Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2018-9423 State: PUBLISHED Published: 2024-12-02T21:26:58.452Z Last Updated: 2024-12-03T15:08:41.609Z Vendors: Google Products: Android Description: In ihevcd_parse_slice_header of ihevcd_parse_slice_header.c there is a possible out of bound read due to missing bounds check. This could lead to denial of service with no additional execution privileges needed. User interaction is needed for exploitation. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://source.android.com/docs/security/bulletin/pixel/2018-07-01
CVE ID: CVE-2018-9424 State: PUBLISHED Published: 2024-11-19T21:23:35.724Z Last Updated: 2024-11-20T15:30:30.046Z Vendors: Google Products: Android Description: In CryptoPlugin::decrypt of CryptoPlugin.cpp, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://source.android.com/security/bulletin/2018-07-01
CVE ID: CVE-2018-9425 State: PUBLISHED Published: 2019-09-27T18:05:19 Last Updated: 2024-08-05T07:17:51.835Z Vendors: n/a Products: Android Problem Types: Elevation of privilege Description: In Platform, there is a possible bypass of user interaction requirements due to missing permission checks. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation. Product: AndroidVersions: Android-10Android ID: A-73884967 Additional Analyst Notes: - CVE Program Container: References: - https://source.android.com/security/bulletin/android-10
CVE ID: CVE-2018-9426 State: PUBLISHED Published: 2024-12-02T21:30:27.265Z Last Updated: 2024-12-03T15:07:45.180Z Vendors: Google Products: Android Description: In RsaKeyPairGenerator::getNumberOfIterations of RSAKeyPairGenerator.java, an incorrect implementation could cause weak RSA key pairs being generated. This could lead to crypto vulnerability with no additional execution privileges needed. User interaction is not needed for exploitation. Bulletin Fix: The fix is designed to correctly implement the key generation according to FIPS standard. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://source.android.com/docs/security/bulletin/pixel/2018-07-01
CVE ID: CVE-2018-9427 State: PUBLISHED Published: 2018-11-06T17:00:00Z Last Updated: 2024-09-16T16:28:04.219Z Vendors: Google Inc. Products: Android Problem Types: Remote code execution Description: In CopyToOMX of OMXNodeInstance.cpp there is a possible out-of-bounds write due to an incorrect bounds check. This could lead to remote arbitrary code execution with no additional execution privileges needed. User interaction is needed for exploitation. Product: Android Versions: Android-8.0 Android-8.1 Android ID: A-77486542. Additional Analyst Notes: - CVE Program Container: References: - https://source.android.com/security/bulletin/2018-08-01 - http://www.securitytracker.com/id/1041432
CVE ID: CVE-2018-9428 State: PUBLISHED Published: 2024-11-19T21:25:02.634Z Last Updated: 2024-11-20T15:27:16.790Z Vendors: Google Products: Android Description: In startDevice of AAudioServiceStreamBase.cpp there is a possible out of bounds write due to a use after free. This could lead to local arbitrary code execution with no additional execution privileges needed. User interaction is needed for exploitation. https://source.android.com/security/bulletin/2018-07-01 Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://source.android.com/security/bulletin/2018-07-01
CVE ID: CVE-2018-9429 State: PUBLISHED Published: 2024-12-02T21:33:42.242Z Last Updated: 2024-12-03T14:50:44.318Z Vendors: Google Products: Android Description: In buildImageItemsIfPossible of ItemTable.cpp there is a possible out of bound read due to uninitialized data. This could lead to information disclosure with no additional execution privileges needed. User interaction is needed for exploitation. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://source.android.com/docs/security/bulletin/pixel/2018-07-01
CVE ID: CVE-2018-9430 State: PUBLISHED Published: 2024-12-02T21:36:48.335Z Last Updated: 2024-12-03T14:48:09.933Z Vendors: Google Products: Android Description: In prop2cfg of btif_storage.cc, there is a possible out of bounds write due to an incorrect bounds check. This could lead to remote code execution with no additional execution privileges needed. User interaction is not needed for exploitation. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://source.android.com/docs/security/bulletin/pixel/2018-07-01
