Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2019-2205 State: PUBLISHED Published: 2019-11-13T17:37:38 Last Updated: 2024-08-04T18:42:50.859Z Vendors: n/a Products: Android Problem Types: Remote code execution Description: In ProxyResolverV8::SetPacScript of proxy_resolver_v8.cc, there is a possible memory corruption due to a use after free. This could lead to remote code execution with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-8.0 Android-8.1 Android-9 Android-10Android ID: A-139806216 Additional Analyst Notes: - CVE Program Container: References: - https://source.android.com/security/bulletin/2019-11-01
CVE ID: CVE-2019-2206 State: PUBLISHED Published: 2019-11-13T17:37:58 Last Updated: 2024-08-04T18:42:50.932Z Vendors: n/a Products: Android Problem Types: Remote code execution Description: In rw_i93_sm_set_read_only of rw_i93.cc, there is a possible out of bounds write due to a missing bounds check. This could lead to remote code execution over NFC with no additional execution privileges needed. User interaction is needed for exploitation.Product: AndroidVersions: Android-8.0 Android-8.1 Android-9 Android-10Android ID: A-139188579 Additional Analyst Notes: - CVE Program Container: References: - https://source.android.com/security/bulletin/2019-11-01
CVE ID: CVE-2019-2207 State: PUBLISHED Published: 2019-11-13T17:42:02 Last Updated: 2024-08-04T18:42:50.729Z Vendors: n/a Products: Android Problem Types: Elevation of privilege Description: In nfa_hci_handle_admin_gate_rsp of nfa_hci_act.cc, there is a possible out of bound write due to missing bounds checks. This could lead to local escalation of privilege with system execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-8.0 Android-8.1 Android-9 Android-10Android ID: A-124524315 Additional Analyst Notes: - CVE Program Container: References: - https://source.android.com/security/bulletin/2019-11-01
CVE ID: CVE-2019-2208 State: PUBLISHED Published: 2019-11-13T17:42:39 Last Updated: 2024-08-04T18:42:50.881Z Vendors: n/a Products: Android Problem Types: Information disclosure Description: In PromiseBuiltinsAssembler::NewPromiseCapability of builtins-promise.cc, there is a possible out of bounds read in v8 JIT code due to a bug in code generation. This could lead to remote information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation. Product: Android Versions: Android-8.1, Android-9 Android ID: A-138441919 Additional Analyst Notes: - CVE Program Container: References: - https://source.android.com/security/bulletin/2020-01-01
CVE ID: CVE-2019-2209 State: PUBLISHED Published: 2019-11-13T17:43:05 Last Updated: 2024-08-04T18:42:50.913Z Vendors: n/a Products: Android Problem Types: Information disclosure Description: In BTA_DmPinReply of bta_dm_api.cc, there is a possible out of bounds read due to an incorrect bounds check. This could lead to local information disclosure with User execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-8.0 Android-8.1 Android-9 Android-10Android ID: A-139287605 Additional Analyst Notes: - CVE Program Container: References: - https://source.android.com/security/bulletin/2019-11-01
CVE ID: CVE-2019-2210 State: PUBLISHED Published: 2019-11-13T19:47:47 Last Updated: 2024-08-04T18:42:51.079Z Vendors: n/a Products: Android Problem Types: Elevation of privilege Description: In load_logging_config of qmi_vs_service.cc, there is a possible out of bounds write due to a heap buffer overflow. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-9 Android-10Android ID: A-139148442 Additional Analyst Notes: - CVE Program Container: References: - https://source.android.com/security/bulletin/pixel/2019-11-01
CVE ID: CVE-2019-2211 State: PUBLISHED Published: 2019-11-13T17:34:25 Last Updated: 2024-08-04T18:42:50.867Z Vendors: n/a Products: Android Problem Types: Information disclosure Description: In createProjectionMapForQuery of TvProvider.java, there is possible SQL injection. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-8.0 Android-8.1 Android-9 Android-10Android ID: A-135269669 Additional Analyst Notes: - CVE Program Container: References: - https://source.android.com/security/bulletin/2019-11-01
