Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2021-0303 State: PUBLISHED Published: 2021-01-11T21:48:20 Last Updated: 2024-08-03T15:32:10.581Z Vendors: n/a Products: Android Problem Types: Elevation of privilege Description: In dispatchGraphTerminationMessage() of packages/services/Car/computepipe/runner/graph/StreamSetObserver.cpp, there is a possible use after free due to a race condition. This could lead to local escalation of privilege with User execution privileges needed. User interaction is not needed for exploitation. Product: Android; Versions: Android-11; Android ID: A-170407229. Additional Analyst Notes: - CVE Program Container: References: - https://source.android.com/security/bulletin/2021-01-01
CVE ID: CVE-2021-0304 State: PUBLISHED Published: 2021-01-11T21:47:14 Last Updated: 2024-08-03T15:32:10.672Z Vendors: n/a Products: Android Problem Types: Information disclosure Description: In several functions of GlobalScreenshot.java, there is a possible permission bypass due to an unsafe PendingIntent. This could lead to local information disclosure of the user's contacts with User execution privileges needed. User interaction is not needed for exploitation. Product: Android; Versions: Android-10, Android-8.0, Android-8.1, Android-9; Android ID: A-162738636. Additional Analyst Notes: - CVE Program Container: References: - https://source.android.com/security/bulletin/2021-01-01
CVE ID: CVE-2021-0305 State: PUBLISHED Published: 2021-02-10T16:48:27 Last Updated: 2024-08-03T15:32:10.619Z Vendors: n/a Products: Android Problem Types: Elevation of privilege Description: In PackageInstaller, there is a possible tapjacking attack due to an insecure default value. This could lead to local escalation of privilege and permissions with no additional execution privileges needed. User interaction is needed for exploitation.Product: AndroidVersions: Android-8.1 Android-9 Android-10Android ID: A-154015447 Additional Analyst Notes: - CVE Program Container: References: - https://source.android.com/security/bulletin/2021-02-01
CVE ID: CVE-2021-0306 State: PUBLISHED Published: 2021-01-11T21:46:47 Last Updated: 2024-08-03T15:32:10.599Z Vendors: n/a Products: Android Problem Types: Elevation of privilege Description: In addAllPermissions of PermissionManagerService.java, there is a possible permissions bypass when upgrading major Android versions which allows an app to gain the android.permission.ACTIVITY_RECOGNITION permission without user confirmation. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation. Product: Android; Versions: Android-11, Android-8.0, Android-8.1, Android-9, Android-10; Android ID: A-154505240. Additio
roduct: Android; Versions: Android-11, Android-8.0, Android-8.1, Android-9, Android-10; Android ID: A-154505240. Additional Analyst Notes: - CVE Program Container: References: - https://source.android.com/security/bulletin/2021-01-01
CVE ID: CVE-2021-0307 State: PUBLISHED Published: 2021-01-11T21:46:52 Last Updated: 2024-08-03T15:32:10.645Z Vendors: n/a Products: Android Problem Types: Elevation of privilege Description: In updatePermissionSourcePackage of PermissionManagerService.java, there is a possible automatic runtime permission grant due to a confused deputy. This could lead to local escalation of privilege allowing a malicious app to silently gain access to a dangerous permission with no additional execution privileges needed. User interaction is not needed for exploitation. Product: Android; Versions: Android-10, Android-11; Android ID: A-155648771. Additional Analyst Notes: - CVE Program Container: References:
rsions: Android-10, Android-11; Android ID: A-155648771. Additional Analyst Notes: - CVE Program Container: References: - https://source.android.com/security/bulletin/2021-01-01
CVE ID: CVE-2021-0308 State: PUBLISHED Published: 2021-01-11T21:46:58 Last Updated: 2024-08-03T15:32:10.683Z Vendors: n/a Products: Android Problem Types: Elevation of privilege Description: In ReadLogicalParts of basicmbr.cc, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation. Product: Android; Versions: Android-8.1, Android-9, Android-10, Android-11, Android-8.0; Android ID: A-158063095. Additional Analyst Notes: - CVE Program Container: References: - https://source.android.com/security/bulletin/2021-01-01 - https://lists.debia
es: - CVE Program Container: References: - https://source.android.com/security/bulletin/2021-01-01 - https://lists.debian.org/debian-lts-announce/2021/02/msg00010.html - https://security.gentoo.org/glsa/202105-03
