Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2021-0967 State: PUBLISHED Published: 2021-12-15T18:05:49 Last Updated: 2024-08-03T15:55:18.070Z Vendors: n/a Products: Android Problem Types: Remote code execution Description: In vorbis_book_decodev_set of codebook.c, there is a possible out of bounds write due to a missing bounds check. This could lead to remote information disclosure with no additional execution privileges needed. User interaction is needed for exploitation.Product: AndroidVersions: Android-10 Android-11 Android-12 Android-9Android ID: A-199065614 Additional Analyst Notes: - CVE Program Container: References: - https://source.android.com/security/bulletin/2021-12-01
CVE ID: CVE-2021-0968 State: PUBLISHED Published: 2021-12-15T18:05:47 Last Updated: 2024-08-03T15:55:17.960Z Vendors: n/a Products: Android Problem Types: Remote code execution Description: In osi_malloc and osi_calloc of allocator.cc, there is a possible out of bounds write due to an integer overflow. This could lead to remote code execution with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-10 Android-11 Android-12 Android-9Android ID: A-197868577 Additional Analyst Notes: - CVE Program Container: References: - https://source.android.com/security/bulletin/2021-12-01
CVE ID: CVE-2021-0969 State: PUBLISHED Published: 2021-12-15T18:05:50 Last Updated: 2024-08-03T15:55:18.241Z Vendors: n/a Products: Android Problem Types: Denial of service Description: In getTitle of AccessPoint.java, there is a possible unhandled exception due to a missing null check. This could lead to remote denial of service if a proximal Wi-Fi AP provides invalid information with no additional execution privileges needed. User interaction is needed for exploitation.Product: AndroidVersions: Android-10 Android-11Android ID: A-199922685 Additional Analyst Notes: - CVE Program Container: References: - https://source.android.com/security/bulletin/2021-12-01
CVE ID: CVE-2021-0970 State: PUBLISHED Published: 2021-12-15T18:05:46 Last Updated: 2024-08-03T15:55:18.098Z Vendors: n/a Products: Android Problem Types: Elevation of privilege Description: In createFromParcel of GpsNavigationMessage.java, there is a possible Parcel serialization/deserialization mismatch. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-10 Android-11 Android-12 Android-9Android ID: A-196970023 Additional Analyst Notes: - CVE Program Container: References: - https://source.android.com/security/bulletin/2021-12-01
CVE ID: CVE-2021-0971 State: PUBLISHED Published: 2021-12-15T18:05:41 Last Updated: 2024-08-03T15:55:18.418Z Vendors: n/a Products: Android Problem Types: Information disclosure Description: In MPEG4Source::read of MPEG4Extractor.cpp, there is a possible out of bounds write due to a missing bounds check. This could lead to remote information disclosure with no additional execution privileges needed. User interaction is needed for exploitation.Product: AndroidVersions: Android-10 Android-11 Android-12 Android-9Android ID: A-188893559 Additional Analyst Notes: - CVE Program Container: References: - https://source.android.com/security/bulletin/2021-12-01
CVE ID: CVE-2021-0973 State: PUBLISHED Published: 2021-12-15T18:06:48 Last Updated: 2024-08-03T15:55:17.951Z Vendors: n/a Products: Android Problem Types: Information disclosure Description: In isFileUri of UriUtil.java, there is a possible way to bypass ignoring file://URI attachment due to improper handling of case sensitivity. This could lead to local information disclosure with no additional execution privileges needed. User interaction is needed for exploitation.Product: AndroidVersions: Android-12Android ID: A-197328178 Additional Analyst Notes: - CVE Program Container: References: - https://source.android.com/security/bulletin/pixel/2021-12-01
CVE ID: CVE-2021-0975 State: PUBLISHED Published: 2022-08-11T15:06:48 Last Updated: 2024-08-03T15:55:18.163Z Vendors: n/a Products: Android Problem Types: Information disclosure Description: In USB Manager, there is a possible way to determine whether an app is installed, without query permissions, due to side channel information disclosure. This could lead to local information disclosure of installed packages with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-13Android ID: A-180104273 Additional Analyst Notes: - CVE Program Container: References: - https://source.android.com/security/bulletin/android-13
