Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2023-40103 State: PUBLISHED Published: 2023-12-04T22:40:54.653Z Last Updated: 2024-08-28T17:41:07.767Z Vendors: Google Products: Android Problem Types: Elevation of privilege Description: In multiple locations, there is a possible way to corrupt memory due to a double free. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://android.googlesource.com/platform/frameworks/base/+/e4a821b10a1b020f18fc6fc316b13b90fa450bae - https://android.googlesource.com/platform/frameworks/base/+/58fa254a5d1aee
/+/e4a821b10a1b020f18fc6fc316b13b90fa450bae - https://android.googlesource.com/platform/frameworks/base/+/58fa254a5d1aee2206de90d5396c01e177483e3a - https://android.googlesource.com/platform/frameworks/base/+/c3bc12c484ef3bbca4cec19234437c45af5e584d - https://source.android.com/security/bulletin/2023-12-01
CVE ID: CVE-2023-40104 State: PUBLISHED Published: 2024-02-15T22:31:14.778Z Last Updated: 2024-08-02T18:24:55.545Z Vendors: Google Products: Android Problem Types: Information disclosure Description: In ca-certificates, there is a possible way to read encrypted TLS data due to untrusted cryptographic certificates. This could lead to remote information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://android.googlesource.com/platform/system/ca-certificates/+/91204b9fdbd77b3f27f94b73868607b2dccbfdad - https://source.android.com/security/bu
.com/platform/system/ca-certificates/+/91204b9fdbd77b3f27f94b73868607b2dccbfdad - https://source.android.com/security/bulletin/2023-11-01
CVE ID: CVE-2023-40105 State: PUBLISHED Published: 2024-02-15T22:31:14.906Z Last Updated: 2024-10-31T17:09:33.100Z Vendors: Google Products: Android Problem Types: Information disclosure Description: In backupAgentCreated of ActivityManagerService.java, there is a possible way to leak sensitive data due to a missing permission check. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://android.googlesource.com/platform/frameworks/base/+/935eb5ed6be35860a99ea242fb753f687d54a308 - https://source.android.com
ndroid.googlesource.com/platform/frameworks/base/+/935eb5ed6be35860a99ea242fb753f687d54a308 - https://source.android.com/security/bulletin/2023-11-01
CVE ID: CVE-2023-40106 State: PUBLISHED Published: 2024-02-15T22:31:15.055Z Last Updated: 2024-08-27T18:22:07.493Z Vendors: Google Products: Android Problem Types: Elevation of privilege Description: In sanitizeSbn of NotificationManagerService.java, there is a possible way to launch an activity from the background due to BAL Bypass. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://android.googlesource.com/platform/frameworks/base/+/442b4390c1f04b0e74ae4a7e349418dad4e7522e - https://source.android.co
android.googlesource.com/platform/frameworks/base/+/442b4390c1f04b0e74ae4a7e349418dad4e7522e - https://source.android.com/security/bulletin/2023-11-01
CVE ID: CVE-2023-40107 State: PUBLISHED Published: 2024-02-15T22:31:15.170Z Last Updated: 2024-08-21T20:15:47.531Z Vendors: Google Products: Android Problem Types: Elevation of privilege Description: In ARTPWriter of ARTPWriter.cpp, there is a possible use after free due to uninitialized data. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://android.googlesource.com/platform/frameworks/av/+/acb81624b4f50fed52cb1b3829809ee2f7377093 - https://source.android.com/security/bulletin/2023-11-01
CVE ID: CVE-2023-40108 State: PUBLISHED Published: 2025-01-21T23:04:42.173Z Last Updated: 2025-03-18T14:05:38.537Z Vendors: Google Products: Android Problem Types: Information disclosure Description: In multiple locations, there is a possible way to access media content belonging to another user due to a missing permission check. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://source.android.com/security/bulletin/2025-01-01
