Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2018-9344 State: PUBLISHED Published: 2024-11-19T18:59:40.177Z Last Updated: 2024-11-20T16:28:16.498Z Vendors: Google Products: Android Description: In several functions of DescramblerImpl.cpp, there is a possible use after free due to improper locking. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://source.android.com/security/bulletin/2018-06-01
CVE ID: CVE-2018-9345 State: PUBLISHED Published: 2024-11-19T19:01:33.773Z Last Updated: 2024-11-20T16:17:35.245Z Vendors: Google Products: Android Description: In BnAudioPolicyService::onTransact of AudioPolicyService.cpp, there is a possible information disclosure due to uninitialized data. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://source.android.com/security/bulletin/2018-06-01
CVE ID: CVE-2018-9346 State: PUBLISHED Published: 2024-11-19T19:03:45.821Z Last Updated: 2024-11-20T16:16:02.687Z Vendors: Google Products: Android Description: In BnAudioPolicyService::onTransact of AudioPolicyService.cpp, there is a possible information disclosure due to uninitialized data. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://source.android.com/security/bulletin/2018-06-01
CVE ID: CVE-2018-9347 State: PUBLISHED Published: 2018-11-14T18:00:00 Last Updated: 2024-08-05T07:17:52.087Z Vendors: Google Inc. Products: Android Problem Types: Denial of service Description: In function SMF_ParseMetaEvent of file eas_smf.c there is incorrect input validation causing an infinite loop. This could lead to a remote temporary DoS with no additional execution privileges needed. User interaction is needed for exploitation. Product: Android. Versions: Android-7.0 Android-7.1.1 Android-7.1.2 Android-8.0 Android-8.1 Android-9. Android ID: A-68664359 Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/105844 - https://source.android.com/
lyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/105844 - https://source.android.com/security/bulletin/2018-11-01
CVE ID: CVE-2018-9348 State: PUBLISHED Published: 2024-11-19T19:08:21.744Z Last Updated: 2024-11-20T16:10:21.715Z Vendors: Google Products: Android Description: In SMF_ParseMetaEvent of eas_smf.c, there is a possible integer overflow. This could lead to remote denial of service due to resource exhaustion with no additional execution privileges needed. User interaction is needed for exploitation. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://source.android.com/security/bulletin/2018-06-01
CVE ID: CVE-2018-9349 State: PUBLISHED Published: 2024-11-27T21:45:18.436Z Last Updated: 2024-11-29T21:34:31.449Z Vendors: Google Products: Android Description: In mv_err_cost of mcomp.c there is a possible out of bounds read due to missing bounds check. This could lead to denial of service with no additional execution privileges needed. User interaction is needed for exploitation. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://source.android.com/docs/security/bulletin/pixel/2018-06-01
CVE ID: CVE-2018-9350 State: PUBLISHED Published: 2024-11-27T21:52:57.651Z Last Updated: 2024-11-29T21:33:46.527Z Vendors: Google Products: Android Description: In ih264d_assign_pic_num of ih264d_utils.c there is a possible out of bound read due to missing bounds check. This could lead to a denial of service with no additional execution privileges needed. User interaction is needed for exploitation. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://source.android.com/docs/security/bulletin/pixel/2018-06-01
CVE ID: CVE-2018-9351 State: PUBLISHED Published: 2024-11-27T22:05:01.280Z Last Updated: 2024-11-29T21:29:17.494Z Vendors: Google Products: Android Description: In ih264e_fmt_conv_420p_to_420sp of ih264e_fmt_conv.c there is a possible out of bound read due to missing bounds check. This could lead to remote denial of service with no additional execution privileges needed. User interaction is needed for exploitation. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://source.android.com/docs/security/bulletin/pixel/2018-06-01
CVE ID: CVE-2018-9352 State: PUBLISHED Published: 2024-11-27T22:31:43.655Z Last Updated: 2024-11-29T21:28:35.370Z Vendors: Google Products: Android Description: In ihevcd_allocate_dynamic_bufs of ihevcd_api.c there is a possible resource exhaustion due to integer overflow. This could lead to remote denial of service with no additional execution privileges needed. User interaction is needed for exploitation. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://source.android.com/docs/security/bulletin/pixel/2018-06-01
