Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2023-21097 State: PUBLISHED Published: 2023-04-19T00:00:00.000Z Last Updated: 2025-02-05T15:34:22.188Z Vendors: n/a Products: Android Problem Types: Elevation of privilege Description: In toUriInner of Intent.java, there is a possible way to launch an arbitrary activity due to a confused deputy. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-11 Android-12 Android-12L Android-13Android ID: A-261858325 Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://source.android.com/security/bulletin/2023-04-01
CVE ID: CVE-2023-21098 State: PUBLISHED Published: 2023-04-19T00:00:00.000Z Last Updated: 2025-02-05T17:17:42.828Z Vendors: n/a Products: Android Problem Types: Elevation of privilege Description: In multiple functions of AccountManagerService.java, there is a possible loading of arbitrary code into the System Settings app due to a confused deputy. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-11 Android-12 Android-12L Android-13Android ID: A-260567867 Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://source.andro
260567867 Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://source.android.com/security/bulletin/2023-04-01
CVE ID: CVE-2023-21099 State: PUBLISHED Published: 2023-04-19T00:00:00.000Z Last Updated: 2025-02-05T17:01:15.467Z Vendors: n/a Products: Android Problem Types: Elevation of privilege Description: In multiple methods of PackageInstallerSession.java, there is a possible way to start foreground services from the background due to a logic error in the code. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-11 Android-12 Android-12L Android-13Android ID: A-243377226 Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://source
ID: A-243377226 Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://source.android.com/security/bulletin/2023-04-01
CVE ID: CVE-2023-21100 State: PUBLISHED Published: 2023-04-19T00:00:00.000Z Last Updated: 2025-02-05T16:59:00.211Z Vendors: n/a Products: Android Problem Types: Elevation of privilege Description: In inflate of inflate.c, there is a possible out of bounds write due to a heap buffer overflow. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-12 Android-12L Android-13Android ID: A-242544249 Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://source.android.com/security/bulletin/2023-04-01
CVE ID: CVE-2023-21101 State: PUBLISHED Published: 2023-06-15T00:00:00 Last Updated: 2024-12-18T18:56:53.169Z Vendors: n/a Products: Android Problem Types: Elevation of privilege Description: In multiple functions of WVDrmPlugin.cpp, there is a possible use after free due to a race condition. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android SoCAndroid ID: A-258189255 Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://source.android.com/security/bulletin/2023-06-01
CVE ID: CVE-2023-21102 State: PUBLISHED Published: 2023-05-15T00:00:00.000Z Last Updated: 2025-01-24T18:05:15.502Z Vendors: n/a Products: Android Problem Types: Elevation of privilege Description: In __efi_rt_asm_wrapper of efi-rt-wrapper.S, there is a possible bypass of shadow stack protection due to a logic error in the code. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android kernelAndroid ID: A-260821414References: Upstream kernel Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://source.android.com/security/bulletin
lyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://source.android.com/security/bulletin/2023-05-01
CVE ID: CVE-2023-21103 State: PUBLISHED Published: 2023-05-15T00:00:00.000Z Last Updated: 2025-01-24T18:02:24.785Z Vendors: n/a Products: Android Problem Types: Denial of service Description: In registerPhoneAccount of PhoneAccountRegistrar.java, uncaught exceptions in parsing persisted user data could lead to local persistent denial of service with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-11 Android-12 Android-12L Android-13Android ID: A-259064622 Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://source.android.com/security/bulletin/2023-05-01
CVE ID: CVE-2023-21104 State: PUBLISHED Published: 2023-05-15T00:00:00.000Z Last Updated: 2025-01-24T17:53:15.859Z Vendors: n/a Products: Android Problem Types: Information disclosure Description: In applySyncTransaction of WindowOrganizer.java, a missing permission check could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-12L Android-13Android ID: A-259938771 Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://source.android.com/security/bulletin/2023-05-01
CVE ID: CVE-2023-21105 State: PUBLISHED Published: 2023-06-15T00:00:00 Last Updated: 2024-12-18T18:55:43.731Z Vendors: n/a Products: Android Problem Types: Information disclosure Description: In multiple functions of ChooserActivity.java, there is a possible cross-user media read due to a confused deputy. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-11 Android-12 Android-12L Android-13Android ID: A-261036568 Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://source.android.com/security/bulletin/2023-06-01