CVE ID: CVE-2019-2212 State: PUBLISHED Published: 2019-11-13T17:42:20 Last Updated: 2024-08-04T18:42:50.944Z Vendors: n/a Products: Android Problem Types: Information disclosure Description: In poisson_distribution of random, there is an out of bounds read. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-8.0 Android-8.1 Android-9 Android-10Android ID: A-139690488 Additional Analyst Notes: - CVE Program Container: References: - https://source.android.com/security/bulletin/2019-11-01
CVE ID: CVE-2019-2213 State: PUBLISHED Published: 2019-11-13T17:44:20 Last Updated: 2024-08-04T18:42:50.962Z Vendors: n/a Products: Android Problem Types: Elevation of privilege Description: In binder_free_transaction of binder.c, there is a possible use-after-free due to a race condition. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android kernelAndroid ID: A-133758011References: Upstream kernel Additional Analyst Notes: - CVE Program Container: References: - https://source.android.com/security/bulletin/2019-11-01
CVE ID: CVE-2019-2214 State: PUBLISHED Published: 2019-11-13T17:44:37 Last Updated: 2024-08-04T18:42:51.098Z Vendors: n/a Products: Android Problem Types: Elevation of privilege Description: In binder_transaction of binder.c, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android kernelAndroid ID: A-136210786References: Upstream kernel Additional Analyst Notes: - CVE Program Container: References: - https://source.android.com/security/bulletin/2019-11-01 - https://usn.ubuntu.com/4226-1/ - http://pack
er: References: - https://source.android.com/security/bulletin/2019-11-01 - https://usn.ubuntu.com/4226-1/ - http://packetstormsecurity.com/files/156185/Kernel-Live-Patch-Security-Notice-LSN-0062-1.html
CVE ID: CVE-2019-2215 State: PUBLISHED Published: 2019-10-11T18:16:48.000Z Last Updated: 2025-10-21T23:45:29.242Z Vendors: n/a Products: Android Problem Types: Elevation of privilege Description: A use-after-free in binder.c allows an elevation of privilege from an application to the Linux Kernel. No user interaction is required to exploit this vulnerability, however exploitation does require either the installation of a malicious local application or a separate vulnerability in a network facing application.Product: AndroidAndroid ID: A-141720095 Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://source.android.com/security/bulletin/2019-10-01 -
CVE Program Container: - CISA ADP Vulnrichment: References: - https://source.android.com/security/bulletin/2019-10-01 - http://seclists.org/fulldisclosure/2019/Oct/38 - http://packetstormsecurity.com/files/154911/Android-Binder-Use-After-Free.html - http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20191030-01-binder-en - https://security.netapp.com/advisory/ntap-20191031-0005/ - https://seclists.org/bugtraq/2019/Nov/11 - http://packetstormsecurity.com/files/155212/Slackware-Security-Advisory-Slackware-14.2-kernel-Updates.html - https://usn.ubuntu.com/4186-1/ - https://lists.debian.org/debian-lts-announce/2020/01/msg00013.html - http://packetstormsecurity.com/files/156495/Android
https://lists.debian.org/debian-lts-announce/2020/01/msg00013.html - http://packetstormsecurity.com/files/156495/Android-Binder-Use-After-Free.html - https://lists.debian.org/debian-lts-announce/2020/03/msg00001.html
CVE ID: CVE-2019-2216 State: PUBLISHED Published: 2020-03-15T21:10:25 Last Updated: 2024-08-04T18:42:50.838Z Vendors: n/a Products: Android Problem Types: Elevation of privilege Description: In overlay notifications, there is a possible hidden notification due to improper input validation. This could lead to a local escalation of privilege because the user is not notified of an overlaying app, with User execution privileges needed. User interaction is needed for exploitation.Product: Android Versions: Android-10 Android ID: A-38390530 Additional Analyst Notes: - CVE Program Container: References: - https://source.android.com/security/bulletin/android-10
CVE ID: CVE-2019-2217 State: PUBLISHED Published: 2019-12-06T22:40:39 Last Updated: 2024-08-04T18:42:50.828Z Vendors: n/a Products: Android Problem Types: Elevation of privilege Description: In setCpuVulkanInUse of GpuStats.cpp, there is possible memory corruption due to a use after free. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-10Android ID: A-141003796 Additional Analyst Notes: - CVE Program Container: References: - https://source.android.com/security/bulletin/2019-12-01
