Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2023-21199 State: PUBLISHED Published: 2023-06-28T00:00:00 Last Updated: 2024-12-04T16:05:46.784Z Vendors: n/a Products: Android Problem Types: Information disclosure Description: In btu_ble_proc_ltk_req of btu_hcif.cc, there is a possible out of bounds read due to a missing bounds check. This could lead to local information disclosure with System execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-13Android ID: A-254445961 Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://source.android.com/security/bulletin/pixel/2023-06-01
CVE ID: CVE-2023-21200 State: PUBLISHED Published: 2023-06-28T00:00:00 Last Updated: 2024-12-04T16:05:00.710Z Vendors: n/a Products: Android Problem Types: Information disclosure Description: In on_remove_iso_data_path of btm_iso_impl.h, there is a possible out of bounds read due to improper input validation. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-13Android ID: A-236688764 Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://source.android.com/security/bulletin/pixel/2023-06-01
CVE ID: CVE-2023-21201 State: PUBLISHED Published: 2023-06-28T00:00:00 Last Updated: 2024-12-03T19:41:55.306Z Vendors: n/a Products: Android Problem Types: Denial of service Description: In on_create_record_event of btif_sdp_server.cc, there is a possible out of bounds read due to a missing null check. This could lead to remote denial of service with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-13Android ID: A-263545186 Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://source.android.com/security/bulletin/pixel/2023-06-01
CVE ID: CVE-2023-21202 State: PUBLISHED Published: 2023-06-28T00:00:00 Last Updated: 2024-08-02T09:28:26.122Z Vendors: n/a Products: Android Problem Types: Information disclosure Description: In btm_delete_stored_link_key_complete of btm_devctl.cc, there is a possible out of bounds read due to a missing bounds check. This could lead to local information disclosure over Bluetooth with System execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-13Android ID: A-260568359 Additional Analyst Notes: - CVE Program Container: References: - https://source.android.com/security/bulletin/pixel/2023-06-01
CVE ID: CVE-2023-21203 State: PUBLISHED Published: 2023-06-28T00:00:00 Last Updated: 2024-12-03T19:41:26.487Z Vendors: n/a Products: Android Problem Types: Elevation of privilege Description: In startWpsPbcInternal of sta_iface.cpp, there is a possible out of bounds read due to improper input validation. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-13Android ID: A-262246082 Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://source.android.com/security/bulletin/pixel/2023-06-01
CVE ID: CVE-2023-21204 State: PUBLISHED Published: 2023-06-28T00:00:00 Last Updated: 2024-12-03T19:40:24.920Z Vendors: n/a Products: Android Problem Types: Information disclosure Description: In multiple files, there is a possible out of bounds read due to a missing bounds check. This could lead to local information disclosure in the wifi server with System execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-13Android ID: A-262246231 Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://source.android.com/security/bulletin/pixel/2023-06-01
CVE ID: CVE-2023-21205 State: PUBLISHED Published: 2023-06-28T00:00:00 Last Updated: 2024-12-03T19:39:59.384Z Vendors: n/a Products: Android Problem Types: Information disclosure Description: In startWpsPinDisplayInternal of sta_iface.cpp, there is a possible out of bounds read due to unsafe deserialization. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-13Android ID: A-262245376 Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://source.android.com/security/bulletin/pixel/2023-06-01
CVE ID: CVE-2023-21206 State: PUBLISHED Published: 2023-06-28T00:00:00 Last Updated: 2024-12-04T16:04:24.642Z Vendors: n/a Products: Android Problem Types: Information disclosure Description: In initiateVenueUrlAnqpQueryInternal of sta_iface.cpp, there is a possible out of bounds read due to unsafe deserialization. This could lead to local information disclosure with System execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-13Android ID: A-262245630 Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://source.android.com/security/bulletin/pixel/2023-06-01
CVE ID: CVE-2023-21207 State: PUBLISHED Published: 2023-06-28T00:00:00 Last Updated: 2024-12-04T16:03:31.638Z Vendors: n/a Products: Android Problem Types: Elevation of privilege Description: In initiateTdlsSetupInternal of sta_iface.cpp, there is a possible out of bounds read due to a missing bounds check. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-13Android ID: A-262236670 Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://source.android.com/security/bulletin/pixel/2023-06-01