CVE ID: CVE-2021-0309 State: PUBLISHED Published: 2021-01-11T21:47:03 Last Updated: 2024-08-03T15:32:10.575Z Vendors: n/a Products: Android Problem Types: Information disclosure Description: In onCreate of grantCredentialsPermissionActivity, there is a confused deputy. This could lead to local information disclosure and account access with no additional execution privileges needed. User interaction is needed for exploitation. Product: Android; Versions: Android-8.1, Android-9, Android-10, Android-11, Android-8.0; Android ID: A-158480899. Additional Analyst Notes: - CVE Program Container: References: - https://source.android.com/security/bulletin/2021-01-01
CVE ID: CVE-2021-0310 State: PUBLISHED Published: 2021-01-11T21:48:10 Last Updated: 2024-08-03T15:32:10.686Z Vendors: n/a Products: Android Problem Types: Elevation of privilege Description: In LazyServiceRegistrar of LazyServiceRegistrar.cpp, there is a possible memory corruption due to a use after free. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation. Product: Android; Versions: Android-11; Android ID: A-170212632. Additional Analyst Notes: - CVE Program Container: References: - https://source.android.com/security/bulletin/2021-01-01
CVE ID: CVE-2021-0311 State: PUBLISHED Published: 2021-01-11T21:48:15 Last Updated: 2024-08-03T15:32:10.632Z Vendors: n/a Products: Android Problem Types: Information disclosure Description: In ElementaryStreamQueue::dequeueAccessUnitH264() of ESQueue.cpp, there is a possible out of bounds write due to a missing bounds check. This could lead to remote information disclosure with no additional execution privileges needed. User interaction is needed for exploitation. Product: Android; Versions: Android-9, Android-10, Android-11, Android-8.0, Android-8.1; Android ID: A-170240631. Additional Analyst Notes: - CVE Program Container: References: - https://source.android.com/security/bulletin/2021-0
31. Additional Analyst Notes: - CVE Program Container: References: - https://source.android.com/security/bulletin/2021-01-01
CVE ID: CVE-2021-0312 State: PUBLISHED Published: 2021-01-11T21:48:24 Last Updated: 2024-08-03T15:32:10.583Z Vendors: n/a Products: Android Problem Types: Information disclosure Description: In WAVSource::read of WAVExtractor.cpp, there is a possible out of bounds write due to an integer overflow. This could lead to remote information disclosure with no additional execution privileges needed. User interaction is needed for exploitation. Product: Android; Versions: Android-8.1, Android-9, Android-10, Android-11, Android-8.0; Android ID: A-170583712. Additional Analyst Notes: - CVE Program Container: References: - https://source.android.com/security/bulletin/2021-01-01
CVE ID: CVE-2021-0313 State: PUBLISHED Published: 2021-01-11T21:48:30 Last Updated: 2024-08-03T15:32:10.651Z Vendors: n/a Products: Android Problem Types: Denial of service Description: In isWordBreakAfter of LayoutUtils.cpp, there is a possible way to slow or crash a TextView due to improper input validation. This could lead to remote denial of service with no additional execution privileges needed. User interaction is not needed for exploitation. Product: Android; Versions: Android-9, Android-10, Android-11, Android-8.0, Android-8.1; Android ID: A-170968514. Additional Analyst Notes: - CVE Program Container: References: - https://source.android.com/security/bulletin/2021-01-01
CVE ID: CVE-2021-0314 State: PUBLISHED Published: 2021-02-10T16:50:02 Last Updated: 2024-08-03T15:32:10.611Z Vendors: n/a Products: Android Problem Types: Elevation of privilege Description: In onCreate of UninstallerActivity, there is a possible way to uninstall an all without informed user consent due to a tapjacking/overlay attack. This could lead to local escalation of privilege with User execution privileges needed. User interaction is needed for exploitation.Product: AndroidVersions: Android-10 Android-11 Android-8.1 Android-9Android ID: A-171221302 Additional Analyst Notes: - CVE Program Container: References: - https://source.android.com/security/bulletin/2021-02-01
CVE ID: CVE-2021-0315 State: PUBLISHED Published: 2021-01-11T21:48:00 Last Updated: 2024-08-03T15:32:10.680Z Vendors: n/a Products: Android Problem Types: Elevation of privilege Description: In onCreate of GrantCredentialsPermissionActivity.java, there is a possible way to convince the user to grant an app access to an account due to a tapjacking/overlay attack. This could lead to local escalation of privilege with User execution privileges needed. User interaction is needed for exploitation. Product: Android; Versions: Android-8.1, Android-9, Android-10, Android-11, Android-8.0; Android ID: A-169763814. Additional Analyst Notes: - CVE Program Container: References: - https://source.android.