CVE ID: CVE-2018-9353 State: PUBLISHED Published: 2024-11-27T22:34:57.383Z Last Updated: 2024-11-29T21:27:51.298Z Vendors: Google Products: Android Description: In ihevcd_parse_slice_data of ihevcd_parse_slice.c there is a possible heap buffer out of bound read due to a missing bounds check. This could lead to remote denial of service with no additional execution privileges needed. User interaction is needed for exploitation. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://source.android.com/docs/security/bulletin/pixel/2018-06-01
CVE ID: CVE-2018-9354 State: PUBLISHED Published: 2024-11-27T22:37:57.293Z Last Updated: 2024-11-29T21:17:30.173Z Vendors: Google Products: Android Description: In VideoFrameScheduler.cpp of VideoFrameScheduler::PLL::fit, there is a possible remote denial of service due to divide by 0. This could lead to remote denial of service with no additional execution privileges needed. User interaction is needed for exploitation. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://source.android.com/docs/security/bulletin/pixel/2018-06-01
CVE ID: CVE-2018-9355 State: PUBLISHED Published: 2018-11-06T17:00:00Z Last Updated: 2024-09-16T22:45:19.702Z Vendors: Google Inc. Products: Android Problem Types: Remote code execution Description: In bta_dm_sdp_result of bta_dm_act.cc, there is a possible out of bounds stack write due to a missing bounds check. This could lead to remote code execution with no additional execution privileges needed. User interaction is not needed for exploitation. Product: Android Versions: Android-6.0 Android-6.0.1 Android-7.0 Android-7.1.1 Android-7.1.2 Android-8.0 Android-8.1 Android ID: A-74016921. Additional Analyst Notes: - CVE Program Container: References: - https://source.android.com/security/bulle
: A-74016921. Additional Analyst Notes: - CVE Program Container: References: - https://source.android.com/security/bulletin/2018-06-01 - http://www.securityfocus.com/bid/104461
CVE ID: CVE-2018-9356 State: PUBLISHED Published: 2018-11-06T17:00:00Z Last Updated: 2024-09-16T19:25:38.547Z Vendors: Google Inc. Products: Android Problem Types: Remote code execution Description: In bnep_data_ind of bnep_main.c, there is a possible remote code execution due to a double free. This could lead to remote code execution with no additional execution privileges needed. User interaction is not needed for exploitation. Product: Android Versions: Android-6.0 Android-6.0.1 Android-7.0 Android-7.1.1 Android-7.1.2 Android-8.0 Android-8.1 Android ID: A-74950468. Additional Analyst Notes: - CVE Program Container: References: - https://source.android.com/security/bulletin/2018-06-01 - ht
ional Analyst Notes: - CVE Program Container: References: - https://source.android.com/security/bulletin/2018-06-01 - http://www.securityfocus.com/bid/104461
CVE ID: CVE-2018-9357 State: PUBLISHED Published: 2018-11-06T17:00:00Z Last Updated: 2024-09-16T17:07:46.072Z Vendors: Google Inc. Products: Android Problem Types: Elevation of privilege Description: In BNEP_Write of bnep_api.cc, there is a possible out of bounds write due to an incorrect bounds check. This could lead to local escalation of privilege with User execution privileges needed. User interaction is not needed for exploitation. Product: Android Versions: Android-6.0 Android-6.0.1 Android-7.0 Android-7.1.1 Android-7.1.2 Android-8.0 Android-8.1 Android ID: A-74947856. Additional Analyst Notes: - CVE Program Container: References: - https://source.android.com/security/bulletin/2018-06-
. Additional Analyst Notes: - CVE Program Container: References: - https://source.android.com/security/bulletin/2018-06-01 - http://www.securityfocus.com/bid/104461
CVE ID: CVE-2018-9358 State: PUBLISHED Published: 2018-11-06T17:00:00Z Last Updated: 2024-09-17T00:06:26.656Z Vendors: Google Inc. Products: Android Problem Types: Information disclosure Description: In gatts_process_attribute_req of gatt_sc.cc, there is a possible read of uninitialized data due to a missing bounds check. This could lead to remote information disclosure in the Bluetooth process with no additional execution privileges needed. User interaction is not needed for exploitation. Product: Android Versions: Android-6.0 Android-6.0.1 Android-7.0 Android-7.1.1 Android-7.1.2 Android-8.0 Android-8.1 Android ID: A-73172115. Additional Analyst Notes: - CVE Program Container: References: -