CVE ID: CVE-2021-0976 State: PUBLISHED Published: 2021-12-15T18:06:53 Last Updated: 2024-08-03T15:55:18.023Z Vendors: n/a Products: Android Problem Types: Information disclosure Description: In toBARK of floor0.c, there is a possible out of bounds read due to a missing bounds check. This could lead to remote information disclosure with no additional execution privileges needed. User interaction is needed for exploitation.Product: AndroidVersions: Android-12Android ID: A-199680600 Additional Analyst Notes: - CVE Program Container: References: - https://source.android.com/security/bulletin/pixel/2021-12-01
CVE ID: CVE-2021-0977 State: PUBLISHED Published: 2021-12-15T18:06:05 Last Updated: 2024-08-03T15:55:18.041Z Vendors: n/a Products: Android Problem Types: Elevation of privilege Description: In phNxpNHal_DtaUpdate of phNxpNciHal_dta.cc, there is a possible out of bounds write due to an incorrect bounds check. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-12Android ID: A-183487770 Additional Analyst Notes: - CVE Program Container: References: - https://source.android.com/security/bulletin/pixel/2021-12-01
CVE ID: CVE-2021-0978 State: PUBLISHED Published: 2021-12-15T18:06:24 Last Updated: 2024-08-03T15:55:18.092Z Vendors: n/a Products: Android Problem Types: Information disclosure Description: In getSerialForPackage of DeviceIdentifiersPolicyService.java, there is a possible way to determine whether an app is installed, without query permissions, due to side channel information disclosure. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-12Android ID: A-192587406 Additional Analyst Notes: - CVE Program Container: References: - https://source.android.com/security/bull
D: A-192587406 Additional Analyst Notes: - CVE Program Container: References: - https://source.android.com/security/bulletin/pixel/2021-12-01
CVE ID: CVE-2021-0979 State: PUBLISHED Published: 2021-12-15T18:06:19 Last Updated: 2024-08-03T15:55:17.958Z Vendors: n/a Products: Android Problem Types: Information disclosure Description: In isRequestPinItemSupported of ShortcutService.java, there is a possible cross-user leak of packages in which the default launcher supports requests to create pinned shortcuts due to a permissions bypass. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-12Android ID: A-191772737 Additional Analyst Notes: - CVE Program Container: References: - https://source.android.com/securit
roid ID: A-191772737 Additional Analyst Notes: - CVE Program Container: References: - https://source.android.com/security/bulletin/pixel/2021-12-01
CVE ID: CVE-2021-0981 State: PUBLISHED Published: 2021-12-15T18:06:20 Last Updated: 2024-08-03T15:55:18.139Z Vendors: n/a Products: Android Problem Types: Elevation of privilege Description: In enqueueNotificationInternal of NotificationManagerService.java, there is a possible way to run a foreground service without showing a notification due to improper input validation. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-10 Android-11Android ID: A-191981182 Additional Analyst Notes: - CVE Program Container: References: - https://source.android.com/security/bulletin
-191981182 Additional Analyst Notes: - CVE Program Container: References: - https://source.android.com/security/bulletin/2022-07-01
CVE ID: CVE-2021-0982 State: PUBLISHED Published: 2021-12-15T18:06:22 Last Updated: 2024-08-03T15:55:18.454Z Vendors: n/a Products: Android Problem Types: Information disclosure Description: In getOrganizationNameForUser of DevicePolicyManagerService.java, there is a possible organization name disclosure due to a missing permission check. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-12Android ID: A-192368508 Additional Analyst Notes: - CVE Program Container: References: - https://source.android.com/security/bulletin/pixel/2021-12-01
