Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2020-0442 State: PUBLISHED Published: 2020-11-10T12:47:04 Last Updated: 2024-08-04T06:02:51.830Z Vendors: n/a Products: Android Problem Types: Denial of service Description: In Message and toBundle of Notification.java, there is a possible UI slowdown or crash due to improper input validation. This could lead to remote denial of service if a malicious contact file is received, with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-10 Android-11 Android-8.0 Android-8.1 Android-9Android ID: A-147358092 Additional Analyst Notes: - CVE Program Container: References: - https://source.android.com/security/bullet
A-147358092 Additional Analyst Notes: - CVE Program Container: References: - https://source.android.com/security/bulletin/2020-11-01
CVE ID: CVE-2020-0443 State: PUBLISHED Published: 2020-11-10T12:47:23 Last Updated: 2024-08-04T06:02:51.763Z Vendors: n/a Products: Android Problem Types: Denial of service Description: In LocaleList of LocaleList.java, there is a possible forced reboot due to an uncaught exception. This could lead to local denial of service requiring factory reset to restore with User execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-11 Android-8.0 Android-8.1 Android-9 Android-10Android ID: A-152410253 Additional Analyst Notes: - CVE Program Container: References: - https://source.android.com/security/bulletin/2020-11-01
CVE ID: CVE-2020-0444 State: PUBLISHED Published: 2020-12-14T21:50:56 Last Updated: 2024-08-04T06:02:52.012Z Vendors: n/a Products: Android Problem Types: Elevation of privilege Description: In audit_free_lsm_field of auditfilter.c, there is a possible bad kfree due to a logic error in audit_data_to_entry. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android kernelAndroid ID: A-150693166References: Upstream kernel Additional Analyst Notes: - CVE Program Container: References: - https://source.android.com/security/bulletin/2020-12-01
CVE ID: CVE-2020-0445 State: PUBLISHED Published: 2020-11-10T12:53:18 Last Updated: 2024-08-04T06:02:51.881Z Vendors: n/a Products: Android Problem Types: Elevation of privilege Description: There is a possible out of bounds write due to a missing bounds check.Product: AndroidVersions: Android SoCAndroid ID: A-168264527 Additional Analyst Notes: - CVE Program Container: References: - https://source.android.com/security/bulletin/2020-11-01
CVE ID: CVE-2020-0446 State: PUBLISHED Published: 2020-11-10T12:53:43 Last Updated: 2024-08-04T06:02:51.985Z Vendors: n/a Products: Android Problem Types: Elevation of privilege Description: There is a possible out of bounds write due to a missing bounds check.Product: AndroidVersions: Android SoCAndroid ID: A-168264528 Additional Analyst Notes: - CVE Program Container: References: - https://source.android.com/security/bulletin/2020-11-01
CVE ID: CVE-2020-0447 State: PUBLISHED Published: 2020-11-10T12:53:06 Last Updated: 2024-08-04T06:02:51.914Z Vendors: n/a Products: Android Problem Types: Elevation of privilege Description: There is a possible out of bounds write due to a missing bounds check.Product: AndroidVersions: Android SoCAndroid ID: A-168251617 Additional Analyst Notes: - CVE Program Container: References: - https://source.android.com/security/bulletin/2020-11-01
CVE ID: CVE-2020-0448 State: PUBLISHED Published: 2020-11-10T12:48:02 Last Updated: 2024-08-04T06:02:51.831Z Vendors: n/a Products: Android Problem Types: Information disclosure Description: In getPhoneAccountsForPackage of TelecomServiceImpl.java, there is a possible way to access a tracking identifier due to a missing permission check. This could lead to local information disclosure of the identifier, which could be used to track an account across devices, with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-8.0 Android-8.1 Android-9 Android-10 Android-11Android ID: A-153995334 Additional Analyst Notes: - CVE Prog
ons: Android-8.0 Android-8.1 Android-9 Android-10 Android-11Android ID: A-153995334 Additional Analyst Notes: - CVE Program Container: References: - https://source.android.com/security/bulletin/2020-11-01
