Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2021-0433 State: PUBLISHED Published: 2021-04-13T18:18:49 Last Updated: 2024-08-03T15:40:01.143Z Vendors: n/a Products: Android Problem Types: Elevation of privilege Description: In onCreate of DeviceChooserActivity.java, there is a possible way to bypass user consent when pairing a Bluetooth device due to a tapjacking/overlay attack. This could lead to local escalation of privilege and pairing malicious devices with no additional execution privileges needed. User interaction is needed for exploitation.Product: AndroidVersions: Android-8.1 Android-9 Android-10 Android-11Android ID: A-171221090 Additional Analyst Notes: - CVE Program Container: References: - https://source.android
ndroid-11Android ID: A-171221090 Additional Analyst Notes: - CVE Program Container: References: - https://source.android.com/security/bulletin/2021-04-01
CVE ID: CVE-2021-0434 State: PUBLISHED Published: 2021-12-15T18:05:17 Last Updated: 2024-08-03T15:40:01.248Z Vendors: n/a Products: Android Problem Types: Elevation of privilege Description: In onReceive of BluetoothPermissionRequest.java, there is a possible phishing attack allowing a malicious Bluetooth device to acquire permissions based on insufficient information presented to the user in the consent dialog. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is needed for exploitation.Product: AndroidVersions: Android-10 Android-11 Android-9Android ID: A-167403112 Additional Analyst Notes: - CVE Program Container: References:
s: Android-10 Android-11 Android-9Android ID: A-167403112 Additional Analyst Notes: - CVE Program Container: References: - https://source.android.com/security/bulletin/2021-11-01
CVE ID: CVE-2021-0435 State: PUBLISHED Published: 2021-04-13T18:22:06 Last Updated: 2024-08-03T15:40:01.261Z Vendors: n/a Products: Android Problem Types: Information disclosure Description: In avrc_proc_vendor_command of avrc_api.cc, there is a possible leak of heap data due to uninitialized data. This could lead to remote information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-11 Android-8.1 Android-9 Android-10Android ID: A-174150451 Additional Analyst Notes: - CVE Program Container: References: - https://source.android.com/security/bulletin/2021-04-01
CVE ID: CVE-2021-0436 State: PUBLISHED Published: 2021-04-13T18:25:27 Last Updated: 2024-08-03T15:40:01.244Z Vendors: n/a Products: Android Problem Types: Information disclosure Description: In CryptoPlugin::decrypt of CryptoPlugin.cpp, there is a possible out of bounds read due to integer overflow. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-8.1 Android-9 Android-10 Android-11Android ID: A-176496160 Additional Analyst Notes: - CVE Program Container: References: - https://source.android.com/security/bulletin/2021-04-01
CVE ID: CVE-2021-0437 State: PUBLISHED Published: 2021-04-13T18:23:46 Last Updated: 2024-08-03T15:40:01.155Z Vendors: n/a Products: Android Problem Types: Elevation of privilege Description: In setPlayPolicy of DrmPlugin.cpp, there is a possible double free. This could lead to local escalation of privilege in a privileged process with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-11 Android-8.1 Android-9 Android-10Android ID: A-176168330 Additional Analyst Notes: - CVE Program Container: References: - https://source.android.com/security/bulletin/2021-04-01
CVE ID: CVE-2021-0438 State: PUBLISHED Published: 2021-04-13T18:17:25 Last Updated: 2024-08-03T15:40:01.152Z Vendors: n/a Products: Android Problem Types: Elevation of privilege Description: In several functions of InputDispatcher.cpp, WindowManagerService.java, and related files, there is a possible tapjacking attack due to an incorrect FLAG_OBSCURED value. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is needed for exploitation.Product: AndroidVersions: Android-8.1 Android-9 Android-10Android ID: A-152064592 Additional Analyst Notes: - CVE Program Container: References: - https://source.android.com/security/bulletin/2021-0
592 Additional Analyst Notes: - CVE Program Container: References: - https://source.android.com/security/bulletin/2021-04-01