CVE ID: CVE-2019-2218 State: PUBLISHED Published: 2019-12-06T22:40:39 Last Updated: 2024-08-04T18:42:50.869Z Vendors: n/a Products: Android Problem Types: Elevation of privilege Description: In createSessionInternal of PackageInstallerService.java, there is a possible improper permission grant due to a missing permission check. This could lead to local escalation of privilege by installing malicious packages with User execution privileges needed. User interaction is not needed for exploitation. Product: Android Versions: Android-8.0, Android-8.1, Android-9, and Android-10 Android ID: A-141169173 Additional Analyst Notes: - CVE Program Container: References: - https://source.android.com/secur
ndroid ID: A-141169173 Additional Analyst Notes: - CVE Program Container: References: - https://source.android.com/security/bulletin/2020-01-01
CVE ID: CVE-2019-2219 State: PUBLISHED Published: 2019-12-06T22:40:40 Last Updated: 2024-08-04T18:42:50.871Z Vendors: n/a Products: Android Problem Types: Information disclosure Description: In several functions of NotificationManagerService.java and related files, there is a possible way to record audio from the background without notification to the user due to a permission bypass. This could lead to local escalation of privilege with User execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-11Android ID: A-119041698 Additional Analyst Notes: - CVE Program Container: References: - https://source.android.com/security/bulletin/2021-05
98 Additional Analyst Notes: - CVE Program Container: References: - https://source.android.com/security/bulletin/2021-05-01
CVE ID: CVE-2019-2220 State: PUBLISHED Published: 2019-12-06T22:40:39 Last Updated: 2024-08-04T18:42:50.919Z Vendors: n/a Products: Android Problem Types: Information disclosure Description: In checkOperation of AppOpsService.java, there is a possible bypass of user interaction requirements due to mishandling application suspend. This could lead to local information disclosure no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-9 Android-10Android ID: A-138636979 Additional Analyst Notes: - CVE Program Container: References: - https://source.android.com/security/bulletin/2019-12-01
CVE ID: CVE-2019-2221 State: PUBLISHED Published: 2019-12-06T22:40:40 Last Updated: 2024-08-04T18:42:50.915Z Vendors: n/a Products: Android Problem Types: Elevation of privilege Description: In hasActivityInVisibleTask of WindowProcessController.java there’s a possible bypass of user interaction requirements due to incorrect handling of top activities in INITIALIZING state. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-10Android ID: A-138583650 Additional Analyst Notes: - CVE Program Container: References: - https://source.android.com/security/bulletin/2019-12-
0 Additional Analyst Notes: - CVE Program Container: References: - https://source.android.com/security/bulletin/2019-12-01
CVE ID: CVE-2019-2222 State: PUBLISHED Published: 2019-12-06T22:40:40 Last Updated: 2024-08-04T18:42:50.924Z Vendors: n/a Products: Android Problem Types: Remote code execution Description: n ihevcd_parse_slice_data of ihevcd_parse_slice.c, there is a possible out of bounds write due to a missing bounds check. This could lead to remote code execution with no additional execution privileges needed. User interaction is needed for exploitation.Product: AndroidVersions: Android-8.0 Android-8.1 Android-9 Android-10Android ID: A-140322595 Additional Analyst Notes: - CVE Program Container: References: - https://source.android.com/security/bulletin/2019-12-01
CVE ID: CVE-2019-2223 State: PUBLISHED Published: 2019-12-06T22:40:40 Last Updated: 2024-08-04T18:42:51.107Z Vendors: n/a Products: Android Problem Types: Remote code execution Description: In ihevcd_ref_list of ihevcd_ref_list.c, there is a possible out of bounds write due to a missing bounds check. This could lead to remote code execution with no additional execution privileges needed. User interaction is needed for exploitation.Product: AndroidVersions: Android-8.0 Android-8.1 Android-9 Android-10Android ID: A-140692129 Additional Analyst Notes: - CVE Program Container: References: - https://source.android.com/security/bulletin/2019-12-01
CVE ID: CVE-2019-2224 State: REJECTED Published: 2019-12-06T22:40:40 Last Updated: 2020-01-15T01:10:38 Description: No description available.