CVE ID: CVE-2023-21208 State: PUBLISHED Published: 2023-06-28T00:00:00 Last Updated: 2024-12-04T16:02:42.495Z Vendors: n/a Products: Android Problem Types: Information disclosure Description: In setCountryCodeInternal of sta_iface.cpp, there is a possible out of bounds read due to improper input validation. This could lead to local information disclosure with System execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-13Android ID: A-262245254 Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://source.android.com/security/bulletin/pixel/2023-06-01
CVE ID: CVE-2023-21209 State: PUBLISHED Published: 2023-06-28T00:00:00 Last Updated: 2024-12-03T19:56:00.801Z Vendors: n/a Products: Android Problem Types: Elevation of privilege Description: In multiple functions of sta_iface.cpp, there is a possible out of bounds read due to unsafe deserialization. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-13Android ID: A-262236273 Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://source.android.com/security/bulletin/pixel/2023-06-01
CVE ID: CVE-2023-21210 State: PUBLISHED Published: 2023-06-28T00:00:00 Last Updated: 2024-12-03T19:55:07.706Z Vendors: n/a Products: Android Problem Types: Information disclosure Description: In initiateHs20IconQueryInternal of sta_iface.cpp, there is a possible out of bounds read due to improper input validation. This could lead to local information disclosure with System execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-13Android ID: A-262236331 Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://source.android.com/security/bulletin/pixel/2023-06-01
CVE ID: CVE-2023-21211 State: PUBLISHED Published: 2023-06-28T00:00:00 Last Updated: 2024-12-03T19:48:12.587Z Vendors: n/a Products: Android Problem Types: Information disclosure Description: In multiple files, there is a possible out of bounds read due to a heap buffer overflow. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-13Android ID: A-262235998 Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://source.android.com/security/bulletin/pixel/2023-06-01
CVE ID: CVE-2023-21212 State: PUBLISHED Published: 2023-06-28T00:00:00 Last Updated: 2024-12-03T19:39:33.545Z Vendors: n/a Products: Android Problem Types: Information disclosure Description: In multiple files, there is a possible out of bounds read due to a missing bounds check. This could lead to local information disclosure in the wifi server with System execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-13Android ID: A-262236031 Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://source.android.com/security/bulletin/pixel/2023-06-01
CVE ID: CVE-2023-21213 State: PUBLISHED Published: 2023-06-28T00:00:00 Last Updated: 2024-12-03T19:36:33.671Z Vendors: n/a Products: Android Problem Types: Information disclosure Description: In initiateTdlsTeardownInternal of sta_iface.cpp, there is a possible out of bounds read due to a missing bounds check. This could lead to local information disclosure in the wifi server with System execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-13Android ID: A-262235951 Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://source.android.com/security/bulletin/pixel/2023-06-01
CVE ID: CVE-2023-21214 State: PUBLISHED Published: 2023-06-28T00:00:00 Last Updated: 2024-12-03T19:35:23.489Z Vendors: n/a Products: Android Problem Types: Information disclosure Description: In addGroupWithConfigInternal of p2p_iface.cpp, there is a possible out of bounds read due to unsafe deserialization. This could lead to local information disclosure with System execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-13Android ID: A-262235736 Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://source.android.com/security/bulletin/pixel/2023-06-01
CVE ID: CVE-2023-21215 State: PUBLISHED Published: 2023-12-04T22:40:47.418Z Last Updated: 2024-08-02T09:28:26.155Z Vendors: Google Products: Android Problem Types: Elevation of privilege Description: In DevmemIntAcquireRemoteCtx of devicemem_server.c, there is a possible arbitrary code execution due to a race condition. This could lead to local escalation of privilege in the kernel with no additional execution privileges needed. User interaction is not needed for exploitation. Additional Analyst Notes: - CVE Program Container: References: - https://source.android.com/security/bulletin/2023-12-01
CVE ID: CVE-2023-21216 State: PUBLISHED Published: 2023-12-04T22:40:47.608Z Last Updated: 2025-05-29T13:49:46.575Z Vendors: Google Products: Android Problem Types: Elevation of privilege Description: In PMRChangeSparseMemOSMem of physmem_osmem_linux.c, there is a possible arbitrary code execution due to a use after free. This could lead to local escalation of privilege in the kernel with no additional execution privileges needed. User interaction is not needed for exploitation. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://source.android.com/security/bulletin/2023-12-01