d-7.1.2 Android-8.0 Android-8.1 Android ID: A-73172115. Additional Analyst Notes: - CVE Program Container: References: - https://source.android.com/security/bulletin/2018-06-01 - http://www.securityfocus.com/bid/104461
CVE ID: CVE-2018-9359 State: PUBLISHED Published: 2018-11-06T17:00:00Z Last Updated: 2024-09-17T03:13:53.742Z Vendors: Google Inc. Products: Android Problem Types: Information disclosure Description: In process_l2cap_cmd of l2c_main.cc, there is a possible out of bounds read due to a missing bounds check. This could lead to remote information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation. Product: Android Versions: Android-6.0 Android-6.0.1 Android-7.0 Android-7.1.1 Android-7.1.2 Android-8.0 Android-8.1 Android ID: A-74196706. Additional Analyst Notes: - CVE Program Container: References: - https://source.android.com/security/bulle
: A-74196706. Additional Analyst Notes: - CVE Program Container: References: - https://source.android.com/security/bulletin/2018-06-01 - http://www.securityfocus.com/bid/104461
CVE ID: CVE-2018-9360 State: PUBLISHED Published: 2018-11-06T17:00:00 Last Updated: 2024-08-05T07:17:52.229Z Vendors: n/a Products: n/a Problem Types: n/a Description: In process_l2cap_cmd of l2c_main.cc, there is a possible out of bounds read due to a missing bounds check. This could lead to remote information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation. Product: Android Versions: Android-6.0 Android-6.0.1 Android-7.0 Android-7.1.1 Android-7.1.2 Android-8.0 Android-8.1 Android ID: A-74201143. Additional Analyst Notes: - CVE Program Container: References: - https://source.android.com/security/bulletin/2018-06-01 - http://www.secu
Notes: - CVE Program Container: References: - https://source.android.com/security/bulletin/2018-06-01 - http://www.securityfocus.com/bid/104461
CVE ID: CVE-2018-9361 State: PUBLISHED Published: 2018-11-06T17:00:00Z Last Updated: 2024-09-16T16:18:55.966Z Vendors: Google Inc. Products: Android Problem Types: Information disclosure Description: In process_l2cap_cmd of l2c_main.cc, there is a possible out of bounds read due to a missing bounds check. This could lead to remote information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation. Product: Android Versions: Android-6.0 Android-6.0.1 Android-7.0 Android-7.1.1 Android-7.1.2 Android-8.0 Android-8.1 Android ID: A-74202041. Additional Analyst Notes: - CVE Program Container: References: - https://source.android.com/security/bulle
: A-74202041. Additional Analyst Notes: - CVE Program Container: References: - https://source.android.com/security/bulletin/2018-06-01 - http://www.securityfocus.com/bid/104461
CVE ID: CVE-2018-9362 State: PUBLISHED Published: 2018-11-06T17:00:00Z Last Updated: 2024-09-17T03:23:18.516Z Vendors: Google Inc. Products: Android Problem Types: Denial of service Description: In processMessagePart of InboundSmsHandler.java, there is a possible remote denial of service due to improper input validation. This could lead to remote denial of service with no additional execution privileges needed. User interaction is not needed for exploitation. Product: Android Versions: Android-6.0 Android-6.0.1 Android-7.0 Android-7.1.1 Android-7.1.2 Android-8.0 Android-8.1 Android ID: A-72298611. Additional Analyst Notes: - CVE Program Container: References: - https://source.android.com/sec
Android ID: A-72298611. Additional Analyst Notes: - CVE Program Container: References: - https://source.android.com/security/bulletin/2018-06-01 - http://www.securityfocus.com/bid/104461
CVE ID: CVE-2018-9363 State: PUBLISHED Published: 2018-11-06T17:00:00Z Last Updated: 2024-09-16T18:38:38.597Z Vendors: Google Inc. Products: Android Problem Types: Elevation of privilege Description: In the hidp_process_report in bluetooth, there is an integer overflow. This could lead to an out of bounds write with no additional execution privileges needed. User interaction is not needed for exploitation. Product: Android Versions: Android kernel Android ID: A-65853588 References: Upstream kernel. Additional Analyst Notes: - CVE Program Container: References: - https://usn.ubuntu.com/3797-2/ - https://usn.ubuntu.com/3797-1/ - https://lists.debian.org/debian-lts-announce/2018/10/msg00003.htm