d-8.0; Android ID: A-169763814. Additional Analyst Notes: - CVE Program Container: References: - https://source.android.com/security/bulletin/2021-01-01
CVE ID: CVE-2021-0316 State: PUBLISHED Published: 2021-01-11T21:47:50 Last Updated: 2024-08-03T15:32:10.643Z Vendors: n/a Products: Android Problem Types: Remote code execution Description: In avrc_pars_vendor_cmd of avrc_pars_tg.cc, there is a possible out of bounds write due to a missing bounds check. This could lead to remote code execution over Bluetooth with no additional execution privileges needed. User interaction is not needed for exploitation. Product: Android; Versions: Android-11, Android-8.0, Android-8.1, Android-9, Android-10; Android ID: A-168802990. Additional Analyst Notes: - CVE Program Container: References: - https://source.android.com/security/bulletin/2021-01-01
CVE ID: CVE-2021-0317 State: PUBLISHED Published: 2021-01-11T21:47:38 Last Updated: 2024-08-03T15:32:10.678Z Vendors: n/a Products: Android Problem Types: Elevation of privilege Description: In createOrUpdate of Permission.java and related code, there is possible permission escalation due to a logic error. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is needed for exploitation. Product: Android; Versions: Android-10, Android-11, Android-8.0, Android-8.1, Android-9; Android ID: A-168319670. Additional Analyst Notes: - CVE Program Container: References: - https://source.android.com/security/bulletin/2021-01-01
CVE ID: CVE-2021-0318 State: PUBLISHED Published: 2021-01-11T21:47:31 Last Updated: 2024-08-03T15:32:10.680Z Vendors: n/a Products: Android Problem Types: Elevation of privilege Description: In appendEventsToCacheLocked of SensorEventConnection.cpp, there is a possible out of bounds write due to a use-after-free. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation. Product: Android; Versions: Android-9, Android-8.1, Android-10, Android-11; Android ID: A-168211968. Additional Analyst Notes: - CVE Program Container: References: - https://source.android.com/security/bulletin/2021-01-01
CVE ID: CVE-2021-0319 State: PUBLISHED Published: 2021-01-11T21:47:25 Last Updated: 2024-08-03T15:32:10.685Z Vendors: n/a Products: Android Problem Types: Elevation of privilege Description: In checkCallerIsSystemOr of CompanionDeviceManagerService.java, there is a possible way to get a nearby Bluetooth device's MAC address without appropriate permissions due to a permissions bypass. This could lead to local escalation of privilege that grants access to nearby MAC addresses, with User execution privileges needed. User interaction is needed for exploitation. Product: Android; Versions: Android-8.0, Android-8.1, Android-9, Android-10, Android-11; Android ID: A-167244818. Additional Analyst Not
; Versions: Android-8.0, Android-8.1, Android-9, Android-10, Android-11; Android ID: A-167244818. Additional Analyst Notes: - CVE Program Container: References: - https://source.android.com/security/bulletin/2021-01-01
CVE ID: CVE-2021-0320 State: PUBLISHED Published: 2021-01-11T21:48:05 Last Updated: 2024-08-03T15:32:10.627Z Vendors: n/a Products: Android Problem Types: Information disclosure Description: In is_device_locked and set_device_locked of keystore_keymaster_enforcement.h, there is a possible bypass of lockscreen requirements for keyguard bound keys due to a race condition. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation. Product: Android; Versions: Android-10, Android-11; Android ID: A-169933423. Additional Analyst Notes: - CVE Program Container: References: - https://source.android.com/security/bull
: A-169933423. Additional Analyst Notes: - CVE Program Container: References: - https://source.android.com/security/bulletin/2021-01-01
CVE ID: CVE-2021-0321 State: PUBLISHED Published: 2021-01-11T21:47:19 Last Updated: 2024-08-03T15:32:10.796Z Vendors: n/a Products: Android Problem Types: Information disclosure Description: In enforceDumpPermissionForPackage of ActivityManagerService.java, there is a possible way to determine if a package is installed due to side channel information disclosure. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation. Product: Android; Versions: Android-11; Android ID: A-166667403. Additional Analyst Notes: - CVE Program Container: References: - https://source.android.com/security/bulletin/2021-01-01
CVE ID: CVE-2021-0322 State: PUBLISHED Published: 2021-01-11T21:47:08 Last Updated: 2024-08-03T15:39:59.545Z Vendors: n/a Products: Android Problem Types: Information disclosure Description: In onCreate of SlicePermissionActivity.java, there is a possible misleading string displayed due to improper input validation. This could lead to local information disclosure with User execution privileges needed. User interaction is needed for exploitation.Product: Android; Versions: Android-10, Android-11, Android-9; Android ID: A-159145361. Additional Analyst Notes: - CVE Program Container: References: - https://source.android.com/security/bulletin/2021-01-01
CVE ID: CVE-2021-0323 State: REJECTED Published: N/A Last Updated: 2025-01-17T22:56:01.145Z Description: No description available.