CVE ID: CVE-2019-2225 State: PUBLISHED Published: 2019-12-06T22:40:40 Last Updated: 2024-08-04T18:42:51.108Z Vendors: n/a Products: Android Problem Types: Elevation of privilege Description: When pairing with a Bluetooth device, it may be possible to pair a malicious device without any confirmation from the user, and that device may be able to interact with the phone. This could lead to remote escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-8.0 Android-8.1 Android-9 Android-10Android ID: A-110433804 Additional Analyst Notes: - CVE Program Container: References: - https://source.android.c
roid-10Android ID: A-110433804 Additional Analyst Notes: - CVE Program Container: References: - https://source.android.com/security/bulletin/2019-12-01
CVE ID: CVE-2019-2226 State: PUBLISHED Published: 2019-12-06T22:40:40 Last Updated: 2024-08-04T18:42:50.931Z Vendors: n/a Products: Android Problem Types: Information disclosure Description: In device_class_to_int of device_class.cc, there is a possible out of bounds read due to improper casting. This could lead to local information disclosure in the Bluetooth server with User execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-8.0 Android-8.1 Android-9 Android-10Android ID: A-140152619 Additional Analyst Notes: - CVE Program Container: References: - https://source.android.com/security/bulletin/2019-12-01
CVE ID: CVE-2019-2227 State: PUBLISHED Published: 2019-12-06T22:40:40 Last Updated: 2024-08-04T18:42:51.116Z Vendors: n/a Products: Android Problem Types: Information disclosure Description: In DeepCopy of btif_av.cc, there is a possible out of bounds read due to improper casting. This could lead to remote information disclosure over Bluetooth with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-9 Android-10Android ID: A-140768453 Additional Analyst Notes: - CVE Program Container: References: - https://source.android.com/security/bulletin/2019-12-01
CVE ID: CVE-2019-2228 State: PUBLISHED Published: 2019-12-06T22:40:40 Last Updated: 2024-08-04T18:42:51.106Z Vendors: n/a Products: Android Problem Types: Information disclosure Description: In array_find of array.c, there is a possible out-of-bounds read due to an incorrect bounds check. This could lead to local information disclosure in the printer spooler with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-8.0 Android-8.1 Android-9 Android-10Android ID: A-111210196 Additional Analyst Notes: - CVE Program Container: References: - https://source.android.com/security/bulletin/2019-12-01 - https://lists.debian.org/d
VE Program Container: References: - https://source.android.com/security/bulletin/2019-12-01 - https://lists.debian.org/debian-lts-announce/2019/12/msg00030.html - https://usn.ubuntu.com/4340-1/
CVE ID: CVE-2019-2229 State: PUBLISHED Published: 2019-12-06T22:40:40 Last Updated: 2024-08-04T18:42:50.847Z Vendors: n/a Products: Android Problem Types: Information disclosure Description: In updateWidget of BaseWidgetProvider.java, there is a possible leak of user data due to a missing permission check. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-8.0 Android-8.1 Android-9 Android-10Android ID: A-139803872 Additional Analyst Notes: - CVE Program Container: References: - https://source.android.com/security/bulletin/2019-12-01
CVE ID: CVE-2019-2230 State: PUBLISHED Published: 2019-12-06T22:40:40 Last Updated: 2024-08-04T18:42:50.953Z Vendors: n/a Products: Android Problem Types: Information disclosure Description: In nfcManager_routeAid and nfcManager_unrouteAid of NativeNfcManager.cpp, there is possible memory reuse due to a use after free. This could lead to remote information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-10Android ID: A-141170038 Additional Analyst Notes: - CVE Program Container: References: - https://source.android.com/security/bulletin/2019-12-01
CVE ID: CVE-2019-2231 State: PUBLISHED Published: 2019-12-06T22:40:40 Last Updated: 2024-08-04T18:42:51.112Z Vendors: n/a Products: Android Problem Types: Information disclosure Description: In Blob::Blob of blob.cpp, there is a possible unencrypted master key due to improper input validation. This could lead to local information disclosure with System execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-9 Android-10Android ID: A-141955555 Additional Analyst Notes: - CVE Program Container: References: - https://source.android.com/security/bulletin/2019-12-01