CVE ID: CVE-2021-0983 State: PUBLISHED Published: 2021-12-15T18:06:21 Last Updated: 2024-08-03T15:55:18.113Z Vendors: n/a Products: Android Problem Types: Information disclosure Description: In createAdminSupportIntent of DevicePolicyManagerService.java, there is a possible disclosure of information about installed device/profile owner package name due to side channel information disclosure. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-12LAndroid ID: A-192245204 Additional Analyst Notes: - CVE Program Container: References: - https://source.android.com/security
oid ID: A-192245204 Additional Analyst Notes: - CVE Program Container: References: - https://source.android.com/security/bulletin/pixel/2022-06-01
CVE ID: CVE-2021-0984 State: PUBLISHED Published: 2021-12-15T18:06:23 Last Updated: 2024-08-03T15:55:18.145Z Vendors: n/a Products: Android Problem Types: Elevation of privilege Description: In onNullBinding of ManagedServices.java, there is a possible permission bypass due to an incorrectly unbound service. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-12Android ID: A-192475653 Additional Analyst Notes: - CVE Program Container: References: - https://source.android.com/security/bulletin/pixel/2021-12-01
CVE ID: CVE-2021-0985 State: PUBLISHED Published: 2021-12-15T18:06:15 Last Updated: 2024-08-03T15:55:18.079Z Vendors: n/a Products: Android Problem Types: Elevation of privilege Description: In onReceive of AlertReceiver.java, there is a possible way to dismiss system dialog due to a missing permission check. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-12Android ID: A-190403923 Additional Analyst Notes: - CVE Program Container: References: - https://source.android.com/security/bulletin/pixel/2021-12-01
CVE ID: CVE-2021-0986 State: PUBLISHED Published: 2021-12-15T18:06:22 Last Updated: 2024-08-03T15:55:18.227Z Vendors: n/a Products: Android Problem Types: Information disclosure Description: In hasGrantedPolicy of DevicePolicyManagerService.java, there is a possible information disclosure about the device owner, profile owner, or device admin due to a logic error in the code. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-12Android ID: A-192247339 Additional Analyst Notes: - CVE Program Container: References: - https://source.android.com/security/bulletin/pixel/2
39 Additional Analyst Notes: - CVE Program Container: References: - https://source.android.com/security/bulletin/pixel/2021-12-01
CVE ID: CVE-2021-0987 State: PUBLISHED Published: 2021-12-15T18:06:17 Last Updated: 2024-08-03T15:55:18.454Z Vendors: n/a Products: Android Problem Types: Information disclosure Description: In getNeighboringCellInfo of PhoneInterfaceManager.java, there is a possible way to determine whether an app is installed, without query permissions, due to side channel information disclosure. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-12Android ID: A-190619791 Additional Analyst Notes: - CVE Program Container: References: - https://source.android.com/security/bulletin/p
90619791 Additional Analyst Notes: - CVE Program Container: References: - https://source.android.com/security/bulletin/pixel/2021-12-01
CVE ID: CVE-2021-0988 State: PUBLISHED Published: 2021-12-15T18:06:20 Last Updated: 2024-08-03T15:55:18.361Z Vendors: n/a Products: Android Problem Types: Information disclosure Description: In getLaunchedFromUid and getLaunchedFromPackage of ActivityClientController.java, there is a possible way to determine whether an app is installed, without query permissions, due to side channel information disclosure. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-12Android ID: A-191954233 Additional Analyst Notes: - CVE Program Container: References: - https://source.andro
Android-12Android ID: A-191954233 Additional Analyst Notes: - CVE Program Container: References: - https://source.android.com/security/bulletin/pixel/2021-12-01
CVE ID: CVE-2021-0989 State: PUBLISHED Published: 2021-12-15T18:06:34 Last Updated: 2024-08-03T15:55:18.402Z Vendors: n/a Products: Android Problem Types: Information disclosure Description: In hasManageOngoingCallsPermission of TelecomServiceImpl.java, there is a possible way to determine whether an app is installed, without query permissions, due to side channel information disclosure. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-12Android ID: A-194105812 Additional Analyst Notes: - CVE Program Container: References: - https://source.android.com/security/bull