CVE ID: CVE-2020-0449 State: PUBLISHED Published: 2020-11-10T12:52:32 Last Updated: 2024-08-04T06:02:51.988Z Vendors: n/a Products: Android Problem Types: Remote code execution Description: In btm_sec_disconnected of btm_sec.cc, there is a possible memory corruption due to a use after free. This could lead to remote code execution in the Bluetooth server with no additional execution privileges needed. User interaction is needed for exploitation.Product: AndroidVersions: Android-9 Android-10 Android-11 Android-8.0 Android-8.1Android ID: A-162497143 Additional Analyst Notes: - CVE Program Container: References: - https://source.android.com/security/bulletin/2020-11-01
CVE ID: CVE-2020-0450 State: PUBLISHED Published: 2020-11-10T12:49:05 Last Updated: 2024-08-04T06:02:51.775Z Vendors: n/a Products: Android Problem Types: Information disclosure Description: In rw_i93_sm_format of rw_i93.cc, there is a possible out of bounds read due to uninitialized data. This could lead to remote information disclosure over NFC with no additional execution privileges needed. User interaction is needed for exploitation.Product: AndroidVersions: Android-8.0 Android-8.1 Android-9 Android-10 Android-11Android ID: A-157650336 Additional Analyst Notes: - CVE Program Container: References: - https://source.android.com/security/bulletin/2020-11-01
CVE ID: CVE-2020-0451 State: PUBLISHED Published: 2020-11-10T12:49:50 Last Updated: 2024-08-04T06:02:52.032Z Vendors: n/a Products: Android Problem Types: Remote code execution Description: In sbrDecoder_AssignQmfChannels2SbrChannels of sbrdecoder.cpp, there is a possible out of bounds write due to a heap buffer overflow. This could lead to remote code execution with no additional execution privileges needed. User interaction is needed for exploitation.Product: AndroidVersions: Android-10 Android-11 Android-9 Android-8.0 Android-8.1Android ID: A-158762825 Additional Analyst Notes: - CVE Program Container: References: - https://source.android.com/security/bulletin/2020-11-01
CVE ID: CVE-2020-0452 State: PUBLISHED Published: 2020-11-10T12:50:04 Last Updated: 2024-08-04T06:02:51.976Z Vendors: n/a Products: Android Problem Types: Remote code execution Description: In exif_entry_get_value of exif-entry.c, there is a possible out of bounds write due to an integer overflow. This could lead to remote code execution if a third party app used this library to process remote image data with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-8.1 Android-9 Android-10 Android-11 Android-8.0Android ID: A-159625731 Additional Analyst Notes: - CVE Program Container: References: - https://source.android.com
d-8.0Android ID: A-159625731 Additional Analyst Notes: - CVE Program Container: References: - https://source.android.com/security/bulletin/2020-11-01 - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/SVBD5JRUQPN4LQHTAAJHA3MR5M7YTAC7/ - https://security.gentoo.org/glsa/202011-19 - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/ELDZR6USD5PR34MRK2ZISLCYJ465FNKN/
CVE ID: CVE-2020-0453 State: PUBLISHED Published: 2020-11-10T12:50:23 Last Updated: 2024-08-04T06:02:52.055Z Vendors: n/a Products: Android Problem Types: Information disclosure Description: In updateNotification of BeamTransferManager.java, there is a possible permission bypass due to an unsafe PendingIntent. This could lead to local information disclosure with User execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-9 Android-8.0 Android-8.1Android ID: A-159060474 Additional Analyst Notes: - CVE Program Container: References: - https://source.android.com/security/bulletin/2020-11-01
CVE ID: CVE-2020-0454 State: PUBLISHED Published: 2020-11-10T12:51:28 Last Updated: 2024-08-04T06:02:52.132Z Vendors: n/a Products: Android Problem Types: Information disclosure Description: In callCallbackForRequest of ConnectivityService.java, there is a possible permission bypass due to a missing permission check. This could lead to local information disclosure of the current SSID with User execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-9Android ID: A-161370134 Additional Analyst Notes: - CVE Program Container: References: - https://source.android.com/security/bulletin/2020-11-01 - https://www.usenix.org/conference/usenixsecu
er: References: - https://source.android.com/security/bulletin/2020-11-01 - https://www.usenix.org/conference/usenixsecurity19/presentation/reardon - https://www.usenix.org/system/files/sec19-reardon.pdf
CVE ID: CVE-2020-0455 State: PUBLISHED Published: 2020-12-14T21:53:13 Last Updated: 2024-08-04T06:02:52.142Z Vendors: n/a Products: Android Problem Types: Elevation of privilege Description: There is a possible out of bounds write due to a missing bounds check.Product: AndroidVersions: Android SoCAndroid ID: A-170372514 Additional Analyst Notes: - CVE Program Container: References: - https://source.android.com/security/bulletin/2020-12-01