CVE ID: CVE-2018-9431 State: PUBLISHED Published: 2024-12-02T21:39:18.222Z Last Updated: 2024-12-03T14:43:39.288Z Vendors: Google Products: Android Description: In OSUInfo of OSUInfo.java, there is a possible escalation of privilege due to improper input validation. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://source.android.com/docs/security/bulletin/pixel/2018-07-01
CVE ID: CVE-2018-9432 State: PUBLISHED Published: 2024-11-19T21:26:51.877Z Last Updated: 2024-11-20T15:23:36.991Z Vendors: Google Products: Android Description: In createPhonebookDialogView and createMapDialogView of BluetoothPermissionActivity.java, there is a possible permissions bypass. This could lead to local escalation of privilege due to hiding and bypassing the user's ability to disable access to contacts, with no additional execution privileges needed. User interaction is needed for exploitation. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://source.android.com/security/bulletin/2018-07-01
CVE ID: CVE-2018-9433 State: PUBLISHED Published: 2024-11-19T21:28:32.065Z Last Updated: 2024-11-21T15:04:44.729Z Vendors: Google Products: Android Description: In ArrayConcatVisitor of builtins-array.cc, there is a possible type confusion due to improper input validation. This could lead to remote code execution with no additional execution privileges needed. User interaction is needed for exploitation. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://source.android.com/security/bulletin/2018-07-01
CVE ID: CVE-2018-9434 State: PUBLISHED Published: 2025-01-17T23:11:16.145Z Last Updated: 2025-03-24T16:04:17.270Z Vendors: Google Products: Android Description: In multiple functions of Parcel.cpp, there is a possible way to bypass address space layout randomization. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://source.android.com/security/bulletin/pixel/2018-07-01
CVE ID: CVE-2018-9435 State: PUBLISHED Published: 2024-12-02T22:12:22.069Z Last Updated: 2024-12-03T14:58:06.946Z Vendors: Google Products: Android Description: In gatt_process_error_rsp of gatt_cl.cc, there is a possible out of bound read due to a missing bounds check. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://source.android.com/docs/security/bulletin/pixel/2018-08-01
CVE ID: CVE-2018-9436 State: PUBLISHED Published: 2018-11-06T17:00:00Z Last Updated: 2024-09-17T02:16:39.329Z Vendors: Google Inc. Products: Android Problem Types: Information disclosure Description: In bnep_data_ind of bnep_main.cc, there is a possible out of bounds read due to a missing bounds check. This could lead to remote information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation. Product: Android Versions: Android-6.0 Android-6.0.1 Android-7.0 Android-7.1.1 Android-7.1.2 Android-8.0 Android-8.1 Android ID: A-79164722. Additional Analyst Notes: - CVE Program Container: References: - https://source.android.com/security/bulletin
-79164722. Additional Analyst Notes: - CVE Program Container: References: - https://source.android.com/security/bulletin/2018-08-01 - http://www.securitytracker.com/id/1041432
CVE ID: CVE-2018-9437 State: PUBLISHED Published: 2018-11-06T17:00:00Z Last Updated: 2024-09-17T00:35:36.991Z Vendors: Google Inc. Products: Android Problem Types: Information disclosure Description: In getstring of ID3.cpp there is a possible out-of-bounds read due to a missing bounds check. This could lead to remote denial of service with no additional execution privileges needed. User interaction is needed for exploitation. Product: Android Versions: Android-6.0 Android-6.0.1 Android-7.0 Android-7.1.1 Android-7.1.2 Android-8.0 Android-8.1 Android ID: A-78656554. Additional Analyst Notes: - CVE Program Container: References: - https://source.android.com/security/bulletin/2018-08-01 - http:
al Analyst Notes: - CVE Program Container: References: - https://source.android.com/security/bulletin/2018-08-01 - http://www.securitytracker.com/id/1041432
CVE ID: CVE-2018-9438 State: PUBLISHED Published: 2018-11-06T17:00:00Z Last Updated: 2024-09-16T20:52:51.203Z Vendors: Google Inc. Products: Android Problem Types: Denial of service Description: When a device connects only over WiFi VPN, the device may not receive security updates due to some incorrect checks. This could lead to a local denial of service of security updates with no additional execution privileges needed. User interaction is needed for exploitation. Product: Android Versions: Android-8.1 Android ID: A-78644887. Additional Analyst Notes: - CVE Program Container: References: - https://source.android.com/security/bulletin/2018-08-01 - http://www.securitytracker.com/id/1041432
