com/security/bulletin/pixel/2021
Additional Analyst Notes: - CVE Program Container: References: - https://source.android.com/security/bulletin/pixel/2021-03-01
CVE ID: CVE-2021-0381 State: PUBLISHED Published: 2021-03-10T16:09:34 Last Updated: 2024-08-03T15:40:01.153Z Vendors: n/a Products: Android Problem Types: Information disclosure Description: In updateNotifications of DeviceStorageMonitorService.java, there is a possible permission bypass due to an unsafe PendingIntent. This could lead to local information disclosure with User execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-11Android ID: A-153466381 Additional Analyst Notes: - CVE Program Container: References: - https://source.android.com/security/bulletin/pixel/2021-03-01
CVE ID: CVE-2021-0382 State: PUBLISHED Published: 2021-03-10T16:09:52 Last Updated: 2024-08-03T15:40:00.895Z Vendors: n/a Products: Android Problem Types: Information disclosure Description: In checkSlicePermission of SliceManagerService.java, there is a possible resource exposure due to an incorrect permission check. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-11Android ID: A-140727941 Additional Analyst Notes: - CVE Program Container: References: - https://source.android.com/security/bulletin/pixel/2021-03-01
CVE ID: CVE-2021-0383 State: PUBLISHED Published: 2021-03-10T16:10:22 Last Updated: 2024-08-03T15:40:00.814Z Vendors: n/a Products: Android Problem Types: Elevation of privilege Description: In done of CaptivePortalLoginActivity.java, there is a confused deputy. This could lead to local escalation of privilege in carrier settings with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-11Android ID: A-160871056 Additional Analyst Notes: - CVE Program Container: References: - https://source.android.com/security/bulletin/pixel/2021-03-01
CVE ID: CVE-2021-0384 State: REJECTED Published: 2021-03-10T16:10:37 Last Updated: 2021-03-19T20:23:11 Description: No description available.
CVE ID: CVE-2021-0385 State: PUBLISHED Published: 2021-03-10T16:11:07 Last Updated: 2024-08-03T15:40:01.279Z Vendors: n/a Products: Android Problem Types: Elevation of privilege Description: In createConnectToAvailableNetworkNotification of ConnectToNetworkNotificationBuilder.java, there is a possible connection to untrusted WiFi networks due to notification interaction above the lockscreen. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-11Android ID: A-172584372 Additional Analyst Notes: - CVE Program Container: References: - https://source.android.com/security
oid ID: A-172584372 Additional Analyst Notes: - CVE Program Container: References: - https://source.android.com/security/bulletin/pixel/2021-03-01
CVE ID: CVE-2021-0386 State: PUBLISHED Published: 2021-03-10T16:11:33 Last Updated: 2024-08-03T15:40:01.087Z Vendors: n/a Products: Android Problem Types: Elevation of privilege Description: In onCreate of UsbConfirmActivity, there is a possible tapjacking vector due to an insecure default value. This could lead to local escalation of privilege with User execution privileges needed. User interaction is needed for exploitation.Product: AndroidVersions: Android-11Android ID: A-173421110 Additional Analyst Notes: - CVE Program Container: References: - https://source.android.com/security/bulletin/pixel/2021-03-01
CVE ID: CVE-2021-0387 State: PUBLISHED Published: 2021-03-10T16:12:27 Last Updated: 2024-08-03T15:40:00.517Z Vendors: n/a Products: Android Problem Types: Elevation of privilege Description: In FindQuotaDeviceForUuid of QuotaUtils.cpp, there is a possible use-after-free due to a race condition. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-11Android ID: A-169421939 Additional Analyst Notes: - CVE Program Container: References: - https://source.android.com/security/bulletin/pixel/2021-03-01
CVE ID: CVE-2021-0388 State: PUBLISHED Published: 2021-03-10T16:12:44 Last Updated: 2024-08-03T15:40:01.041Z Vendors: n/a Products: Android Problem Types: Elevation of privilege Description: In onReceive of ImsPhoneCallTracker.java, there is a possible misattribution of data usage due to an incorrect broadcast handler. This could lead to local escalation of privilege resulting in attributing video call data to the wrong app, with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-11Android ID: A-162741489 Additional Analyst Notes: - CVE Program Container: References: - https://source.android.com/security/bulletin/pixel
1489 Additional Analyst Notes: - CVE Program Container: References: - https://source.android.com/security/bulletin/pixel/2021-03-01