CVE ID: CVE-2021-0439 State: PUBLISHED Published: 2021-04-13T18:22:44 Last Updated: 2024-08-03T15:40:01.309Z Vendors: n/a Products: Android Problem Types: Elevation of privilege Description: In setPowerModeWithHandle of com_android_server_power_PowerManagerService.cpp, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-11Android ID: A-174243830 Additional Analyst Notes: - CVE Program Container: References: - https://source.android.com/security/bulletin/2021-04-01
CVE ID: CVE-2021-0441 State: PUBLISHED Published: 2021-07-14T13:43:32 Last Updated: 2024-08-03T15:40:01.243Z Vendors: n/a Products: Android Problem Types: Elevation of privilege Description: In onCreate of PermissionActivity.java, there is a possible permission bypass due to Confusing UI. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is needed for exploitation.Product: AndroidVersions: Android-11Android ID: A-174495520 Additional Analyst Notes: - CVE Program Container: References: - https://source.android.com/security/bulletin/2021-07-01
CVE ID: CVE-2021-0442 State: PUBLISHED Published: 2021-04-13T18:23:35 Last Updated: 2024-08-03T15:40:01.110Z Vendors: n/a Products: Android Problem Types: Elevation of privilege Description: In updateInfo of android_hardware_input_InputApplicationHandle.cpp, there is a possible control of code flow due to a use after free. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-11Android ID: A-174768985 Additional Analyst Notes: - CVE Program Container: References: - https://source.android.com/security/bulletin/2021-04-01
CVE ID: CVE-2021-0443 State: PUBLISHED Published: 2021-04-13T18:17:58 Last Updated: 2024-08-03T15:40:01.289Z Vendors: n/a Products: Android Problem Types: Information disclosure Description: In several functions of ScreenshotHelper.java and related files, there is a possible incorrectly saved screenshot due to a race condition. This could lead to local information disclosure across user profiles with no additional execution privileges needed. User interaction is needed for exploitation.Product: AndroidVersions: Android-8.1 Android-9 Android-10 Android-11Android ID: A-170474245 Additional Analyst Notes: - CVE Program Container: References: - https://source.android.com/security/bulletin/2021-0
245 Additional Analyst Notes: - CVE Program Container: References: - https://source.android.com/security/bulletin/2021-04-01
CVE ID: CVE-2021-0444 State: PUBLISHED Published: 2021-04-13T18:26:18 Last Updated: 2024-08-03T15:40:01.260Z Vendors: n/a Products: Android Problem Types: Information disclosure Description: In onActivityResult of QuickContactActivity.java, there is an unnecessary return of an intent. This could lead to local information disclosure of contact data with no additional execution privileges needed. User interaction is needed for exploitation.Product: AndroidVersions: Android-11 Android-8.1 Android-9 Android-10Android ID: A-178825358 Additional Analyst Notes: - CVE Program Container: References: - https://source.android.com/security/bulletin/2021-04-01
CVE ID: CVE-2021-0445 State: PUBLISHED Published: 2021-04-13T18:20:19 Last Updated: 2024-08-03T15:40:01.123Z Vendors: n/a Products: Android Problem Types: Elevation of privilege Description: In start of WelcomeActivity.java, there is a possible residual profile due to a confused deputy. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-11 Android-9Android ID: A-172322502 Additional Analyst Notes: - CVE Program Container: References: - https://source.android.com/security/bulletin/2021-04-01
CVE ID: CVE-2021-0446 State: PUBLISHED Published: 2021-04-13T18:19:27 Last Updated: 2024-08-03T15:40:01.153Z Vendors: n/a Products: Android Problem Types: Elevation of privilege Description: In ImportVCardActivity, there is a possible way to bypass user consent due to a tapjacking/overlay attack. This could lead to local escalation of privilege with User execution privileges needed. User interaction is needed for exploitation.Product: AndroidVersions: Android-11Android ID: A-172252122 Additional Analyst Notes: - CVE Program Container: References: - https://source.android.com/security/bulletin/2021-04-01
CVE ID: CVE-2021-0447 State: REJECTED Published: N/A Last Updated: 2025-01-17T22:55:24.815Z Description: No description available.