CVE ID: CVE-2018-9439 State: PUBLISHED Published: 2024-12-04T23:37:42.619Z Last Updated: 2024-12-05T15:33:21.903Z Vendors: Google Products: Android Description: In __unregister_prot_hook and packet_release of af_packet.c, there is a possible use-after-free due to improper locking. This could lead to local escalation of privilege in the kernel with System execution privileges needed. User interaction is not needed for exploitation. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://source.android.com/security/bulletin/pixel/2018-08-01
CVE ID: CVE-2018-9440 State: PUBLISHED Published: 2024-11-19T22:18:01.261Z Last Updated: 2024-11-20T20:33:44.390Z Vendors: Google Products: Android Description: In parse of M3UParser.cpp there is a possible resource exhaustion due to improper input validation. This could lead to denial of service with no additional execution privileges needed. User interaction is needed for exploitation. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://source.android.com/security/bulletin/2018-09-01
CVE ID: CVE-2018-9441 State: PUBLISHED Published: 2024-12-03T00:02:26.901Z Last Updated: 2024-12-03T14:57:25.624Z Vendors: Google Products: Android Description: In sdp_copy_raw_data of sdp_discovery.cc, there is a possible out of bounds read due to an incorrect bounds check. This could lead to local information disclosure with no additional execution privileges needed. User interaction is needed for exploitation. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://source.android.com/docs/security/bulletin/pixel/2018-08-01
CVE ID: CVE-2018-9444 State: PUBLISHED Published: 2018-11-06T17:00:00Z Last Updated: 2024-09-16T17:22:59.792Z Vendors: Google Inc. Products: Android Problem Types: Denial of service Description: In ih264d_video_decode of ih264d_api.c there is a possible resource exhaustion due to an infinite loop. This could lead to remote temporary device denial of service (remote hang or reboot) with no additional execution privileges needed. User interaction is needed for exploitation. Product: Android Versions: Android-6.0 Android-6.0.1 Android-7.0 Android-7.1.1 Android-7.1.2 Android ID: A-63521984. Additional Analyst Notes: - CVE Program Container: References: - https://source.android.com/security/bulle
: A-63521984. Additional Analyst Notes: - CVE Program Container: References: - https://source.android.com/security/bulletin/2018-08-01 - http://www.securitytracker.com/id/1041432
CVE ID: CVE-2018-9445 State: PUBLISHED Published: 2018-11-06T17:00:00Z Last Updated: 2024-09-17T04:25:36.140Z Vendors: Google Inc. Products: Android Problem Types: Elevation of privilege Description: In readMetadata of Utils.cpp, there is a possible path traversal bug due to a confused deputy. This could lead to local escalation of privilege when mounting a USB device with no additional execution privileges needed. User interaction is not needed for exploitation. Product: Android Versions: Android-6.0 Android-6.0.1 Android-7.0 Android-7.1.1 Android-7.1.2 Android-8.0 Android-8.1 Android ID: A-80436257. Additional Analyst Notes: - CVE Program Container: References: - https://source.android.com
-8.1 Android ID: A-80436257. Additional Analyst Notes: - CVE Program Container: References: - https://source.android.com/security/bulletin/2018-08-01 - http://www.securitytracker.com/id/1041432 - https://www.exploit-db.com/exploits/45192/
CVE ID: CVE-2018-9446 State: PUBLISHED Published: 2018-11-06T17:00:00Z Last Updated: 2024-09-16T18:43:42.880Z Vendors: Google Inc. Products: Android Problem Types: Remote code execution Description: In smp_br_state_machine_event of smp_br_main.cc, there is a possible out of bounds write due to memory corruption. This could lead to remote code execution with no additional execution privileges needed. User interaction is not needed for exploitation. Product: Android Versions: Android-6.0 Android-6.0.1 Android-7.0 Android-7.1.1 Android-7.1.2 Android-8.0 Android-8.1 Android ID: A-80145946. Additional Analyst Notes: - CVE Program Container: References: - https://source.android.com/security/bullet
A-80145946. Additional Analyst Notes: - CVE Program Container: References: - https://source.android.com/security/bulletin/2018-08-01 - http://www.securitytracker.com/id/1041432