CVE ID: CVE-2023-21106 State: PUBLISHED Published: 2023-05-15T00:00:00.000Z Last Updated: 2025-01-24T17:49:35.719Z Vendors: n/a Products: Android Problem Types: Elevation of privilege Description: In adreno_set_param of adreno_gpu.c, there is a possible memory corruption due to a double free. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android kernelAndroid ID: A-265016072References: Upstream kernel Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://source.android.com/security/bulletin/2023-05-01
CVE ID: CVE-2023-21107 State: PUBLISHED Published: 2023-05-15T00:00:00.000Z Last Updated: 2025-01-24T17:46:39.657Z Vendors: n/a Products: Android Problem Types: Elevation of privilege Description: In retrieveAppEntry of NotificationAccessDetails.java, there is a missing permission check. This could lead to local escalation of privilege across user boundaries with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-11 Android-12 Android-12L Android-13Android ID: A-259385017 Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://source.android.com/security/bulletin/2023-05-01
CVE ID: CVE-2023-21108 State: PUBLISHED Published: 2023-06-15T00:00:00 Last Updated: 2024-08-02T09:28:25.833Z Vendors: n/a Products: Android Problem Types: Remote code execution Description: In sdpu_build_uuid_seq of sdp_discovery.cc, there is a possible out of bounds write due to a use after free. This could lead to remote code execution over Bluetooth, if HFP support is enabled, with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-11 Android-12 Android-12L Android-13Android ID: A-239414876 Additional Analyst Notes: - CVE Program Container: References: - https://source.android.com/security/bulletin/2023-06-01
CVE ID: CVE-2023-21109 State: PUBLISHED Published: 2023-05-15T00:00:00.000Z Last Updated: 2025-01-24T17:40:04.766Z Vendors: n/a Products: Android Problem Types: Elevation of privilege Description: In multiple places of AccessibilityService, there is a possible way to hide the app from the user due to a logic error in the code. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-11 Android-12 Android-12L Android-13Android ID: A-261589597 Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://source.android.com/security/bullet
nalyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://source.android.com/security/bulletin/2023-05-01
CVE ID: CVE-2023-21110 State: PUBLISHED Published: 2023-05-15T00:00:00.000Z Last Updated: 2025-01-24T17:37:33.624Z Vendors: n/a Products: Android Problem Types: Elevation of privilege Description: In several functions of SnoozeHelper.java, there is a possible way to grant notifications access due to resource exhaustion. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-11 Android-12 Android-12L Android-13Android ID: A-258422365 Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://source.android.com/security/bulletin/2023
Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://source.android.com/security/bulletin/2023-05-01
CVE ID: CVE-2023-21111 State: PUBLISHED Published: 2023-05-15T00:00:00.000Z Last Updated: 2025-01-31T13:40:08.735Z Vendors: n/a Products: Android Problem Types: Denial of service Description: In several functions of PhoneAccountRegistrar.java, there is a possible way to prevent an access to emergency services due to improper input validation. This could lead to local denial of service with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-11 Android-12 Android-12L Android-13Android ID: A-256819769 Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://source.android.com/secur
ditional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://source.android.com/security/bulletin/2023-05-01
CVE ID: CVE-2023-21112 State: PUBLISHED Published: 2023-05-15T00:00:00.000Z Last Updated: 2025-01-24T17:05:40.344Z Vendors: n/a Products: Android Problem Types: Information disclosure Description: In AnalyzeMfcResp of NxpMfcReader.cc, there is a possible out of bounds read due to a missing bounds check. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-11 Android-12 Android-12L Android-13Android ID: A-252763983 Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://source.android.com/security/bulletin/2023-05-01
CVE ID: CVE-2023-21113 State: PUBLISHED Published: 2024-07-09T20:09:14.555Z Last Updated: 2025-03-13T14:22:54.038Z Vendors: Google Products: Android Problem Types: Elevation of privilege Description: In multiple locations, there is a possible permission bypass due to a confused deputy. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://android.googlesource.com/platform/build/soong/+/e7b7f0833dc47ade981eddfbf462dcc143dddd10 - https://android.googlesource.com/platform/frameworks/base/+/17dd11248a66b2722a
7b7f0833dc47ade981eddfbf462dcc143dddd10 - https://android.googlesource.com/platform/frameworks/base/+/17dd11248a66b2722aa3ef07701b7f09a64160e5 - https://android.googlesource.com/platform/prebuilts/module_sdk/Wifi/+/c705bae1a4d50bd7b4f8cc919097d1aae568dd22 - https://source.android.com/security/bulletin/2024-06-01