CVE ID: CVE-2021-0449 State: PUBLISHED Published: 2021-03-10T16:13:36 Last Updated: 2024-08-03T15:40:01.063Z Vendors: n/a Products: Android Problem Types: Information disclosure Description: In the Titan M chip firmware, there is a possible disclosure of stack memory due to uninitialized data. This could lead to local information disclosure with System execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android kernelAndroid ID: A-175117965 Additional Analyst Notes: - CVE Program Container: References: - https://source.android.com/security/bulletin/pixel/2021-03-01
CVE ID: CVE-2021-0450 State: PUBLISHED Published: 2021-03-10T16:13:50 Last Updated: 2024-08-03T15:40:01.116Z Vendors: n/a Products: Android Problem Types: Information disclosure Description: In the Titan M chip firmware, there is a possible disclosure of stack memory due to uninitialized data. This could lead to local information disclosure with System execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android kernelAndroid ID: A-175117880 Additional Analyst Notes: - CVE Program Container: References: - https://source.android.com/security/bulletin/pixel/2021-03-01
CVE ID: CVE-2021-0451 State: PUBLISHED Published: 2021-03-10T16:14:17 Last Updated: 2024-08-03T15:40:01.311Z Vendors: n/a Products: Android Problem Types: Information disclosure Description: In the Titan M chip firmware, there is a possible disclosure of stack memory due to uninitialized data. This could lead to local information disclosure with System execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android kernelAndroid ID: A-175117871 Additional Analyst Notes: - CVE Program Container: References: - https://source.android.com/security/bulletin/pixel/2021-03-01
CVE ID: CVE-2021-0452 State: PUBLISHED Published: 2021-03-10T16:14:37 Last Updated: 2024-08-03T15:40:01.265Z Vendors: n/a Products: Android Problem Types: Information disclosure Description: In the Titan M chip firmware, there is a possible disclosure of stack memory due to uninitialized data. This could lead to local information disclosure with System execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android kernelAndroid ID: A-175117261 Additional Analyst Notes: - CVE Program Container: References: - https://source.android.com/security/bulletin/pixel/2021-03-01
CVE ID: CVE-2021-0453 State: PUBLISHED Published: 2021-03-10T16:14:53 Last Updated: 2024-08-03T15:40:01.174Z Vendors: n/a Products: Android Problem Types: Information disclosure Description: In the Titan-M chip firmware, there is a possible disclosure of stack memory due to uninitialized data. This could lead to local information disclosure with System execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android kernelAndroid ID: A-175117199 Additional Analyst Notes: - CVE Program Container: References: - https://source.android.com/security/bulletin/pixel/2021-03-01
CVE ID: CVE-2021-0454 State: PUBLISHED Published: 2021-03-10T16:15:11 Last Updated: 2024-08-03T15:40:01.188Z Vendors: n/a Products: Android Problem Types: Elevation of privilege Description: In the Citadel chip firmware, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android kernelAndroid ID: A-175117047 Additional Analyst Notes: - CVE Program Container: References: - https://source.android.com/security/bulletin/pixel/2021-03-01
CVE ID: CVE-2021-0455 State: PUBLISHED Published: 2021-03-10T16:15:25 Last Updated: 2024-08-03T15:40:01.172Z Vendors: n/a Products: Android Problem Types: Elevation of privilege Description: In the Citadel chip firmware, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android kernelAndroid ID: A-175116439 Additional Analyst Notes: - CVE Program Container: References: - https://source.android.com/security/bulletin/pixel/2021-03-01
CVE ID: CVE-2021-0456 State: PUBLISHED Published: 2021-03-10T16:15:40 Last Updated: 2024-08-03T15:40:01.173Z Vendors: n/a Products: Android Problem Types: Elevation of privilege Description: In the Citadel chip firmware, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android kernelAndroid ID: A-174769927 Additional Analyst Notes: - CVE Program Container: References: - https://source.android.com/security/bulletin/pixel/2021-03-01