CVE ID: CVE-2023-21217 State: PUBLISHED Published: 2023-12-04T22:40:47.799Z Last Updated: 2024-08-02T09:28:26.124Z Vendors: Google Products: Android Problem Types: Elevation of privilege Description: In PMRWritePMPageList of TBD, there is a possible out of bounds write due to an integer overflow. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation. Additional Analyst Notes: - CVE Program Container: References: - https://source.android.com/security/bulletin/2023-12-01
CVE ID: CVE-2023-21218 State: PUBLISHED Published: 2023-12-04T22:40:47.994Z Last Updated: 2024-08-02T09:28:26.131Z Vendors: Google Products: Android Problem Types: Elevation of privilege Description: In PMRChangeSparseMemOSMem of physmem_osmem_linux.c, there is a possible out of bounds write due to an incorrect bounds check. This could lead to local escalation of privilege in the kernel with no additional execution privileges needed. User interaction is not needed for exploitation. Additional Analyst Notes: - CVE Program Container: References: - https://source.android.com/security/bulletin/2023-12-01
CVE ID: CVE-2023-21219 State: PUBLISHED Published: 2023-06-28T00:00:00 Last Updated: 2024-12-03T19:33:15.219Z Vendors: n/a Products: Android Problem Types: Information disclosure Description: there is a possible use of unencrypted transport over cellular networks due to an insecure default value. This could lead to remote information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android kernelAndroid ID: A-264698379References: N/A Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://source.android.com/security/bulletin/pixel/2023-06-01
CVE ID: CVE-2023-21220 State: PUBLISHED Published: 2023-06-28T00:00:00 Last Updated: 2024-12-03T19:30:34.026Z Vendors: n/a Products: Android Problem Types: Information disclosure Description: there is a possible use of unencrypted transport over cellular networks due to an insecure default value. This could lead to remote information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android kernelAndroid ID: A-264590585References: N/A Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://source.android.com/security/bulletin/pixel/2023-06-01
CVE ID: CVE-2023-21222 State: PUBLISHED Published: 2023-06-28T00:00:00 Last Updated: 2024-12-03T19:29:25.404Z Vendors: n/a Products: Android Problem Types: Elevation of privilege Description: In load_dt_data of storage.c, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android kernelAndroid ID: A-266977723References: N/A Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://source.android.com/security/bulletin/pixel/2023-06-01
CVE ID: CVE-2023-21223 State: PUBLISHED Published: 2023-06-28T00:00:00 Last Updated: 2024-12-03T19:26:03.792Z Vendors: n/a Products: Android Problem Types: Information disclosure Description: In LPP_ConvertGNSS_DataBitAssistance of LPP_CommonUtil.c, there is a possible out of bounds read due to a missing bounds check. This could lead to remote information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android kernelAndroid ID: A-256047000References: N/A Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://source.android.com/security/bulletin/pixel/2023-06-01
CVE ID: CVE-2023-21224 State: PUBLISHED Published: 2023-06-28T00:00:00 Last Updated: 2024-12-03T19:25:09.074Z Vendors: n/a Products: Android Problem Types: Information disclosure Description: In ss_ProcessReturnResultComponent of ss_MmConManagement.c, there is a possible out of bounds read due to a heap buffer overflow. This could lead to remote information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android kernelAndroid ID: A-265276966References: N/A Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://source.android.com/security/bulletin/pixel/2023-06-01
CVE ID: CVE-2023-21225 State: PUBLISHED Published: 2023-06-28T00:00:00 Last Updated: 2024-12-03T19:23:46.059Z Vendors: n/a Products: Android Problem Types: Elevation of privilege Description: there is a possible way to bypass the protected confirmation screen due to Failure to lock display power. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is needed for exploitation.Product: AndroidVersions: Android kernelAndroid ID: A-270403821References: N/A Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://source.android.com/security/bulletin/pixel/2023-06-01
CVE ID: CVE-2023-21226 State: PUBLISHED Published: 2023-06-28T00:00:00 Last Updated: 2024-11-27T16:58:18.046Z Vendors: n/a Products: Android Problem Types: Information disclosure Description: In SAEMM_RetrieveTaiList of SAEMM_ContextManagement.c, there is a possible out of bounds read due to an incorrect bounds check. This could lead to remote information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android kernelAndroid ID: A-240728187References: N/A Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://source.android.com/security/bulletin/pixel/2023-06-01