CVE ID: CVE-2019-2232 State: PUBLISHED Published: 2019-12-06T22:40:39 Last Updated: 2024-08-04T18:42:50.849Z Vendors: n/a Products: Android Problem Types: Denial of service Description: In handleRun of TextLine.java, there is a possible application crash due to improper input validation. This could lead to remote denial of service when processing Unicode with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-8.0 Android-8.1 Android-9 Android-10Android ID: A-140632678 Additional Analyst Notes: - CVE Program Container: References: - https://source.android.com/security/bulletin/2019-12-01
CVE ID: CVE-2019-2233 State: PUBLISHED Published: 2019-11-13T17:39:57 Last Updated: 2024-08-04T18:42:51.110Z Vendors: n/a Products: Android Problem Types: Elevation of privilege Description: In getUserCount and getCount of UserSwitcherController.java, there is possible new user creation due to a logic error. This could lead to local escalation of privilege for an attacker who has physical access to the device with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-10Android ID: A-140486529 Additional Analyst Notes: - CVE Program Container: References: - https://source.android.com/security/bulletin/2019-11-01
CVE ID: CVE-2019-2235 State: PUBLISHED Published: 2019-07-25T16:33:17 Last Updated: 2024-08-04T18:42:51.117Z Vendors: Qualcomm, Inc. Products: Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wired Infrastructure and Networking Problem Types: Buffer Copy Without Checking Size of Input in QTEE Description: Buffer overflow occurs when emulated RPMB is used due to sector size assumptions in the TA rollback protection logic. in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer Electronics Connectivit
tion logic. in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wired Infrastructure and Networking in MDM9206, MDM9607, MDM9650, MDM9655, MSM8996AU, QCS404, QCS605, Qualcomm 215, SD 410/12, SD 425, SD 427, SD 430, SD 435, SD 439 / SD 429, SD 450, SD 625, SD 632, SD 636, SD 712 / SD 710 / SD 670, SD 820, SD 820A, SD 835, SD 845 / SD 850, SD 8CX, SDA660, SDM439, SDM630, SDM660, Snapdragon_High_Med_2016, SXR1130 Additional Analyst Notes: - CVE Program Container: References: - https://www.qualcomm.com/company/product-security/bull
CVE ID: CVE-2019-2236 State: PUBLISHED Published: 2019-07-25T16:33:17 Last Updated: 2024-08-04T18:42:51.118Z Vendors: Qualcomm, Inc. Products: Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wired Infrastructure and Networking Problem Types: Null pointer dereference while terminating secure application Description: Null pointer dereference during secure application termination using specific application ids. in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer Electronics Connectivity, Snapdrago
in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wired Infrastructure and Networking in IPQ8074, MDM9206, MDM9607, MDM9650, MDM9655, MSM8996AU, QCA8081, QCS605, Qualcomm 215, SD 410/12, SD 425, SD 427, SD 430, SD 435, SD 439 / SD 429, SD 450, SD 625, SD 632, SD 636, SD 650/52, SD 675, SD 712 / SD 710 / SD 670, SD 730, SD 820, SD 820A, SD 835, SD 8CX, SDA660, SDM439, SDM630, SDM660, Snapdragon_High_Med_2016, SXR1130 Additional Analyst Notes: - CVE Program Container: References: - https://www.qualcomm.com/company/product-secur
SXR1130 Additional Analyst Notes: - CVE Program Container: References: - https://www.qualcomm.com/company/product-security/bulletins
CVE ID: CVE-2019-2237 State: PUBLISHED Published: 2019-07-25T16:33:17 Last Updated: 2024-08-04T18:42:51.203Z Vendors: Qualcomm, Inc. Products: Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile Problem Types: Detection of Error condition Without Action in Content Protection processing module Description: Failure in taking appropriate action to handle the error case If keypad gpio deactivation fails leads to silent failure scenario and subsequent logic gets executed everytime in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer IOT, Snapdra