CVE ID: CVE-2021-0457 State: PUBLISHED Published: 2021-03-10T16:15:58 Last Updated: 2024-08-03T15:40:01.117Z Vendors: n/a Products: Android Problem Types: Elevation of privilege Description: In the FingerTipS touch screen driver, there is a possible out of bounds write due to a heap buffer overflow. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android kernelAndroid ID: A-157155375 Additional Analyst Notes: - CVE Program Container: References: - https://source.android.com/security/bulletin/pixel/2021-03-01 - https://www.zerodayinitiative.com/advisories/ZDI-21-279/
CVE ID: CVE-2021-0458 State: PUBLISHED Published: 2021-03-10T16:17:15 Last Updated: 2024-08-03T15:40:01.270Z Vendors: n/a Products: Android Problem Types: Elevation of privilege Description: In the FingerTipS touch screen driver, there is a possible out of bounds read due to an integer overflow. This could lead to local information disclosure with System execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android kernelAndroid ID: A-157156744 Additional Analyst Notes: - CVE Program Container: References: - https://source.android.com/security/bulletin/pixel/2021-03-01 - https://www.zerodayinitiative.com/advisories/ZDI-21-280/
CVE ID: CVE-2021-0459 State: PUBLISHED Published: 2021-03-10T16:17:30 Last Updated: 2024-08-03T15:40:01.431Z Vendors: n/a Products: Android Problem Types: Information disclosure Description: In fts_driver_test_write of fts_proc.c, there is a possible out of bounds read due to a missing bounds check. This could lead to local information disclosure with System execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android kernelAndroid ID: A-157154534 Additional Analyst Notes: - CVE Program Container: References: - https://source.android.com/security/bulletin/pixel/2021-03-01 - https://www.zerodayinitiative.com/advisories/ZDI-21-278/
CVE ID: CVE-2021-0460 State: PUBLISHED Published: 2021-03-10T16:17:43 Last Updated: 2024-08-03T15:40:01.091Z Vendors: n/a Products: Android Problem Types: Information disclosure Description: In the FingerTipS touch screen driver, there is a possible out of bounds read due to an integer overflow. This could lead to local information disclosure with System execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android kernelAndroid ID: A-156739245 Additional Analyst Notes: - CVE Program Container: References: - https://source.android.com/security/bulletin/pixel/2021-03-01
CVE ID: CVE-2021-0461 State: PUBLISHED Published: 2021-03-10T16:18:03 Last Updated: 2024-08-03T15:40:01.166Z Vendors: n/a Products: Android Problem Types: Elevation of privilege Description: In iaxxx_core_sensor_change_state of iaxxx-module.c, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android kernelAndroid ID: A-175124074 Additional Analyst Notes: - CVE Program Container: References: - https://source.android.com/security/bulletin/pixel/2021-03-01
CVE ID: CVE-2021-0462 State: PUBLISHED Published: 2021-03-10T16:18:15 Last Updated: 2024-08-03T15:40:01.284Z Vendors: n/a Products: Android Problem Types: Elevation of privilege Description: In the NXP NFC firmware, there is a possible insecure firmware update due to a logic error. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android kernelAndroid ID: A-168799695 Additional Analyst Notes: - CVE Program Container: References: - https://source.android.com/security/bulletin/pixel/2021-03-01 - https://source.android.com/security/bulletin/pixel/2021-08-01
CVE ID: CVE-2021-0463 State: PUBLISHED Published: 2021-03-10T16:18:35 Last Updated: 2024-08-03T15:40:01.278Z Vendors: n/a Products: Android Problem Types: Information disclosure Description: In convertToHidl of convert.cpp, there is a possible out of bounds read due to uninitialized data from ReturnFrameworkMessage. This could lead to local information disclosure with no additional execution privileges needed. User interaction is needed for exploitation.Product: AndroidVersions: Android kernelAndroid ID: A-154867068 Additional Analyst Notes: - CVE Program Container: References: - https://source.android.com/security/bulletin/pixel/2021-03-01