CVE ID: CVE-2021-0389 State: PUBLISHED Published: 2021-03-10T16:13:01 Last Updated: 2024-08-03T15:40:00.925Z Vendors: n/a Products: Android Problem Types: Elevation of privilege Description: In setNightModeActivated of UiModeManagerService.java, there is a missing permission check. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-11Android ID: A-168039904 Additional Analyst Notes: - CVE Program Container: References: - https://source.android.com/security/bulletin/pixel/2021-03-01
CVE ID: CVE-2021-0390 State: PUBLISHED Published: 2021-03-10T15:40:46 Last Updated: 2024-08-03T15:40:00.976Z Vendors: n/a Products: Android Problem Types: Elevation of privilege Description: In various methods of WifiNetworkSuggestionsManager.java, there is a possible modification of suggested networks due to a missing permission check. This could lead to local escalation of privilege by a background user on the same device with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-11 Android-8.1 Android-9 Android-10Android ID: A-174749461 Additional Analyst Notes: - CVE Program Container: References: - https://source.and
-9 Android-10Android ID: A-174749461 Additional Analyst Notes: - CVE Program Container: References: - https://source.android.com/security/bulletin/2021-03-01
CVE ID: CVE-2021-0391 State: PUBLISHED Published: 2021-03-10T15:39:34 Last Updated: 2024-08-03T15:40:01.274Z Vendors: n/a Products: Android Problem Types: Elevation of privilege Description: In onCreate() of ChooseTypeAndAccountActivity.java, there is a possible way to learn the existence of an account, without permissions, due to a tapjacking/overlay attack. This could lead to local escalation of privilege with User execution privileges needed. User interaction is needed for exploitation.Product: AndroidVersions: Android-11 Android-8.1 Android-9 Android-10Android ID: A-172841550 Additional Analyst Notes: - CVE Program Container: References: - https://source.android.com/security/bulletin/202
841550 Additional Analyst Notes: - CVE Program Container: References: - https://source.android.com/security/bulletin/2021-03-01
CVE ID: CVE-2021-0392 State: PUBLISHED Published: 2021-03-10T15:41:02 Last Updated: 2024-08-03T15:40:00.381Z Vendors: n/a Products: Android Problem Types: Elevation of privilege Description: In main of main.cpp, there is a possible memory corruption due to a double free. This could lead to local escalation of privilege with User execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-10 Android-11 Android-9Android ID: A-175124730 Additional Analyst Notes: - CVE Program Container: References: - https://source.android.com/security/bulletin/2021-03-01
CVE ID: CVE-2021-0393 State: PUBLISHED Published: 2021-03-10T15:37:06 Last Updated: 2024-08-03T15:40:01.223Z Vendors: n/a Products: Android Problem Types: Remote code execution Description: In Scanner::LiteralBuffer::NewCapacity of scanner.cc, there is a possible out of bounds write due to an integer overflow. This could lead to remote code execution if an attacker can supply a malicious PAC file, with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-11 Android-8.1 Android-9 Android-10Android ID: A-168041375 Additional Analyst Notes: - CVE Program Container: References: - https://source.android.com/security/bulletin/
168041375 Additional Analyst Notes: - CVE Program Container: References: - https://source.android.com/security/bulletin/2021-03-01
CVE ID: CVE-2021-0394 State: PUBLISHED Published: 2021-03-10T15:38:06 Last Updated: 2024-08-03T15:40:00.978Z Vendors: n/a Products: Android Problem Types: Information disclosure Description: In android_os_Parcel_readString8 of android_os_Parcel.cpp, there is a possible out of bounds read due to a missing bounds check. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-11 Android-8.1 Android-9 Android-10Android ID: A-172655291 Additional Analyst Notes: - CVE Program Container: References: - https://source.android.com/security/bulletin/2021-03-01
CVE ID: CVE-2021-0395 State: PUBLISHED Published: 2021-03-10T15:37:38 Last Updated: 2024-08-03T15:40:00.550Z Vendors: n/a Products: Android Problem Types: Elevation of privilege Description: In StopServicesAndLogViolations of reboot.cpp, there is possible memory corruption due to a use after free. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-11Android ID: A-170315126 Additional Analyst Notes: - CVE Program Container: References: - https://source.android.com/security/bulletin/2021-03-01