CVE ID: CVE-2023-40109 State: PUBLISHED Published: 2024-02-15T22:31:15.329Z Last Updated: 2024-08-16T15:32:15.092Z Vendors: Google Products: Android Problem Types: Elevation of privilege Description: In createFromParcel of UsbConfiguration.java, there is a possible background activity launch (BAL) due to a permissions bypass. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is needed for exploitation. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://android.googlesource.com/platform/frameworks/base/+/387d258cf10a30537fc48dc0e48d28071efa92e7 - https://source.android.com/security/b
lesource.com/platform/frameworks/base/+/387d258cf10a30537fc48dc0e48d28071efa92e7 - https://source.android.com/security/bulletin/2023-11-01
CVE ID: CVE-2023-40110 State: PUBLISHED Published: 2024-02-15T22:31:15.450Z Last Updated: 2025-03-19T16:00:18.169Z Vendors: Google Products: Android Problem Types: Elevation of privilege Description: In multiple functions of MtpPacket.cpp, there is a possible out of bounds write due to a heap buffer overflow. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is needed for exploitation. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://android.googlesource.com/platform/frameworks/av/+/53243faf690a49e00952b3d3956d2fff0b8d4a3c - https://source.android.com/security/bulletin/2023-11-01
CVE ID: CVE-2023-40111 State: PUBLISHED Published: 2024-02-15T22:31:15.565Z Last Updated: 2025-03-28T23:14:06.733Z Vendors: Google Products: Android Problem Types: Elevation of privilege Description: In setMediaButtonReceiver of MediaSessionRecord.java, there is a possible way to send a pending intent on behalf of system_server due to a confused deputy. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is needed for exploitation. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://android.googlesource.com/platform/frameworks/base/+/55d3d57cbffc838c52d610af14a056dea87b422e - https://s
nces: - https://android.googlesource.com/platform/frameworks/base/+/55d3d57cbffc838c52d610af14a056dea87b422e - https://source.android.com/security/bulletin/2023-11-01
CVE ID: CVE-2023-40112 State: PUBLISHED Published: 2024-02-15T22:31:15.687Z Last Updated: 2024-10-31T13:49:25.722Z Vendors: Google Products: Android Problem Types: Information disclosure Description: In ippSetValueTag of ipp.c, there is a possible out of bounds read due to a missing bounds check. This could lead to local information disclosure of past print jobs or other print-related information, with no additional execution privileges needed. User interaction is not needed for exploitation. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://android.googlesource.com/platform/packages/services/BuiltInPrintService/+/d7cb53cb5b47f4afdb84cb0e161d84
nces: - https://android.googlesource.com/platform/packages/services/BuiltInPrintService/+/d7cb53cb5b47f4afdb84cb0e161d84fdc2c32ce7 - https://source.android.com/security/bulletin/2023-11-01
CVE ID: CVE-2023-40113 State: PUBLISHED Published: 2024-02-15T22:31:15.797Z Last Updated: 2024-11-06T21:10:46.324Z Vendors: Google Products: Android Problem Types: Information disclosure Description: In multiple locations, there is a possible way for apps to access cross-user message data due to a missing permission check. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://android.googlesource.com/platform/packages/providers/TelephonyProvider/+/64ca6ba981745875dbf2064e0b2a47f8194c4f0a - https://source.a
lesource.com/platform/packages/providers/TelephonyProvider/+/64ca6ba981745875dbf2064e0b2a47f8194c4f0a - https://source.android.com/security/bulletin/2023-11-01
CVE ID: CVE-2023-40114 State: PUBLISHED Published: 2024-02-15T22:31:15.925Z Last Updated: 2024-08-15T18:10:22.035Z Vendors: Google Products: Android Problem Types: Elevation of privilege Description: In multiple functions of MtpFfsHandle.cpp , there is a possible out of bounds write due to a use after free. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is needed for exploitation. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://android.googlesource.com/platform/frameworks/av/+/2fdf54b050f728fd965c9afdd03116e9b9dafbae - https://source.android.com/security/bulletin/2023-11-01