CVE ID: CVE-2021-0324 State: PUBLISHED Published: 2021-06-14T19:35:54 Last Updated: 2024-08-03T15:39:59.576Z Vendors: n/a Products: Android Problem Types: Elevation of privilege Description: Product: AndroidVersions: Android SoCAndroid ID: A-175402462 Additional Analyst Notes: - CVE Program Container: References: - https://source.android.com/security/bulletin/2021-05-01
CVE ID: CVE-2021-0325 State: PUBLISHED Published: 2021-02-10T16:50:50 Last Updated: 2024-08-03T15:39:59.619Z Vendors: n/a Products: Android Problem Types: Remote code execution Description: In ih264d_parse_pslice of ih264d_parse_pslice.c, there is a possible out of bounds write due to a heap buffer overflow. This could lead to remote code execution with no additional execution privileges needed. User interaction is needed for exploitation.Product: AndroidVersions: Android-8.1 Android-9 Android-10 Android-11Android ID: A-174238784 Additional Analyst Notes: - CVE Program Container: References: - https://source.android.com/security/bulletin/2021-02-01
CVE ID: CVE-2021-0326 State: PUBLISHED Published: 2021-02-10T16:50:40 Last Updated: 2024-08-03T15:39:59.563Z Vendors: n/a Products: Android Problem Types: Remote code execution Description: In p2p_copy_client_info of p2p.c, there is a possible out of bounds write due to a missing bounds check. This could lead to remote code execution if the target device is performing a Wi-Fi Direct search, with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-10 Android-11 Android-8.1 Android-9Android ID: A-172937525 Additional Analyst Notes: - CVE Program Container: References: - https://source.android.com/security/bulletin/2021-02
25 Additional Analyst Notes: - CVE Program Container: References: - https://source.android.com/security/bulletin/2021-02-01 - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/VMHPFCON6ZFCGZXSASJFKQ3UX2UIYMND/ - https://lists.debian.org/debian-lts-announce/2021/02/msg00033.html - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/VOSA6DZUDLVOCYJNNXD6V3MRBVLCXZFH/ - https://www.debian.org/security/2021/dsa-4898
CVE ID: CVE-2021-0327 State: PUBLISHED Published: 2021-02-10T16:50:30 Last Updated: 2024-08-03T15:39:59.569Z Vendors: n/a Products: Android Problem Types: Elevation of privilege Description: In getContentProviderImpl of ActivityManagerService.java, there is a possible permission bypass due to non-restored binder identities. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-9 Android-10 Android-11 Android-8.1Android ID: A-172935267 Additional Analyst Notes: - CVE Program Container: References: - https://source.android.com/security/bulletin/2021-02-01
CVE ID: CVE-2021-0328 State: PUBLISHED Published: 2021-02-10T16:50:22 Last Updated: 2024-08-03T15:39:59.528Z Vendors: n/a Products: Android Problem Types: Elevation of privilege Description: In onBatchScanReports and deliverBatchScan of GattService.java, there is a possible way to retrieve Bluetooth scan results without permissions due to a missing permission check. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-10 Android-11 Android-8.1 Android-9Android ID: A-172670415 Additional Analyst Notes: - CVE Program Container: References: - https://source.android.com/s
d-9Android ID: A-172670415 Additional Analyst Notes: - CVE Program Container: References: - https://source.android.com/security/bulletin/2021-02-01
CVE ID: CVE-2021-0329 State: PUBLISHED Published: 2021-02-10T16:50:08 Last Updated: 2024-08-03T15:39:59.569Z Vendors: n/a Products: Android Problem Types: Elevation of privilege Description: In several native functions called by AdvertiseManager.java, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege in the Bluetooth server with User execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-9 Android-10 Android-11 Android-8.1Android ID: A-171400004 Additional Analyst Notes: - CVE Program Container: References: - https://source.android.com/security/bulletin/2021-02-01
CVE ID: CVE-2021-0330 State: PUBLISHED Published: 2021-02-10T16:49:53 Last Updated: 2024-08-03T15:39:59.570Z Vendors: n/a Products: Android Problem Types: Elevation of privilege Description: In add_user_ce and remove_user_ce of storaged.cpp, there is a possible use-after-free due to improper locking. This could lead to local escalation of privilege in storaged with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-9 Android-10 Android-11Android ID: A-170732441 Additional Analyst Notes: - CVE Program Container: References: - https://source.android.com/security/bulletin/2021-02-01