CVE ID: CVE-2020-0456 State: PUBLISHED Published: 2020-12-14T22:05:37 Last Updated: 2024-08-04T06:02:51.290Z Vendors: n/a Products: Android Problem Types: Elevation of privilege Description: There is a possible out of bounds write due to a missing bounds check.Product: AndroidVersions: Android SoCAndroid ID: A-170378843 Additional Analyst Notes: - CVE Program Container: References: - https://source.android.com/security/bulletin/2020-12-01
CVE ID: CVE-2020-0457 State: PUBLISHED Published: 2020-12-14T21:53:01 Last Updated: 2024-08-04T06:02:51.817Z Vendors: n/a Products: Android Problem Types: Elevation of privilege Description: There is a possible out of bounds write due to a missing bounds check.Product: AndroidVersions: Android SoCAndroid ID: A-170367562 Additional Analyst Notes: - CVE Program Container: References: - https://source.android.com/security/bulletin/2020-12-01
CVE ID: CVE-2020-0458 State: PUBLISHED Published: 2020-12-14T21:51:26 Last Updated: 2024-08-04T06:02:52.039Z Vendors: n/a Products: Android Problem Types: Remote code execution Description: In SPDIFEncoder::writeBurstBufferBytes and related methods of SPDIFEncoder.cpp, there is a possible out of bounds write due to an integer overflow. This could lead to remote code execution with no additional execution privileges needed. User interaction is needed for exploitation.Product: AndroidVersions: Android-9 Android-10 Android-8.0 Android-8.1Android ID: A-160265164 Additional Analyst Notes: - CVE Program Container: References: - https://source.android.com/security/bulletin/2020-12-01
CVE ID: CVE-2020-0459 State: PUBLISHED Published: 2020-12-14T21:51:14 Last Updated: 2024-08-04T06:02:52.012Z Vendors: n/a Products: Android Problem Types: Information disclosure Description: In sendConfiguredNetworkChangedBroadcast of WifiConfigManager.java, there is a possible leak of sensitive WiFi configuration data due to a missing permission check. This could lead to local information disclosure of WiFi network names with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-8.1 Android-9 Android-10 Android-8.0Android ID: A-159373687 Additional Analyst Notes: - CVE Program Container: References: - https://source.andr
Android-8.0Android ID: A-159373687 Additional Analyst Notes: - CVE Program Container: References: - https://source.android.com/security/bulletin/2020-12-01
CVE ID: CVE-2020-0460 State: PUBLISHED Published: 2020-12-14T21:52:01 Last Updated: 2024-08-04T06:02:51.933Z Vendors: n/a Products: Android Problem Types: Information disclosure Description: In createNameCredentialDialog of CertInstaller.java, there exists the possibility of improperly installed certificates due to a logic error. This could lead to remote information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-11Android ID: A-163413737 Additional Analyst Notes: - CVE Program Container: References: - https://source.android.com/security/bulletin/2020-12-01
CVE ID: CVE-2020-0463 State: PUBLISHED Published: 2020-12-14T21:52:45 Last Updated: 2024-08-04T06:02:52.301Z Vendors: n/a Products: Android Problem Types: Information disclosure Description: In sdp_server_handle_client_req of sdp_server.cc, there is a possible out of bounds read due to a missing bounds check. This could lead to remote information disclosure from the bluetooth server with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-10 Android-11 Android-8.0 Android-8.1 Android-9Android ID: A-169342531 Additional Analyst Notes: - CVE Program Container: References: - https://source.android.com/security/bulletin/202
342531 Additional Analyst Notes: - CVE Program Container: References: - https://source.android.com/security/bulletin/2020-12-01
CVE ID: CVE-2020-0464 State: PUBLISHED Published: 2020-12-14T21:50:44 Last Updated: 2024-08-04T06:02:51.924Z Vendors: n/a Products: Android Problem Types: Information disclosure Description: In resolv_cache_lookup of res_cache.cpp, there is a possible side channel information disclosure. This could lead to local information disclosure of accessed web resources with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-10Android ID: A-150371903 Additional Analyst Notes: - CVE Program Container: References: - https://source.android.com/security/bulletin/2020-12-01