CVE ID: CVE-2023-21114 State: PUBLISHED Published: 2024-07-09T20:09:14.639Z Last Updated: 2024-08-02T09:28:25.676Z Vendors: Google Products: Android Problem Types: Elevation of privilege Description: In multiple locations, there is a possible permission bypass due to a confused deputy. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://android.googlesource.com/platform/packages/modules/Wifi/+/f88a2294f53cf382908cc48f992273742f817dd5 - https://android.googlesource.com/platform/packages/modules/Wifi/+/e6
s/Wifi/+/f88a2294f53cf382908cc48f992273742f817dd5 - https://android.googlesource.com/platform/packages/modules/Wifi/+/e6ca0c031758d8b1511f6a359bec316b6d2e22fe - https://android.googlesource.com/platform/packages/modules/Wifi/+/f39ed052916716ef974102b3bad7ae102d0164a5 - https://source.android.com/security/bulletin/2024-06-01
CVE ID: CVE-2023-21115 State: PUBLISHED Published: 2023-06-15T00:00:00 Last Updated: 2024-12-18T18:52:11.182Z Vendors: n/a Products: Android Problem Types: Elevation of privilege Description: In btm_sec_encrypt_change of btm_sec.cc, there is a possible way to downgrade the link key type due to improperly used crypto. This could lead to paired device escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-11 Android-12 Android-12LAndroid ID: A-258834033 Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://source.android.com/security/bulletin/2023-06-01
CVE ID: CVE-2023-21116 State: PUBLISHED Published: 2023-05-15T00:00:00.000Z Last Updated: 2025-01-24T17:04:28.406Z Vendors: n/a Products: Android Problem Types: Elevation of privilege Description: In verifyReplacingVersionCode of InstallPackageHelper.java, there is a possible way to downgrade system apps below system image version due to a logic error in the code. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-11 Android-12 Android-12L Android-13Android ID: A-256202273 Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://sou
id ID: A-256202273 Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://source.android.com/security/bulletin/2023-05-01
CVE ID: CVE-2023-21117 State: PUBLISHED Published: 2023-05-15T00:00:00.000Z Last Updated: 2025-01-31T13:43:47.766Z Vendors: n/a Products: Android Problem Types: Elevation of privilege Description: In registerReceiverWithFeature of ActivityManagerService.java, there is a possible way for isolated processes to register a broadcast receiver due to a permissions bypass. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-13Android ID: A-263358101 Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://source.android.com/security/
onal Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://source.android.com/security/bulletin/2023-05-01
CVE ID: CVE-2023-21118 State: PUBLISHED Published: 2023-05-15T00:00:00.000Z Last Updated: 2025-01-31T13:41:15.263Z Vendors: n/a Products: Android Problem Types: Information disclosure Description: In unflattenString8 of Sensor.cpp, there is a possible out of bounds read due to a heap buffer overflow. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-11 Android-12 Android-12L Android-13Android ID: A-269014004 Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://source.android.com/security/bulletin/2023-05-01
CVE ID: CVE-2023-21120 State: PUBLISHED Published: 2023-06-15T00:00:00 Last Updated: 2024-12-18T18:51:07.271Z Vendors: n/a Products: Android Problem Types: Elevation of privilege Description: In multiple functions of cdm_engine.cpp, there is a possible use-after-free due to improper locking. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android SoCAndroid ID: A-258188673 Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://source.android.com/security/bulletin/2023-06-01
CVE ID: CVE-2023-21121 State: PUBLISHED Published: 2023-06-15T00:00:00 Last Updated: 2024-12-18T18:50:07.657Z Vendors: n/a Products: Android Problem Types: Elevation of privilege Description: In onResume of AppManagementFragment.java, there is a possible way to prevent users from forgetting a previously connected VPN due to improper input validation. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-11 Android-12Android ID: A-205460459 Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://source.android.com/security/bulle
Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://source.android.com/security/bulletin/2023-06-01
CVE ID: CVE-2023-21122 State: PUBLISHED Published: 2023-06-15T00:00:00 Last Updated: 2024-12-18T16:41:50.563Z Vendors: n/a Products: Android Problem Types: Elevation of privilege Description: In various functions of various files, there is a possible way to bypass the DISALLOW_DEBUGGING_FEATURES restriction for tracing due to a missing permission check. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-11 Android-12 Android-12L Android-13Android ID: A-270050191 Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://source.