CVE ID: CVE-2021-0331 State: PUBLISHED Published: 2021-02-10T16:49:45 Last Updated: 2024-08-03T15:39:59.544Z Vendors: n/a Products: Android Problem Types: Elevation of privilege Description: In onCreate of NotificationAccessConfirmationActivity.java, there is a possible overlay attack due to an insecure default value. This could lead to local escalation of privilege and notification access with User execution privileges needed. User interaction is needed for exploitation.Product: AndroidVersions: Android-9 Android-10 Android-11 Android-8.1Android ID: A-170731783 Additional Analyst Notes: - CVE Program Container: References: - https://source.android.com/security/bulletin/2021-02-01
CVE ID: CVE-2021-0332 State: PUBLISHED Published: 2021-02-10T16:49:38 Last Updated: 2024-08-03T15:40:00.190Z Vendors: n/a Products: Android Problem Types: Elevation of privilege Description: In bootFinished of SurfaceFlinger.cpp, there is a possible memory corruption due to a use after free. This could lead to local escalation of privilege with User execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-11 Android-10Android ID: A-169256435 Additional Analyst Notes: - CVE Program Container: References: - https://source.android.com/security/bulletin/2021-02-01
CVE ID: CVE-2021-0333 State: PUBLISHED Published: 2021-02-10T16:49:28 Last Updated: 2024-08-03T15:39:59.554Z Vendors: n/a Products: Android Problem Types: Elevation of privilege Description: In onCreate of BluetoothPermissionActivity.java, there is a possible permissions bypass due to a tapjacking overlay that obscures the phonebook permissions dialog when a Bluetooth device is connecting. This could lead to local escalation of privilege with User execution privileges needed. User interaction is needed for exploitation.Product: AndroidVersions: Android-8.1 Android-9 Android-10 Android-11Android ID: A-168504491 Additional Analyst Notes: - CVE Program Container: References: - https://source.an
-10 Android-11Android ID: A-168504491 Additional Analyst Notes: - CVE Program Container: References: - https://source.android.com/security/bulletin/2021-02-01
CVE ID: CVE-2021-0334 State: PUBLISHED Published: 2021-02-10T16:49:21 Last Updated: 2024-08-03T15:39:59.570Z Vendors: n/a Products: Android Problem Types: Elevation of privilege Description: In onTargetSelected of ResolverActivity.java, there is a possible settings bypass allowing an app to become the default handler for arbitrary domains. This could lead to local escalation of privilege with User execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-8.1 Android-9 Android-10 Android-11Android ID: A-163358811 Additional Analyst Notes: - CVE Program Container: References: - https://source.android.com/security/bulletin/2021-02-01
CVE ID: CVE-2021-0335 State: PUBLISHED Published: 2021-02-10T16:49:13 Last Updated: 2024-08-03T15:39:59.563Z Vendors: n/a Products: Android Problem Types: Information disclosure Description: In process of C2SoftHevcDec.cpp, there is a possible out of bounds write due to a use after free. This could lead to remote information disclosure with no additional execution privileges needed. User interaction is needed for exploitation.Product: AndroidVersions: Android-11Android ID: A-160346309 Additional Analyst Notes: - CVE Program Container: References: - https://source.android.com/security/bulletin/2021-02-01
CVE ID: CVE-2021-0336 State: PUBLISHED Published: 2021-02-10T16:49:06 Last Updated: 2024-08-03T15:40:00.342Z Vendors: n/a Products: Android Problem Types: Elevation of privilege Description: In onReceive of BluetoothPermissionRequest.java, there is a possible permissions bypass due to a mutable PendingIntent. This could lead to local escalation of privilege that bypasses a permission check, with User execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-9 Android-10 Android-11 Android-8.1Android ID: A-158219161 Additional Analyst Notes: - CVE Program Container: References: - https://source.android.com/security/bulletin/2021-02-01