CVE ID: CVE-2021-0396 State: PUBLISHED Published: 2021-03-10T15:36:08 Last Updated: 2024-08-03T15:40:00.641Z Vendors: n/a Products: Android Problem Types: Remote code execution Description: In Builtins::Generate_ArgumentsAdaptorTrampoline of builtins-arm.cc and related files, there is a possible out of bounds write due to an incorrect bounds check. This could lead to remote code execution in an unprivileged process with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-8.1 Android-9 Android-10 Android-11Android ID: A-160610106 Additional Analyst Notes: - CVE Program Container: References: - https://source.android.com/
d-11Android ID: A-160610106 Additional Analyst Notes: - CVE Program Container: References: - https://source.android.com/security/bulletin/2021-03-01
CVE ID: CVE-2021-0397 State: PUBLISHED Published: 2021-03-10T15:40:28 Last Updated: 2024-08-03T15:40:01.145Z Vendors: n/a Products: Android Problem Types: Remote code execution Description: In sdp_copy_raw_data of sdp_discovery.cc, there is a possible system compromise due to a double free. This could lead to remote code execution with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-11 Android-8.1 Android-9 Android-10Android ID: A-174052148 Additional Analyst Notes: - CVE Program Container: References: - https://source.android.com/security/bulletin/2021-03-01
CVE ID: CVE-2021-0398 State: PUBLISHED Published: 2021-03-10T15:40:12 Last Updated: 2024-08-03T15:40:00.979Z Vendors: n/a Products: Android Problem Types: Elevation of privilege Description: In bindServiceLocked of ActiveServices.java, there is a possible foreground service launch due to a confused deputy. This could lead to local escalation of privilege with User execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-11Android ID: A-173516292 Additional Analyst Notes: - CVE Program Container: References: - https://source.android.com/security/bulletin/2021-03-01
CVE ID: CVE-2021-0399 State: PUBLISHED Published: 2021-03-10T15:41:26 Last Updated: 2024-08-03T15:40:01.290Z Vendors: n/a Products: Android Problem Types: Elevation of privilege Description: In qtaguid_untag of xt_qtaguid.c, there is a possible memory corruption due to a use after free. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android kernelAndroid ID: A-176919394References: Upstream kernel Additional Analyst Notes: - CVE Program Container: References: - https://source.android.com/security/bulletin/2021-03-01
CVE ID: CVE-2021-0400 State: PUBLISHED Published: 2021-04-13T18:25:36 Last Updated: 2024-08-03T15:40:01.090Z Vendors: n/a Products: Android Problem Types: Elevation of privilege Description: In injectBestLocation and handleUpdateLocation of GnssLocationProvider.java, there is a possible incorrect reporting of location data to emergency services due to improper input validation. This could lead to incorrect reporting of location data to emergency services with User execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-9 Android-10 Android-11Android ID: A-177561690 Additional Analyst Notes: - CVE Program Container: References: - https://
9 Android-10 Android-11Android ID: A-177561690 Additional Analyst Notes: - CVE Program Container: References: - https://source.android.com/security/bulletin/2021-04-01
CVE ID: CVE-2021-0401 State: PUBLISHED Published: 2021-02-26T20:19:34 Last Updated: 2024-08-03T15:40:01.182Z Vendors: n/a Products: Android Problem Types: Elevation of Privilege Description: In vow, there is a possible memory corruption due to a race condition. This could lead to local escalation of privilege with System execution privileges needed. User interaction is needed for exploitation. Product: Android; Versions: Android-10, Android-11; Patch ID: ALPS05418265. Additional Analyst Notes: - CVE Program Container: References: - https://corp.mediatek.com/product-security-acknowledgements
CVE ID: CVE-2021-0402 State: PUBLISHED Published: 2021-02-26T20:19:28 Last Updated: 2024-08-03T15:40:01.227Z Vendors: n/a Products: Android Problem Types: Elevation of Privilege Description: In jpeg, there is a possible out of bounds write due to improper input validation. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Product: Android; Versions: Android-11; Patch ID: ALPS05433311. Additional Analyst Notes: - CVE Program Container: References: - https://corp.mediatek.com/product-security-acknowledgements
CVE ID: CVE-2021-0403 State: PUBLISHED Published: 2021-02-26T20:19:23 Last Updated: 2024-08-03T15:40:01.242Z Vendors: n/a Products: Android Problem Types: Information Disclosure Description: In netdiag, there is a possible information disclosure due to a missing permission check. This could lead to local information disclosure with System execution privileges needed. User interaction is not needed for exploitation. Product: Android; Versions: Android-11; Patch ID: ALPS05475124. Additional Analyst Notes: - CVE Program Container: References: - https://corp.mediatek.com/product-security-acknowledgements