CVE ID: CVE-2018-9447 State: PUBLISHED Published: 2025-01-17T23:12:29.500Z Last Updated: 2025-03-19T13:37:02.446Z Vendors: Google Products: Android Description: In onCreate of EmergencyCallbackModeExitDialog.java, there is a possible way to crash the emergency callback mode due to a missing null check. This could lead to local denial of service with no additional execution privileges needed. User interaction is not needed for exploitation. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://source.android.com/security/bulletin/pixel/2018-08-01
CVE ID: CVE-2018-9448 State: PUBLISHED Published: 2018-11-06T17:00:00Z Last Updated: 2024-09-16T19:10:20.406Z Vendors: Google Inc. Products: Android Problem Types: Information disclosure Description: In avct_bcb_msg_ind of avct_bcb_act.cc, there is a possible out of bounds read due to a missing bounds check. This could lead to remote information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation. Product: Android Versions: Android-8.0 Android-8.1 Android ID: A-79944113. Additional Analyst Notes: - CVE Program Container: References: - https://source.android.com/security/bulletin/2018-08-01 - http://www.securitytracker.com/id/1041432
CVE ID: CVE-2018-9449 State: PUBLISHED Published: 2024-12-03T00:08:47.209Z Last Updated: 2024-12-03T14:40:59.650Z Vendors: Google Products: Android Description: In process_service_search_attr_rsp of sdp_discovery.cc, there is a possible out of bound read due to a missing bounds check. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://source.android.com/docs/security/bulletin/pixel/2018-08-01
CVE ID: CVE-2018-9450 State: PUBLISHED Published: 2018-11-06T17:00:00Z Last Updated: 2024-09-16T19:04:39.393Z Vendors: Google Inc. Products: Android Problem Types: Remote code execution Description: In avrc_proc_vendor_command of avrc_api.cc, there is a possible out of bounds write due to a missing bounds check. This could lead to remote code execution with no additional execution privileges needed. User interaction is not needed for exploitation. Product: Android Versions: Android-6.0 Android-6.0.1 Android-7.0 Android-7.1.1 Android-7.1.2 Android-8.0 Android-8.1 Android ID: A-79541338. Additional Analyst Notes: - CVE Program Container: References: - https://source.android.com/security/bullet
A-79541338. Additional Analyst Notes: - CVE Program Container: References: - https://source.android.com/security/bulletin/2018-08-01 - http://www.securitytracker.com/id/1041432
CVE ID: CVE-2018-9451 State: PUBLISHED Published: 2018-11-06T17:00:00Z Last Updated: 2024-09-16T22:01:52.849Z Vendors: Google Inc. Products: Android Problem Types: Information disclosure Description: In DynamicRefTable::load of ResourceTypes.cpp, there is a possible out of bounds read due to a missing bounds check. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation. Product: Android Versions: Android-6.0 Android-6.0.1 Android-7.0 Android-7.1.1 Android-7.1.2 Android-8.0 Android-8.1 Android ID: A-79488511. Additional Analyst Notes: - CVE Program Container: References: - https://source.android.com/secur
ndroid ID: A-79488511. Additional Analyst Notes: - CVE Program Container: References: - https://source.android.com/security/bulletin/2018-08-01 - http://www.securitytracker.com/id/1041432
CVE ID: CVE-2018-9452 State: PUBLISHED Published: 2018-10-02T19:00:00Z Last Updated: 2024-09-17T02:20:43.903Z Vendors: Google Inc. Products: Android Problem Types: Denial of service Description: In getOffsetForHorizontal of Layout.java, there is a possible application hang due to a slow width calculation. This could lead to remote denial of service if a contact with many hidden unicode characters were sent to the device and used by a local app, with no additional execution privileges needed. User interaction is needed for exploitation. Product: Android Versions: Android-7.0 Android-7.1.1 Android-7.1.2 Android-8.0 Android-8.1 Android-9.0 Android ID: A-78464361 Additional Analyst Notes: - CVE
Android-7.1.1 Android-7.1.2 Android-8.0 Android-8.1 Android-9.0 Android ID: A-78464361 Additional Analyst Notes: - CVE Program Container: References: - https://android.googlesource.com/platform/frameworks/base/+/3b6f84b77c30ec0bab5147b0cffc192c86ba2634 - https://source.android.com/security/bulletin/2018-10-01%2C - http://www.securityfocus.com/bid/105484 - https://android.googlesource.com/platform/frameworks/base/+/54f661b16b308cf38d1b9703214591c0f83df64d%2C