D: A-194105812 Additional Analyst Notes: - CVE Program Container: References: - https://source.android.com/security/bulletin/pixel/2021-12-01
CVE ID: CVE-2021-0990 State: PUBLISHED Published: 2021-12-15T18:06:09 Last Updated: 2024-08-03T15:55:17.983Z Vendors: n/a Products: Android Problem Types: Information disclosure Description: In getDeviceId of PhoneSubInfoController.java, there is a possible way to determine whether an app is installed, without query permissions, due to side channel information disclosure. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-12Android ID: A-185591180 Additional Analyst Notes: - CVE Program Container: References: - https://source.android.com/security/bulletin/pixel/2021-
dditional Analyst Notes: - CVE Program Container: References: - https://source.android.com/security/bulletin/pixel/2021-12-01
CVE ID: CVE-2021-0991 State: PUBLISHED Published: 2021-12-15T18:06:03 Last Updated: 2024-08-03T15:55:18.363Z Vendors: n/a Products: Android Problem Types: Information disclosure Description: In OnMetadataChangedListener of AdvancedBluetoothDetailsHeaderController.java, there is a possible leak of Bluetooth MAC addresses due to log information disclosure. This could lead to local information disclosure with System execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-12Android ID: A-181588752 Additional Analyst Notes: - CVE Program Container: References: - https://source.android.com/security/bulletin/pixel/2021-12-01
CVE ID: CVE-2021-0992 State: PUBLISHED Published: 2021-12-15T18:05:59 Last Updated: 2024-08-03T15:55:18.399Z Vendors: n/a Products: Android Problem Types: Elevation of privilege Description: In onCreate of PaymentDefaultDialog.java, there is a possible way to change a default payment app without user consent due to tapjack overlay. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is needed for exploitation.Product: AndroidVersions: Android-12Android ID: A-180104327 Additional Analyst Notes: - CVE Program Container: References: - https://source.android.com/security/bulletin/pixel/2021-12-01
CVE ID: CVE-2021-0993 State: PUBLISHED Published: 2021-12-15T18:06:33 Last Updated: 2024-08-03T15:55:18.492Z Vendors: n/a Products: Android Problem Types: Denial of service Description: In getOffsetBeforeAfter of TextLine.java, there is a possible denial of service due to resource exhaustion. This could lead to remote denial of service with no additional execution privileges needed. User interaction is needed for exploitation.Product: AndroidVersions: Android-12Android ID: A-193849901 Additional Analyst Notes: - CVE Program Container: References: - https://source.android.com/security/bulletin/pixel/2021-12-01
CVE ID: CVE-2021-0994 State: PUBLISHED Published: 2021-12-15T18:06:32 Last Updated: 2024-08-03T15:55:18.159Z Vendors: n/a Products: Android Problem Types: Information disclosure Description: In requestRouteToHostAddress of ConnectivityService.java, there is a possible way to determine whether an app is installed, without query permissions, due to a missing permission check. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-12Android ID: A-193801134 Additional Analyst Notes: - CVE Program Container: References: - https://source.android.com/security/bulletin/pixel/202
Additional Analyst Notes: - CVE Program Container: References: - https://source.android.com/security/bulletin/pixel/2021-12-01
CVE ID: CVE-2021-0995 State: PUBLISHED Published: 2021-12-15T18:06:49 Last Updated: 2024-08-03T15:55:18.421Z Vendors: n/a Products: Android Problem Types: Information disclosure Description: In registerSuggestionConnectionStatusListener of WifiServiceImpl.java, there is a possible way to determine whether an app is installed, without query permissions, due to side channel information disclosure. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-12Android ID: A-197536547 Additional Analyst Notes: - CVE Program Container: References: - https://source.android.com/secur
ndroid ID: A-197536547 Additional Analyst Notes: - CVE Program Container: References: - https://source.android.com/security/bulletin/pixel/2021-12-01