CVE ID: CVE-2021-0464 State: PUBLISHED Published: 2021-03-10T16:18:47 Last Updated: 2024-08-03T15:40:01.258Z Vendors: n/a Products: Android Problem Types: Elevation of privilege Description: In sound_trigger_event_alloc of platform.h, there is a possible out of bounds write due to a heap buffer overflow. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android kernelAndroid ID: A-167663878 Additional Analyst Notes: - CVE Program Container: References: - https://source.android.com/security/bulletin/pixel/2021-03-01
CVE ID: CVE-2021-0465 State: PUBLISHED Published: 2021-03-10T16:18:58 Last Updated: 2024-08-03T15:40:01.432Z Vendors: n/a Products: Android Problem Types: Elevation of privilege Description: In GenerateFaceMask of face.cc, there is a possible out of bounds write due to an incorrect bounds check. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android kernelAndroid ID: A-172005755 Additional Analyst Notes: - CVE Program Container: References: - https://source.android.com/security/bulletin/pixel/2021-03-01
CVE ID: CVE-2021-0466 State: PUBLISHED Published: 2021-06-11T16:42:55 Last Updated: 2024-08-03T15:40:01.175Z Vendors: n/a Products: Android Problem Types: Information disclosure Description: In startIpClient of ClientModeImpl.java, there is a possible identifier which could be used to track a device. This could lead to remote information disclosure to a proximal attacker, with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-10Android ID: A-154114734 Additional Analyst Notes: - CVE Program Container: References: - https://source.android.com/security/bulletin/2021-05-01
CVE ID: CVE-2021-0467 State: PUBLISHED Published: 2021-06-14T19:35:54 Last Updated: 2024-08-03T15:40:01.265Z Vendors: n/a Products: Android Problem Types: Elevation of privilege Description: In Chromecast bootROM, there is a possible out of bounds write due to an incorrect bounds check. This could lead to local escalation of privilege in the bootloader, with physical USB access, with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android SoCAndroid ID: A-174490700 Additional Analyst Notes: - CVE Program Container: References: - https://source.android.com/security/bulletin/2021-05-01
CVE ID: CVE-2021-0468 State: PUBLISHED Published: 2021-04-13T18:26:23 Last Updated: 2024-08-03T15:40:01.139Z Vendors: n/a Products: Android Problem Types: Elevation of privilege Description: In LK, there is a possible escalation of privilege due to an insecure default value. This could lead to local escalation of privilege for an attacker who has physical access to the device with no additional execution privileges needed. User interaction is needed for exploitation.Product: AndroidVersions: Android SoCAndroid ID: A-180427272 Additional Analyst Notes: - CVE Program Container: References: - https://source.android.com/security/bulletin/2021-04-01
CVE ID: CVE-2021-0471 State: PUBLISHED Published: 2021-04-13T18:24:45 Last Updated: 2024-08-03T15:40:01.167Z Vendors: n/a Products: Android Problem Types: Information disclosure Description: In decrypt_1_2 of CryptoPlugin.cpp, there is a possible out of bounds read due to an integer overflow. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-9 Android-10 Android-11 Android-8.1Android ID: A-176444786 Additional Analyst Notes: - CVE Program Container: References: - https://source.android.com/security/bulletin/2021-04-01
CVE ID: CVE-2021-0472 State: PUBLISHED Published: 2021-06-11T16:42:56 Last Updated: 2024-08-03T15:40:01.285Z Vendors: n/a Products: Android Problem Types: Elevation of privilege Description: In shouldLockKeyguard of LockTaskController.java, there is a possible way to exit App Pinning without a PIN due to a permissions bypass. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-11 Android-9 Android-10Android ID: A-176801033 Additional Analyst Notes: - CVE Program Container: References: - https://source.android.com/security/bulletin/2021-05-01
CVE ID: CVE-2021-0473 State: PUBLISHED Published: 2021-06-11T16:42:56 Last Updated: 2024-08-03T15:40:01.065Z Vendors: n/a Products: Android Problem Types: Remote code execution Description: In rw_t3t_process_error of rw_t3t.cc, there is a possible double free due to uninitialized data. This could lead to remote code execution over NFC with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-9 Android-10 Android-11 Android-8.1Android ID: A-179687208 Additional Analyst Notes: - CVE Program Container: References: - https://source.android.com/security/bulletin/2021-05-01