CVE ID: CVE-2018-9453 State: PUBLISHED Published: 2018-11-06T17:00:00Z Last Updated: 2024-09-16T20:22:01.222Z Vendors: Google Inc. Products: Android Problem Types: Information disclosure Description: In avdt_msg_prs_cfg of avdt_msg.cc, there is a possible out of bounds read due to a missing bounds check. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation. Product: Android Versions: Android-6.0 Android-6.0.1 Android-7.0 Android-7.1.1 Android-7.1.2 Android-8.0 Android-8.1 Android ID: A-78288378. Additional Analyst Notes: - CVE Program Container: References: - https://source.android.com/security/bulleti
A-78288378. Additional Analyst Notes: - CVE Program Container: References: - https://source.android.com/security/bulletin/2018-08-01 - http://www.securitytracker.com/id/1041432
CVE ID: CVE-2018-9454 State: PUBLISHED Published: 2018-11-06T17:00:00Z Last Updated: 2024-09-16T17:48:54.851Z Vendors: Google Inc. Products: Android Problem Types: Information disclosure Description: In bnep_data_ind of bnep_main.cc, there is a possible out of bounds read due to a missing bounds check. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation. Product: Android Versions: Android-6.0 Android-6.0.1 Android-7.0 Android-7.1.1 Android-7.1.2 Android-8.0 Android-8.1 Android ID: A-78286118. Additional Analyst Notes: - CVE Program Container: References: - https://source.android.com/security/bulletin/
78286118. Additional Analyst Notes: - CVE Program Container: References: - https://source.android.com/security/bulletin/2018-08-01 - http://www.securitytracker.com/id/1041432
CVE ID: CVE-2018-9455 State: PUBLISHED Published: 2018-11-06T17:00:00Z Last Updated: 2024-09-16T20:02:21.254Z Vendors: Google Inc. Products: Android Problem Types: Denial of service Description: In sdpu_extract_attr_seq of sdp_utils.cc, there is a possible out of bounds read due to an incorrect bounds check. This could lead to remote denial of service with no additional execution privileges needed. User interaction is not needed for exploitation. Product: Android Versions: Android-6.0 Android-6.0.1 Android-7.0 Android-7.1.1 Android-7.1.2 Android-8.0 Android-8.1 Android ID: A-78136677. Additional Analyst Notes: - CVE Program Container: References: - https://source.android.com/security/bulleti
A-78136677. Additional Analyst Notes: - CVE Program Container: References: - https://source.android.com/security/bulletin/2018-08-01 - http://www.securitytracker.com/id/1041432
CVE ID: CVE-2018-9456 State: PUBLISHED Published: 2024-11-19T22:19:46.371Z Last Updated: 2024-11-21T15:00:42.618Z Vendors: Google Products: Android Description: In sdpu_extract_attr_seq of sdp_utils.cc, there is a possible out of bounds read due to an incorrect bounds check. This could lead to remote denial of service with no additional execution privileges needed. User interaction is not needed for exploitation. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://source.android.com/security/bulletin/2018-09-01
CVE ID: CVE-2018-9457 State: PUBLISHED Published: 2018-11-14T18:00:00 Last Updated: 2024-08-05T07:24:54.838Z Vendors: Google Inc. Products: Android Problem Types: Elevation of privilege Description: In onCheckedChanged of BluetoothPairingController.java, there is a possible way to retrieve contact information due to a permissions bypass. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation. Product: Android. Versions: Android-8.0 Android-8.1 Android-9. Android ID: A-72872376 Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/105845 - https://source.android
l Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/105845 - https://source.android.com/security/bulletin/2018-11-01
CVE ID: CVE-2018-9458 State: PUBLISHED Published: 2018-11-06T17:00:00Z Last Updated: 2024-09-17T00:36:26.467Z Vendors: Google Inc. Products: Android Problem Types: Elevation of privilege Description: In computeFocusedWindow of RootWindowContainer.java, and related functions, there is possible interception of keypresses due to focus being on the wrong window. This could lead to local escalation of privilege revealing the user's keypresses while the screen was locked with no additional execution privileges needed. User interaction is needed for exploitation. Product: Android Versions: Android-8.0 Android-8.1 Android ID: A-71786287. Additional Analyst Notes: - CVE Program Container: References:
Versions: Android-8.0 Android-8.1 Android ID: A-71786287. Additional Analyst Notes: - CVE Program Container: References: - https://source.android.com/security/bulletin/2018-08-01 - http://www.securitytracker.com/id/1041432