CVE ID: CVE-2021-0996 State: PUBLISHED Published: 2021-12-15T18:06:00 Last Updated: 2024-08-03T15:55:18.493Z Vendors: n/a Products: Android Problem Types: Information disclosure Description: In nfaHciCallback of HciEventManager.cpp, there is a possible out of bounds read due to a missing bounds check. This could lead to local information disclosure over NFC with System execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-12Android ID: A-181346545 Additional Analyst Notes: - CVE Program Container: References: - https://source.android.com/security/bulletin/pixel/2021-12-01
CVE ID: CVE-2021-0997 State: PUBLISHED Published: 2021-12-15T18:06:17 Last Updated: 2024-08-03T15:55:18.229Z Vendors: n/a Products: Android Problem Types: Information disclosure Description: In handleUpdateNetworkState of GnssNetworkConnectivityHandler.java , there is a possible APN disclosure due to log information disclosure. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-12Android ID: A-191086488 Additional Analyst Notes: - CVE Program Container: References: - https://source.android.com/security/bulletin/pixel/2021-12-01
CVE ID: CVE-2021-0998 State: PUBLISHED Published: 2021-12-15T18:06:29 Last Updated: 2024-08-03T15:55:18.031Z Vendors: n/a Products: Android Problem Types: Information disclosure Description: In 'ih264e_find_bskip_params()' of ih264e_me.c, there is a possible out of bounds read due to a heap buffer overflow. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-12Android ID: A-193442575 Additional Analyst Notes: - CVE Program Container: References: - https://source.android.com/security/bulletin/pixel/2021-12-01
CVE ID: CVE-2021-0999 State: PUBLISHED Published: 2021-12-15T18:06:46 Last Updated: 2024-08-03T15:55:18.035Z Vendors: n/a Products: Android Problem Types: Elevation of privilege Description: In the broadcast definition in AndroidManifest.xml, there is a possible way to set the A2DP bluetooth device connection state due to a missing permission check. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-12Android ID: A-196858999 Additional Analyst Notes: - CVE Program Container: References: - https://source.android.com/security/bulletin/pixel/2021-12-01
CVE ID: CVE-2021-1000 State: PUBLISHED Published: 2022-03-30T16:02:00 Last Updated: 2024-08-03T15:55:18.205Z Vendors: n/a Products: Android Problem Types: Elevation of privilege Description: In createBluetoothDeviceSlice of ConnectedDevicesSliceProvider.java, there is a possible permission bypass due to an unsafe PendingIntent. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-12LAndroid ID: A-185190688 Additional Analyst Notes: - CVE Program Container: References: - https://source.android.com/security/bulletin/android-12l
CVE ID: CVE-2021-1001 State: PUBLISHED Published: 2021-12-15T18:06:16 Last Updated: 2024-08-03T15:55:18.466Z Vendors: n/a Products: Android Problem Types: Information disclosure Description: In PVInitVideoEncoder of mp4enc_api.cpp, there is a possible out of bounds read due to a heap buffer overflow. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-12Android ID: A-190435883 Additional Analyst Notes: - CVE Program Container: References: - https://source.android.com/security/bulletin/pixel/2021-12-01
CVE ID: CVE-2021-1002 State: PUBLISHED Published: 2021-12-15T18:06:36 Last Updated: 2024-08-03T15:55:18.491Z Vendors: n/a Products: Android Problem Types: Information disclosure Description: In WT_Interpolate of eas_wtengine.c, there is a possible out of bounds read due to a missing bounds check. This could lead to remote information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-12Android ID: A-194533433 Additional Analyst Notes: - CVE Program Container: References: - https://source.android.com/security/bulletin/pixel/2021-12-01
CVE ID: CVE-2021-1003 State: PUBLISHED Published: 2021-12-15T18:06:13 Last Updated: 2024-08-03T15:55:18.206Z Vendors: n/a Products: Android Problem Types: Elevation of privilege Description: In adjustStreamVolume of AudioService.java, there is a possible way for unprivileged app to change audio stream volume due to a confused deputy. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-12Android ID: A-189857506 Additional Analyst Notes: - CVE Program Container: References: - https://source.android.com/security/bulletin/pixel/2021-12-01