CVE ID: CVE-2023-21227 State: PUBLISHED Published: 2023-12-04T22:40:48.217Z Last Updated: 2024-08-02T09:28:26.129Z Vendors: Google Products: Android Problem Types: Information disclosure Description: In HTBLogKM of htbserver.c, there is a possible information disclosure due to log information disclosure. This could lead to local information disclosure in the kernel with no additional execution privileges needed. User interaction is not needed for exploitation. Additional Analyst Notes: - CVE Program Container: References: - https://source.android.com/security/bulletin/2023-12-01
CVE ID: CVE-2023-21228 State: PUBLISHED Published: 2023-12-04T22:40:48.398Z Last Updated: 2024-08-02T09:28:26.155Z Vendors: Google Products: Android Problem Types: Elevation of privilege Description: In PMRChangeSparseMemOSMem of physmem_osmem_linux.c, there is a possible out of bounds write due to an incorrect bounds check. This could lead to local escalation of privilege in the kernel with no additional execution privileges needed. User interaction is not needed for exploitation. Additional Analyst Notes: - CVE Program Container: References: - https://source.android.com/security/bulletin/2023-12-01
CVE ID: CVE-2023-21229 State: PUBLISHED Published: 2023-08-14T21:11:13.328Z Last Updated: 2024-10-09T14:10:40.032Z Vendors: Google Products: Android Problem Types: Elevation of privilege Description: In registerServiceLocked of ManagedServices.java, there is a possible bypass of background activity launch restrictions due to an unsafe PendingIntent. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://source.android.com/security/bulletin/wear/2023-08-01
CVE ID: CVE-2023-21230 State: PUBLISHED Published: 2023-08-14T21:10:56.039Z Last Updated: 2024-10-09T14:11:15.437Z Vendors: Google Products: Android Problem Types: Information disclosure Description: In onAccessPointChanged of AccessPointPreference.java, there is a possible way for unprivileged apps to receive a broadcast about WiFi access point change and its BSSID or SSID due to a precondition check failure. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://source.android.com/security/bulletin/wear/2
tes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://source.android.com/security/bulletin/wear/2023-08-01
CVE ID: CVE-2023-21231 State: PUBLISHED Published: 2023-08-14T21:10:42.420Z Last Updated: 2024-10-09T14:11:46.447Z Vendors: Google Products: Android Problem Types: Elevation of privilege Description: In getIntentForButton of ButtonManager.java, there is a possible way for an unprivileged application to start a non-exported or permission-protected activity due to a missing permission check. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://source.android.com/security/bulletin/wear/2023-08-01
CVE ID: CVE-2023-21232 State: PUBLISHED Published: 2023-08-14T21:10:31.494Z Last Updated: 2024-10-09T14:12:19.947Z Vendors: Google Products: Android Problem Types: Information disclosure Description: In multiple locations, there is a possible way to retrieve sensor data without permissions due to a permissions bypass. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://source.android.com/security/bulletin/wear/2023-08-01
CVE ID: CVE-2023-21233 State: PUBLISHED Published: 2023-08-14T21:10:12.895Z Last Updated: 2024-10-09T14:18:23.627Z Vendors: Google Products: Android Problem Types: Information disclosure Description: In multiple locations of avrc, there is a possible leak of heap data due to uninitialized data. This could lead to remote information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://source.android.com/security/bulletin/wear/2023-08-01
CVE ID: CVE-2023-21234 State: PUBLISHED Published: 2023-08-14T21:10:03.606Z Last Updated: 2024-10-09T14:19:17.765Z Vendors: Google Products: Android Problem Types: Elevation of privilege Description: In launchConfirmationActivity of ChooseLockSettingsHelper.java, there is a possible way to enable developer options without the lockscreen PIN due to a missing permission check. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://source.android.com/security/bulletin/wear/2023-08-01
CVE ID: CVE-2023-21235 State: PUBLISHED Published: 2023-08-14T21:09:50.973Z Last Updated: 2024-10-09T14:20:00.254Z Vendors: Google Products: Android Problem Types: Elevation of privilege Description: In onCreate of LockSettingsActivity.java, there is a possible way set a new lockscreen PIN without entering the existing PIN due to a permissions bypass. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://source.android.com/docs/security/bulletin/wear/2023/2023-08-01
CVE ID: CVE-2023-21236 State: PUBLISHED Published: 2023-06-28T00:00:00 Last Updated: 2024-12-04T21:43:34.089Z Vendors: n/a Products: Android Problem Types: Elevation of privilege Description: In aoc_service_set_read_blocked of aoc.c, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android kernelAndroid ID: A-270148537References: N/A Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://source.android.com/security/bulletin/pixel/2023-06-01