.ubuntu.com/3797-2/ - https://usn.ubuntu.com/3797-1/ - https://lists.debian.org/debian-lts-announce/2018/10/msg00003.html - https://usn.ubuntu.com/3820-1/ - https://usn.ubuntu.com/3820-2/ - https://access.redhat.com/errata/RHSA-2018:2948 - https://www.debian.org/security/2018/dsa-4308 - https://source.android.com/security/bulletin/2018-06-01 - https://usn.ubuntu.com/3822-2/ - https://usn.ubuntu.com/3822-1/ - https://usn.ubuntu.com/3820-3/ - https://access.redhat.com/errata/RHSA-2019:2043 - https://access.redhat.com/errata/RHSA-2019:2029
CVE ID: CVE-2018-9364 State: PUBLISHED Published: 2024-11-19T19:10:07.411Z Last Updated: 2024-11-20T16:06:50.949Z Vendors: Google Products: Android Description: In the LG LAF component, there is a special command that allowed modification of certain partitions. This could lead to bypass of secure boot. User interaction is not needed for exploitation. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://source.android.com/security/bulletin/2018-06-01
CVE ID: CVE-2018-9365 State: PUBLISHED Published: 2024-11-19T20:44:28.663Z Last Updated: 2024-11-21T15:10:28.232Z Vendors: Google Products: Andrioid Description: In smp_data_received of smp_l2c.cc, there is a possible out of bounds read followed by code execution due to a missing bounds check. This could lead to remote code execution with no additional execution privileges needed. User interaction is needed for exploitation. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://source.android.com/security/bulletin/2018-07-01
CVE ID: CVE-2018-9366 State: PUBLISHED Published: 2024-11-19T19:13:00.352Z Last Updated: 2024-11-20T15:59:21.871Z Vendors: Google Products: Android Description: In IMSA_Recv_Thread and VT_IMCB_Thread of ImsaClient.cpp and VideoTelephony.c, there is a possible out of bounds write due to an integer overflow. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://source.android.com/security/bulletin/2018-06-01
CVE ID: CVE-2018-9367 State: PUBLISHED Published: 2024-11-19T19:15:12.182Z Last Updated: 2024-11-21T15:49:25.966Z Vendors: Google Products: Android Description: In FT_ACDK_CCT_V2_OP_ISP_SET_TUNING_PARAS of Meta_CCAP_Para.cpp, there is a possible out of bounds write due to improper input validation. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://source.android.com/security/bulletin/2018-06-01
CVE ID: CVE-2018-9368 State: PUBLISHED Published: 2024-11-19T19:16:25.726Z Last Updated: 2024-11-21T15:28:10.145Z Vendors: Google Products: Android Description: In mtkscoaudio debugfs there is a possible arbitrary kernel memory write due to missing bounds check and weakened SELinux policies. This could lead to local escalation of privilege with system execution privileges needed. User interaction is not needed for exploitation. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://source.android.com/security/bulletin/2018-06-01
CVE ID: CVE-2018-9369 State: PUBLISHED Published: 2024-11-19T19:17:52.251Z Last Updated: 2024-11-21T15:18:15.122Z Vendors: Google Products: Android Description: In bootloader there is fastboot command allowing user specified kernel command line arguments. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is needed for exploitation. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://source.android.com/security/bulletin/2018-06-01
CVE ID: CVE-2018-9370 State: PUBLISHED Published: 2024-11-19T19:20:49.972Z Last Updated: 2024-11-21T15:15:52.899Z Vendors: Google Products: Android Description: In download.c there is a special mode allowing user to download data into memory and causing possible memory corruptions due to missing bounds check. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is needed for exploitation. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://source.android.com/security/bulletin/2018-06-01
CVE ID: CVE-2018-9371 State: PUBLISHED Published: 2024-11-19T19:22:26.550Z Last Updated: 2024-11-20T20:04:52.809Z Vendors: Google Products: Android Description: In the Mediatek Preloader, there are out of bounds reads and writes due to an exposed interface that allows arbitrary peripheral memory mapping with insufficient blacklisting/whitelisting. This could lead to local elevation of privilege, given physical access to the device with no additional execution privileges needed. User interaction is needed for exploitation. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://source.android.com/security/bulletin/2018-06-01
