Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2023-20924 State: PUBLISHED Published: 2023-01-24T00:00:00.000Z Last Updated: 2025-04-02T14:43:26.112Z Vendors: n/a Products: Android Problem Types: Elevation of privilege Description: In (TBD) of (TBD), there is a possible way to bypass the lockscreen due to Biometric Auth Failure. This could lead to local escalation of privilege with physical access to the device with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android kernelAndroid ID: A-240428519References: N/A Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://source.android.com/security/bulletin/pixel/2023
- CVE Program Container: - CISA ADP Vulnrichment: References: - https://source.android.com/security/bulletin/pixel/2023-01-01
CVE ID: CVE-2023-20925 State: PUBLISHED Published: 2023-01-24T00:00:00.000Z Last Updated: 2025-04-02T14:18:11.217Z Vendors: n/a Products: Android Problem Types: Elevation of privilege Description: In setUclampMinLocked of PowerSessionManager.cpp, there is a possible way to corrupt memory due to a use after free. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android kernelAndroid ID: A-236674672References: N/A Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://source.android.com/security/bulletin/pixel/2023-01-01
CVE ID: CVE-2023-20926 State: PUBLISHED Published: 2023-03-24T00:00:00.000Z Last Updated: 2025-02-28T20:32:43.365Z Vendors: n/a Products: Android Problem Types: Elevation of privilege Description: In onParentVisible of HeaderPrivacyIconsController.kt, there is a possible way to bypass factory reset protections due to a missing permission check. This could lead to local escalation of privilege with physical access to a device that's been factory reset with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-12 Android-12L Android-13Android ID: A-253043058 Additional Analyst Notes: - CVE Program Container: - CISA ADP Vuln
roid-12 Android-12L Android-13Android ID: A-253043058 Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://source.android.com/security/bulletin/2023-03-01
CVE ID: CVE-2023-20927 State: PUBLISHED Published: 2023-02-15T00:00:00.000Z Last Updated: 2025-03-19T17:44:37.325Z Vendors: n/a Products: Android Problem Types: Elevation of privilege Description: In permissions of AndroidManifest.xml, there is a possible way to grant signature permissions due to a permissions bypass. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-13Android ID: A-244216503 Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://source.android.com/security/bulletin/aaos/2023-02-01
CVE ID: CVE-2023-20928 State: PUBLISHED Published: 2023-01-24T00:00:00.000Z Last Updated: 2025-04-02T14:42:10.278Z Vendors: n/a Products: Android Problem Types: Elevation of privilege Description: In binder_vma_close of binder.c, there is a possible use after free due to improper locking. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android kernelAndroid ID: A-254837884References: Upstream kernel Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://source.android.com/security/bulletin/2023-01-01 - http://packetstormsecurity
ISA ADP Vulnrichment: References: - https://source.android.com/security/bulletin/2023-01-01 - http://packetstormsecurity.com/files/170855/Android-Binder-VMA-Management-Security-Issues.html
CVE ID: CVE-2023-20929 State: PUBLISHED Published: 2023-03-24T00:00:00.000Z Last Updated: 2025-02-28T20:34:22.021Z Vendors: n/a Products: Android Problem Types: Information disclosure Description: In sendHalfSheetCancelBroadcast of HalfSheetActivity.java, there is a possible way to learn nearby BT MAC addresses due to an unrestricted broadcast intent. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-13Android ID: A-234442700 Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://source.android.com/security/bulletin/2023-03
es: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://source.android.com/security/bulletin/2023-03-01
CVE ID: CVE-2023-20930 State: PUBLISHED Published: 2023-05-15T00:00:00.000Z Last Updated: 2025-01-24T18:07:54.394Z Vendors: n/a Products: Android Problem Types: Denial of service Description: In pushDynamicShortcut of ShortcutPackage.java, there is a possible way to get the device into a boot loop due to resource exhaustion. This could lead to local denial of service with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-11 Android-12 Android-12L Android-13Android ID: A-250576066 Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://source.android.com/security/bulletin/2023-
otes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://source.android.com/security/bulletin/2023-05-01
CVE ID: CVE-2023-20931 State: PUBLISHED Published: 2023-03-24T00:00:00.000Z Last Updated: 2025-02-28T20:36:16.108Z Vendors: n/a Products: Android Problem Types: Elevation of privilege Description: In avdt_scb_hdl_write_req of avdt_scb_act.cc, there is a possible out of bounds write due to a heap buffer overflow. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-11 Android-12 Android-12L Android-13Android ID: A-242535997 Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://source.android.com/security/bulletin/2023-03-01
CVE ID: CVE-2023-20932 State: PUBLISHED Published: 2023-02-28T00:00:00.000Z Last Updated: 2025-03-21T16:08:22.211Z Vendors: n/a Products: Android Problem Types: Information disclosure Description: In onCreatePreferences of EditInfoFragment.java, there is a possible way to read contacts belonging to other users due to improper input validation. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-10 Android-11 Android-12 Android-12L Android-13Android ID: A-248251018 Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://source.