CVE ID: CVE-2021-0404 State: PUBLISHED Published: 2021-02-26T20:19:17 Last Updated: 2024-08-03T15:40:01.132Z Vendors: n/a Products: Android Problem Types: Information Disclosure Description: In mobile_log_d, there is a possible information disclosure due to improper input validation. This could lead to local information disclosure with System execution privileges needed. User interaction is not needed for exploitation. Product: Android; Versions: Android-11; Patch ID: ALPS05457039. Additional Analyst Notes: - CVE Program Container: References: - https://corp.mediatek.com/product-security-acknowledgements
CVE ID: CVE-2021-0405 State: PUBLISHED Published: 2021-02-26T20:19:12 Last Updated: 2024-08-03T15:40:01.224Z Vendors: n/a Products: Android Problem Types: Elevation of Privilege Description: In performance driver, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Product: Android; Versions: Android-10, Android-11; Patch ID: ALPS05466547. Additional Analyst Notes: - CVE Program Container: References: - https://corp.mediatek.com/product-security-acknowledgements
CVE ID: CVE-2021-0406 State: PUBLISHED Published: 2021-02-26T20:19:08 Last Updated: 2024-08-03T15:40:01.434Z Vendors: n/a Products: Android Problem Types: Elevation of Privilege Description: In cameraisp, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Product: Android; Versions: Android-10, Android-11; Patch ID: ALPS05471418. Additional Analyst Notes: - CVE Program Container: References: - https://corp.mediatek.com/product-security-acknowledgements
CVE ID: CVE-2021-0407 State: PUBLISHED Published: 2021-08-18T14:43:24 Last Updated: 2024-08-03T15:40:01.268Z Vendors: n/a Products: MT6739, MT6761, MT6762, MT6763, MT6765, MT6768, MT6769, MT6771, MT6833, MT6853, MT6853T, MT6873, MT6885, MT6889, MT6893 Problem Types: Elevation of Privilege Description: In clk driver, there is a possible out of bounds write due to an incorrect bounds check. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS05479659; Issue ID: ALPS05479659. Additional Analyst Notes: - CVE Program Container: References: - https://corp.mediatek.com/product-security-bulletin/Augu
dditional Analyst Notes: - CVE Program Container: References: - https://corp.mediatek.com/product-security-bulletin/August-2021
CVE ID: CVE-2021-0408 State: PUBLISHED Published: 2021-08-18T14:43:31 Last Updated: 2024-08-03T15:40:01.171Z Vendors: n/a Products: MT6570, MT6580, MT6735, MT6737, MT6739, MT6750, MT6750S, MT6753, MT6755, MT6755S, MT6757, MT6757C, MT6757CD, MT6757CH, MT6758, MT6761, MT6762, MT6763, MT6765, MT6768, MT6771, MT6779, MT6785, MT6797, MT6799, MT6833, MT6853, MT6853T, MT6873, MT6877, MT6885, MT6889, MT6893 Problem Types: Information Disclosure Description: In asf extractor, there is a possible out of bounds read due to an incorrect bounds check. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID:
n disclosure with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS05489195; Issue ID: ALPS05489220. Additional Analyst Notes: - CVE Program Container: References: - https://corp.mediatek.com/product-security-bulletin/August-2021
CVE ID: CVE-2021-0409 State: PUBLISHED Published: 2021-10-25T13:16:05 Last Updated: 2024-08-03T15:40:01.043Z Vendors: n/a Products: MT5522, MT5527, MT5597, MT5598, MT5599, MT6580, MT6735, MT6737, MT6739, MT6750S, MT6753, MT6755S, MT6757, MT6757C, MT6757CD, MT6757CH, MT6761, MT6762, MT6763, MT6765, MT6768, MT6771, MT6779, MT6785, MT6833, MT6853, MT6853T, MT6873, MT6877, MT6885, MT6889, MT6893, MT8163, MT8167, MT8167S, MT8168, MT8173, MT8175, MT8183, MT8185, MT8195, MT8321, MT8362A, MT8365, MT8385, MT8735A, MT8735B, MT8765, MT8766, MT8768, MT8786, MT8788, MT8789, MT8791, MT8797, MT9256, MT9285, MT9286, MT9288, MT9629, MT9631, MT9632, MT9636, MT9638, MT9639, MT9650, MT9652, MT9669, MT9670, MT96
97, MT9256, MT9285, MT9286, MT9288, MT9629, MT9631, MT9632, MT9636, MT9638, MT9639, MT9650, MT9652, MT9669, MT9670, MT9675, MT9685, MT9686, MT9688, MT9931, MT9950, MT9970, MT9980, MT9981 Problem Types: Information Disclosure Description: In flv extractor, there is a possible out of bounds read due to an incorrect bounds check. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS05561359; Issue ID: ALPS05561359. Additional Analyst Notes: - CVE Program Container: References: - https://corp.mediatek.com/product-security-bulletin/October-2021