D: A-270050191 Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://source.android.com/security/bulletin/2023-06-01
CVE ID: CVE-2023-21123 State: PUBLISHED Published: 2023-06-15T00:00:00 Last Updated: 2024-12-18T16:40:39.246Z Vendors: n/a Products: Android Problem Types: Elevation of privilege Description: In multiple functions of multiple files, there is a possible way to bypass the DISALLOW_DEBUGGING_FEATURES restriction for tracing due to a missing permission check. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-11 Android-12 Android-12L Android-13Android ID: A-270050064 Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://sourc
ID: A-270050064 Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://source.android.com/security/bulletin/2023-06-01
CVE ID: CVE-2023-21124 State: PUBLISHED Published: 2023-06-15T00:00:00 Last Updated: 2024-12-18T16:38:57.553Z Vendors: n/a Products: Android Problem Types: Elevation of privilege Description: In run of multiple files, there is a possible escalation of privilege due to unsafe deserialization. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-11 Android-12 Android-12L Android-13Android ID: A-265798353 Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://source.android.com/security/bulletin/2023-06-01
CVE ID: CVE-2023-21125 State: PUBLISHED Published: 2025-08-26T22:48:27.450Z Last Updated: 2025-08-27T14:18:12.572Z Vendors: Google Products: Android Problem Types: Elevation of privilege Description: In btif_hh_hsdata_rpt_copy_cb of bta_hh.cc, there is a possible way to corrupt memory due to a use after free. This could lead to local escalation of privilege over Bluetooth with no additional execution privileges needed. User interaction is not needed for exploitation. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://android.googlesource.com/platform/system/bt/+/e7b978841deb331ff5e5849388fa92ee4c40f979 - https://source.android.com/security/bulletin/2025-03-01
CVE ID: CVE-2023-21126 State: PUBLISHED Published: 2023-06-15T00:00:00 Last Updated: 2024-12-18T16:37:36.327Z Vendors: n/a Products: Android Problem Types: Elevation of privilege Description: In bindOutputSwitcherAndBroadcastButton of MediaControlPanel.java, there is a possible launch arbitrary activity under SysUI due to Unsafe Intent. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-13Android ID: A-271846393 Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://source.android.com/security/bulletin/2023-06-01
CVE ID: CVE-2023-21127 State: PUBLISHED Published: 2023-06-15T00:00:00 Last Updated: 2024-12-18T16:35:46.994Z Vendors: n/a Products: Android Problem Types: Remote code execution Description: In readSampleData of NuMediaExtractor.cpp, there is a possible out of bounds write due to uninitialized data. This could lead to remote code execution with no additional execution privileges needed. User interaction is needed for exploitation.Product: AndroidVersions: Android-11 Android-12 Android-12L Android-13Android ID: A-275418191 Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://source.android.com/security/bulletin/2023-06-01
CVE ID: CVE-2023-21128 State: PUBLISHED Published: 2023-06-15T00:00:00 Last Updated: 2024-12-18T16:34:10.571Z Vendors: n/a Products: Android Problem Types: Elevation of privilege Description: In various functions of AppStandbyController.java, there is a possible way to break manageability scenarios due to a logic error in the code. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-11 Android-12 Android-12L Android-13Android ID: A-272042183 Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://source.android.com/security/b
nal Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://source.android.com/security/bulletin/2023-06-01
CVE ID: CVE-2023-21129 State: PUBLISHED Published: 2023-06-15T00:00:00 Last Updated: 2024-12-18T18:46:02.760Z Vendors: n/a Products: Android Problem Types: Elevation of privilege Description: In getFullScreenIntentDecision of NotificationInterruptStateProviderImpl.java, there is a possible activity launch while the app is in the background due to a BAL bypass. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is needed for exploitation.Product: AndroidVersions: Android-11 Android-12 Android-12L Android-13Android ID: A-274759612 Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://sour