D: A-248251018 Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://source.android.com/security/bulletin/2023-02-01
CVE ID: CVE-2023-20933 State: PUBLISHED Published: 2023-02-28T00:00:00.000Z Last Updated: 2025-03-21T17:48:09.462Z Vendors: n/a Products: Android Problem Types: Elevation of privilege Description: In several functions of MediaCodec.cpp, there is a possible way to corrupt memory due to a use after free. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-10 Android-11 Android-12 Android-12L Android-13Android ID: A-245860753 Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://source.android.com/security/bulletin/2023-02-01
CVE ID: CVE-2023-20934 State: PUBLISHED Published: 2023-02-28T00:00:00.000Z Last Updated: 2025-03-21T17:52:17.068Z Vendors: n/a Products: Android Problem Types: Elevation of privilege Description: In resolveAttributionSource of ServiceUtilities.cpp, there is a possible way to disable the microphone privacy indicator due to a permissions bypass. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-12 Android-12L Android-13Android ID: A-258672042 Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://source.android.com/security
ional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://source.android.com/security/bulletin/2023-02-01
CVE ID: CVE-2023-20935 State: PUBLISHED Published: 2023-04-19T00:00:00.000Z Last Updated: 2025-02-05T19:03:29.671Z Vendors: n/a Products: Android Problem Types: Information disclosure Description: In deserialize of multiple files, there is a possible out of bounds read due to a missing bounds check. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-11 Android-12 Android-12L Android-13Android ID: A-256589724 Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://source.android.com/security/bulletin/2023-04-01
CVE ID: CVE-2023-20936 State: PUBLISHED Published: 2023-03-24T00:00:00.000Z Last Updated: 2025-02-25T21:23:40.224Z Vendors: n/a Products: Android Problem Types: Elevation of privilege Description: In bta_av_rc_disc_done of bta_av_act.cc, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-11 Android-12 Android-12L Android-13Android ID: A-226927612 Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://source.android.com/security/bulletin/2023-03-01
CVE ID: CVE-2023-20937 State: PUBLISHED Published: 2023-02-28T00:00:00.000Z Last Updated: 2025-03-21T17:54:01.670Z Vendors: n/a Products: Android Problem Types: Elevation of privilege Description: In several functions of the Android Linux kernel, there is a possible way to corrupt memory due to a use after free. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android kernelAndroid ID: A-257443051References: Upstream kernel Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://source.android.com/security/bulletin/2023-02-01 - ht
E Program Container: - CISA ADP Vulnrichment: References: - https://source.android.com/security/bulletin/2023-02-01 - http://packetstormsecurity.com/files/171239/Android-GKI-Kernels-Contain-Broken-Non-Upstream-Speculative-Page-Faults-MM-Code.html
CVE ID: CVE-2023-20938 State: PUBLISHED Published: 2023-02-28T00:00:00 Last Updated: 2024-08-02T09:21:33.455Z Vendors: n/a Products: Android Problem Types: Elevation of privilege Description: In binder_transaction_buffer_release of binder.c, there is a possible use after free due to improper input validation. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android kernelAndroid ID: A-257685302References: Upstream kernel Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://source.android.com/security/bulletin/2023-02-01
CVE ID: CVE-2023-20939 State: PUBLISHED Published: 2023-02-28T00:00:00.000Z Last Updated: 2025-03-21T17:58:24.037Z Vendors: n/a Products: Android Problem Types: Elevation of privilege Description: In multiple functions of looper_backed_event_loop.cpp, there is a possible way to corrupt memory due to improper locking. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-12 Android-12L Android-13Android ID: A-243362981 Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://source.android.com/security/bulletin/2023-02-01
CVE ID: CVE-2023-20940 State: PUBLISHED Published: 2023-02-28T00:00:00.000Z Last Updated: 2025-03-21T18:01:08.189Z Vendors: n/a Products: Android Problem Types: Elevation of privilege Description: In the Android operating system, there is a possible way to replace a boot partition due to improperly used crypto. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-13Android ID: A-256237041 Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://source.android.com/security/bulletin/2023-02-01