CVE ID: CVE-2018-9372 State: PUBLISHED Published: 2024-11-19T19:23:55.561Z Last Updated: 2024-11-21T15:13:16.054Z Vendors: Google Products: Android Description: In cmd_flash_mmc_sparse_img of dl_commands.c, there is a possible out of bounds write due to a missing bounds check. This could lead to a local escalation of privilege in the bootloader with no additional execution privileges needed. User interaction is not needed for exploitation. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://source.android.com/security/bulletin/2018-06-01
CVE ID: CVE-2018-9373 State: PUBLISHED Published: 2025-01-28T16:52:42.889Z Last Updated: 2025-01-28T19:49:40.008Z Vendors: Google Products: Android Description: In TdlsexRxFrameHandle of the MTK WLAN driver, there is a possible out of bounds write due to a missing bounds check. This could lead to remote escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://source.android.com/security/bulletin/2018-06-01
CVE ID: CVE-2018-9374 State: PUBLISHED Published: 2024-11-27T23:42:11.151Z Last Updated: 2024-11-29T21:26:39.405Z Vendors: Google Products: Android Description: In installPackageLI of PackageManagerService.java, there is a possible permissions bypass. This could lead to local escalation of privilege with User execution privileges needed. User interaction is not needed for exploitation. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://source.android.com/docs/security/bulletin/pixel/2018-06-01
CVE ID: CVE-2018-9375 State: PUBLISHED Published: 2025-01-17T23:07:14.793Z Last Updated: 2025-03-13T14:27:38.492Z Vendors: Google Products: Android Description: In multiple functions of UserDictionaryProvider.java, there is a possible way to add and delete words in the user dictionary due to a confused deputy. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://source.android.com/security/bulletin/pixel/2018-06-01
CVE ID: CVE-2018-9376 State: PUBLISHED Published: 2024-12-02T20:59:25.345Z Last Updated: 2024-12-03T18:39:18.952Z Vendors: Google Products: Android Description: In rpc_msg_handler and related handlers of drivers/misc/mediatek/eccci/port_rpc.c, there is a possible out of bounds write due to an incorrect bounds check. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://source.android.com/docs/security/bulletin/pixel/2018-07-01
CVE ID: CVE-2018-9377 State: PUBLISHED Published: 2024-11-28T00:23:14.763Z Last Updated: 2025-04-03T15:29:06.123Z Vendors: Google Products: Android Description: In getIntentForIntentSender of ActivityManagerService.java, there is a possible way to access user metadata due to a pending intent. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://source.android.com/docs/security/bulletin/pixel/2018-06-01
CVE ID: CVE-2018-9378 State: PUBLISHED Published: 2025-01-28T16:53:30.767Z Last Updated: 2025-01-28T19:37:36.790Z Vendors: Google Products: Android Description: In BnAudioPolicyService::onTransact of IAudioPolicyService.cpp, there is a possible information disclosure due to uninitialized data. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://source.android.com/security/bulletin/pixel/2018-06-01
CVE ID: CVE-2018-9379 State: PUBLISHED Published: 2025-01-17T23:09:39.761Z Last Updated: 2025-03-13T19:42:41.116Z Vendors: Google Products: Android Description: In multiple functions of MiniThumbFile.java, there is a possible way to view the thumbnails of deleted photos due to a confused deputy. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://source.android.com/security/bulletin/pixel/2018-06-01
CVE ID: CVE-2018-9380 State: PUBLISHED Published: 2024-12-02T19:54:27.063Z Last Updated: 2024-12-02T21:25:57.228Z Vendors: Google Products: Android Description: In l2c_lcc_proc_pdu of l2c_fcr.cc, there is a possible out of bounds write due to improper input validation. This could lead to remote escalation of privilege with no additional execution privileges needed. User interaction is needed for exploitation. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://source.android.com/docs/security/bulletin/pixel/2018-06-01