CVE ID: CVE-2020-0465 State: PUBLISHED Published: 2020-12-14T21:51:48 Last Updated: 2024-08-04T06:02:51.875Z Vendors: n/a Products: Android Problem Types: Elevation of privilege Description: In various methods of hid-multitouch.c, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android kernelAndroid ID: A-162844689References: Upstream kernel Additional Analyst Notes: - CVE Program Container: References: - https://source.android.com/security/bulletin/2020-12-01
CVE ID: CVE-2020-0466 State: PUBLISHED Published: 2020-12-14T21:50:04 Last Updated: 2024-08-04T06:02:51.841Z Vendors: n/a Products: Android Problem Types: Elevation of privilege Description: In do_epoll_ctl and ep_loop_check_proc of eventpoll.c, there is a possible use after free due to a logic error. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android kernelAndroid ID: A-147802478References: Upstream kernel Additional Analyst Notes: - CVE Program Container: References: - https://source.android.com/security/bulletin/2020-12-01
CVE ID: CVE-2020-0467 State: PUBLISHED Published: 2020-12-14T21:52:20 Last Updated: 2024-08-04T06:02:52.131Z Vendors: n/a Products: Android Problem Types: Information disclosure Description: In onUserStopped of Vpn.java, there is a possible resetting of user preferences due to a logic issue. This could lead to local information disclosure of secure network traffic over a non-VPN link with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-10 Android-11 Android-8.1 Android-9Android ID: A-168500792 Additional Analyst Notes: - CVE Program Container: References: - https://source.android.com/security/bulletin/2020-12-01
CVE ID: CVE-2020-0468 State: PUBLISHED Published: 2020-12-14T21:51:06 Last Updated: 2024-08-04T06:02:52.014Z Vendors: n/a Products: Android Problem Types: Information disclosure Description: In listen() and related functions of TelephonyRegistry.java, there is a possible permissions bypass of location permissions due to a missing permission check. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-10 Android-11Android ID: A-158484422 Additional Analyst Notes: - CVE Program Container: References: - https://source.android.com/security/bulletin/2020-12-01
CVE ID: CVE-2020-0469 State: PUBLISHED Published: 2020-12-14T21:52:31 Last Updated: 2024-08-04T06:02:52.049Z Vendors: n/a Products: Android Problem Types: Denial of service Description: In addEscrowToken of LockSettingsService.java, there is a possible loss of the synthetic password due to logic error. This could lead to local denial of service with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-11Android ID: A-168692734 Additional Analyst Notes: - CVE Program Container: References: - https://source.android.com/security/bulletin/2020-12-01
CVE ID: CVE-2020-0470 State: PUBLISHED Published: 2020-12-14T21:52:10 Last Updated: 2024-08-04T06:02:52.263Z Vendors: n/a Products: Android Problem Types: Information disclosure Description: In extend_frame_highbd of restoration.c, there is a possible out of bounds write due to a heap buffer overflow. This could lead to remote information disclosure with no additional execution privileges needed. User interaction is needed for exploitation.Product: AndroidVersions: Android-11 Android-10Android ID: A-166268541 Additional Analyst Notes: - CVE Program Container: References: - https://source.android.com/security/bulletin/2020-12-01
CVE ID: CVE-2020-0471 State: PUBLISHED Published: 2021-01-11T21:47:56 Last Updated: 2024-08-04T06:02:51.695Z Vendors: n/a Products: Android Problem Types: Elevation of privilege Description: In reassemble_and_dispatch of packet_fragmenter.cc, there is a possible way to inject packets into an encrypted Bluetooth connection due to improper input validation. This could lead to remote escalation of privilege between two Bluetooth devices by a proximal attacker, with no additional execution privileges needed. User interaction is not needed for exploitation. Product: Android; Versions: Android-8.0, Android-8.1, Android-9, Android-10, Android-11; Android ID: A-169327567. Additional Analyst Notes: -
sions: Android-8.0, Android-8.1, Android-9, Android-10, Android-11; Android ID: A-169327567. Additional Analyst Notes: - CVE Program Container: References: - https://source.android.com/security/bulletin/2021-01-01