CVE ID: CVE-2023-20941 State: PUBLISHED Published: 2023-04-19T00:00:00.000Z Last Updated: 2025-02-05T19:01:55.315Z Vendors: n/a Products: Android Problem Types: Elevation of privilege Description: In acc_ctrlrequest_composite of f_accessory.c, there is a possible out of bounds write due to a missing bounds check. This could lead to physical escalation of privilege with no additional execution privileges needed. User interaction is needed for exploitation.Product: AndroidVersions: Android kernelAndroid ID: A-264029575References: Upstream kernel Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://source.android.com/security/bulletin/2023-04-01
CVE ID: CVE-2023-20942 State: PUBLISHED Published: 2023-07-12T23:18:19.060Z Last Updated: 2024-11-06T16:50:08.135Z Vendors: Google Products: Android Problem Types: Elevation of privilege Description: In openMmapStream of AudioFlinger.cpp, there is a possible way to record audio without displaying the microphone privacy indicator due to a logic error in the code. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://android.googlesource.com/platform/frameworks/av/+/bae3b00a5873d1562679a1289fd8490178cfe064
hment: References: - https://android.googlesource.com/platform/frameworks/av/+/bae3b00a5873d1562679a1289fd8490178cfe064 - https://android.googlesource.com/platform/frameworks/av/+/b072419650958c41c87d2baa572dc2fe6da9ea6b - https://android.googlesource.com/platform/frameworks/av/+/770b45c3c1619cf4008b89e7a0f4392bf2224bbc - https://source.android.com/security/bulletin/2023-07-01
CVE ID: CVE-2023-20943 State: PUBLISHED Published: 2023-02-28T00:00:00.000Z Last Updated: 2025-03-21T18:16:13.619Z Vendors: n/a Products: Android Problem Types: Elevation of privilege Description: In clearApplicationUserData of ActivityManagerService.java, there is a possible way to remove system files due to a path traversal error. This could lead to local escalation of privilege with User execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-10 Android-11 Android-12 Android-12L Android-13Android ID: A-240267890 Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://source.android.com/securit
tional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://source.android.com/security/bulletin/2023-02-01
CVE ID: CVE-2023-20944 State: PUBLISHED Published: 2023-02-28T00:00:00.000Z Last Updated: 2025-03-21T18:18:12.520Z Vendors: n/a Products: Android Problem Types: Elevation of privilege Description: In run of ChooseTypeAndAccountActivity.java, there is a possible escalation of privilege due to unsafe deserialization. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-10 Android-11 Android-12 Android-12L Android-13Android ID: A-244154558 Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://source.android.com/security/bulleti
alyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://source.android.com/security/bulletin/2023-02-01
CVE ID: CVE-2023-20945 State: PUBLISHED Published: 2023-02-28T00:00:00.000Z Last Updated: 2025-03-21T18:19:43.089Z Vendors: n/a Products: Android Problem Types: Elevation of privilege Description: In phNciNfc_MfCreateXchgDataHdr of phNxpExtns_MifareStd.cpp, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-10Android ID: A-246932269 Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://source.android.com/security/bulletin/2023-02-01
CVE ID: CVE-2023-20946 State: PUBLISHED Published: 2023-02-28T00:00:00.000Z Last Updated: 2025-03-21T18:20:46.668Z Vendors: n/a Products: Android Problem Types: Elevation of privilege Description: In onStart of BluetoothSwitchPreferenceController.java, there is a possible permission bypass due to a confused deputy. This could lead to remote escalation of privilege in Bluetooth settings with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-11 Android-12 Android-12L Android-13Android ID: A-244423101 Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://source.android.com/secu
dditional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://source.android.com/security/bulletin/2023-02-01
CVE ID: CVE-2023-20947 State: PUBLISHED Published: 2023-03-24T00:00:00.000Z Last Updated: 2025-02-28T20:39:20.568Z Vendors: n/a Products: Android Problem Types: Elevation of privilege Description: In getGroupState of GrantPermissionsViewModel.kt, there is a possible way to keep a one-time permission granted due to a permissions bypass. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-12 Android-12L Android-13Android ID: A-237405974 Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://source.android.com/security/bulletin
lyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://source.android.com/security/bulletin/2023-03-01
CVE ID: CVE-2023-20948 State: PUBLISHED Published: 2023-02-28T00:00:00.000Z Last Updated: 2025-03-18T15:16:17.714Z Vendors: n/a Products: Android Problem Types: Information disclosure Description: In dropFramesUntilIframe of AAVCAssembler.cpp, there is a possible out of bounds read due to a heap buffer overflow. This could lead to remote information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-12 Android-12L Android-13Android ID: A-230630526 Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://source.android.com/security/bulletin/2023-02-01
CVE ID: CVE-2023-20949 State: PUBLISHED Published: 2023-02-15T00:00:00.000Z Last Updated: 2025-03-19T17:42:20.999Z Vendors: n/a Products: Android Problem Types: Information disclosure Description: In s2mpg11_pmic_probe of s2mpg11-regulator.c, there is a possible out of bounds read due to a heap buffer overflow. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android kernelAndroid ID: A-259323133References: N/A Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://source.android.com/security/bulletin/pixel/2023-02-01
CVE ID: CVE-2023-20950 State: PUBLISHED Published: 2023-04-19T00:00:00.000Z Last Updated: 2025-02-05T19:00:48.660Z Vendors: n/a Products: Android Problem Types: Elevation of privilege Description: In AlarmManagerActivity of AlarmManagerActivity.java, there is a possible way to bypass background activity launch restrictions via a pendingIntent. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-11 Android-12 Android-12LAndroid ID: A-195756028 Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://source.android.com/security/
onal Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://source.android.com/security/bulletin/2023-04-01
CVE ID: CVE-2023-20951 State: PUBLISHED Published: 2023-03-24T00:00:00.000Z Last Updated: 2025-02-25T21:29:48.021Z Vendors: n/a Products: Android Problem Types: Remote code execution Description: In gatt_process_prep_write_rsp of gatt_cl.cc, there is a possible out of bounds write due to a missing bounds check. This could lead to remote code execution with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-11 Android-12 Android-12L Android-13Android ID: A-258652631 Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://source.android.com/security/bulletin/2023-03-01
CVE ID: CVE-2023-20952 State: PUBLISHED Published: 2023-03-24T00:00:00.000Z Last Updated: 2025-02-25T21:21:20.363Z Vendors: n/a Products: Android Problem Types: Information disclosure Description: In A2DP_BuildCodecHeaderSbc of a2dp_sbc.cc, there is a possible out of bounds write due to a missing bounds check. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-11 Android-12 Android-12L Android-13Android ID: A-186803518 Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://source.android.com/security/bulletin/2023-03-01
CVE ID: CVE-2023-20953 State: PUBLISHED Published: 2023-03-24T00:00:00.000Z Last Updated: 2025-02-25T21:20:11.175Z Vendors: n/a Products: Android Problem Types: Elevation of privilege Description: In onPrimaryClipChanged of ClipboardListener.java, there is a possible way to bypass factory reset protection due to incorrect UI being shown prior to setup completion. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is needed for exploitation.Product: AndroidVersions: Android-13Android ID: A-251778420 Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://source.android.com/security/bulleti
alyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://source.android.com/security/bulletin/2023-03-01
CVE ID: CVE-2023-20954 State: PUBLISHED Published: 2023-03-24T00:00:00.000Z Last Updated: 2025-02-25T16:39:21.995Z Vendors: n/a Products: Android Problem Types: Remote code execution Description: In SDP_AddAttribute of sdp_db.cc, there is a possible out of bounds write due to an incorrect bounds check. This could lead to remote code execution with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-11 Android-12 Android-12L Android-13Android ID: A-261867748 Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://source.android.com/security/bulletin/2023-03-01