CVE ID: CVE-2020-0473 State: PUBLISHED Published: 2020-12-15T15:53:42 Last Updated: 2024-08-04T06:02:51.974Z Vendors: n/a Products: Android Problem Types: Elevation of privilege Description: In updateIncomingFileConfirmNotification of BluetoothOppNotification.java, there is a possible permissions bypass. This could lead to local escalation of privilege allowing an attacker with physical possession of the device to transfer files to it over Bluetooth, with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-11Android ID: A-160691486 Additional Analyst Notes: - CVE Program Container: References: - https://source.android.c
roid-11Android ID: A-160691486 Additional Analyst Notes: - CVE Program Container: References: - https://source.android.com/security/bulletin/pixel/2020-12-01
CVE ID: CVE-2020-0474 State: PUBLISHED Published: 2020-12-15T15:53:48 Last Updated: 2024-08-04T06:02:51.696Z Vendors: n/a Products: Android Problem Types: Elevation of privilege Description: In HalCamera::requestNewFrame of HalCamera.cpp, there is a possible use-after-free due to a race condition. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-11Android ID: A-169282240 Additional Analyst Notes: - CVE Program Container: References: - https://source.android.com/security/bulletin/pixel/2020-12-01
CVE ID: CVE-2020-0475 State: PUBLISHED Published: 2020-12-15T15:54:06 Last Updated: 2024-08-04T06:02:52.050Z Vendors: n/a Products: Android Problem Types: Elevation of privilege Description: In createInputConsumer of WindowManagerService.java, there is a possible way to block and intercept input events due to a missing permission check. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is needed for exploitation.Product: AndroidVersions: Android-11Android ID: A-162324374 Additional Analyst Notes: - CVE Program Container: References: - https://source.android.com/security/bulletin/pixel/2020-12-01
CVE ID: CVE-2020-0476 State: PUBLISHED Published: 2020-12-15T15:54:15 Last Updated: 2024-08-04T06:02:51.912Z Vendors: n/a Products: Android Problem Types: Information disclosure Description: In onNotificationRemoved of Assistant.java, there is a possible leak of sensitive information to logs. This could lead to local information disclosure with System execution privileges required. User interaction is not needed for exploitation.Product: AndroidVersions: Android-11Android ID: A-162014574 Additional Analyst Notes: - CVE Program Container: References: - https://source.android.com/security/bulletin/pixel/2020-12-01
CVE ID: CVE-2020-0477 State: PUBLISHED Published: 2020-12-15T15:54:24 Last Updated: 2024-08-04T06:02:51.977Z Vendors: n/a Products: Android Problem Types: Information disclosure Description: In sendLinkConfigurationChangedBroadcast of ClientModeImpl.java, there is a possible information disclosure due to a missing permission check. This could lead to local information disclosure of the current network configuration with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-11Android ID: A-162246414 Additional Analyst Notes: - CVE Program Container: References: - https://source.android.com/security/bulletin/pixel/2020-12-0
ional Analyst Notes: - CVE Program Container: References: - https://source.android.com/security/bulletin/pixel/2020-12-01
CVE ID: CVE-2020-0478 State: PUBLISHED Published: 2020-12-15T15:54:33 Last Updated: 2024-08-04T06:02:52.069Z Vendors: n/a Products: Android Problem Types: Elevation of privilege Description: In extend_frame_lowbd of restoration.c, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is needed for exploitation.Product: AndroidVersions: Android-11Android ID: A-150780418 Additional Analyst Notes: - CVE Program Container: References: - https://source.android.com/security/bulletin/pixel/2020-12-01
CVE ID: CVE-2020-0479 State: PUBLISHED Published: 2020-12-15T15:54:41 Last Updated: 2024-08-04T06:02:51.993Z Vendors: n/a Products: Android Problem Types: Elevation of privilege Description: In callUnchecked of DocumentsProvider.java, there is a possible permissions bypass. This could lead to local escalation of privilege allowing a malicious app to access files available to the DocumentProvider without user permission, with no additional execution privileges needed. User interaction is needed for exploitation.Product: AndroidVersions: Android-11Android ID: A-157294893 Additional Analyst Notes: - CVE Program Container: References: - https://source.android.com/security/bulletin/pixel/2020-12-
tional Analyst Notes: - CVE Program Container: References: - https://source.android.com/security/bulletin/pixel/2020-12-01