CVE ID: CVE-2023-40115 State: PUBLISHED Published: 2024-02-15T22:31:16.207Z Last Updated: 2024-08-02T18:24:55.624Z Vendors: Google Products: Android Problem Types: Elevation of privilege Description: In readLogs of StatsService.cpp, there is a possible memory corruption due to a use after free. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://android.googlesource.com/platform/packages/modules/StatsD/+/e4cd2d8f75d1b7b83a759d752f38099a9aa9997e - https://source.android.com/security/bulletin/2023-11-01
CVE ID: CVE-2023-40116 State: PUBLISHED Published: 2023-10-27T20:22:56.201Z Last Updated: 2025-05-05T14:59:16.366Z Vendors: Google Products: Android Problem Types: Elevation of privilege Description: In onTaskAppeared of PipTaskOrganizer.java, there is a possible way to bypass background activity launch restrictions due to a logic error in the code. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://android.googlesource.com/platform/frameworks/base/+/18c3b194642f3949d09e48c21da5658fa04994c8 - https://s
nces: - https://android.googlesource.com/platform/frameworks/base/+/18c3b194642f3949d09e48c21da5658fa04994c8 - https://source.android.com/security/bulletin/2023-10-01
CVE ID: CVE-2023-40117 State: PUBLISHED Published: 2023-10-27T20:22:56.374Z Last Updated: 2025-04-29T19:59:46.887Z Vendors: Google Products: Android Problem Types: Elevation of privilege Description: In resetSettingsLocked of SettingsProvider.java, there is a possible lockscreen bypass due to a permissions bypass. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://android.googlesource.com/platform/packages/apps/Settings/+/11815817de2f2d70fe842b108356a1bc75d44ffb - https://android.googlesource.com/platf
.com/platform/packages/apps/Settings/+/11815817de2f2d70fe842b108356a1bc75d44ffb - https://android.googlesource.com/platform/frameworks/base/+/ff86ff28cf82124f8e65833a2dd8c319aea08945 - https://source.android.com/security/bulletin/2023-10-01
CVE ID: CVE-2023-40120 State: PUBLISHED Published: 2023-10-27T20:22:56.553Z Last Updated: 2025-05-05T14:59:10.242Z Vendors: Google Products: Android Problem Types: Elevation of privilege Description: In multiple locations, there is a possible way to bypass user notification of foreground services due to improper input validation. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://android.googlesource.com/platform/frameworks/base/+/d26544e5a4fd554b790b4d0c5964d9e95d9e626b - https://source.android.com/se
oid.googlesource.com/platform/frameworks/base/+/d26544e5a4fd554b790b4d0c5964d9e95d9e626b - https://source.android.com/security/bulletin/2023-10-01
CVE ID: CVE-2023-40121 State: PUBLISHED Published: 2023-10-27T20:22:56.725Z Last Updated: 2024-09-09T14:49:22.331Z Vendors: Google Products: Android Problem Types: Information disclosure Description: In appendEscapedSQLString of DatabaseUtils.java, there is a possible SQL injection due to unsafe deserialization. This could lead to local information disclosure with User execution privileges needed. User interaction is not needed for exploitation. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://android.googlesource.com/platform/frameworks/base/+/3287ac2d2565dc96bf6177967f8e3aed33954253 - https://source.android.com/security/bulletin/2023-10-01
CVE ID: CVE-2023-40122 State: PUBLISHED Published: 2024-02-16T00:08:14.391Z Last Updated: 2024-11-21T20:15:26.472Z Vendors: Google Products: Android Problem Types: Information disclosure Description: In applyCustomDescription of SaveUi.java, there is a possible way to view other user's images due to a confused deputy. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://android.googlesource.com/platform/frameworks/base/+/55fc00a0788ea0995fe0851616b9ac21710a2931 - https://source.android.com/security/bullet
rce.com/platform/frameworks/base/+/55fc00a0788ea0995fe0851616b9ac21710a2931 - https://source.android.com/security/bulletin/2024-02-01
CVE ID: CVE-2023-40123 State: PUBLISHED Published: 2023-10-27T20:22:56.908Z Last Updated: 2024-09-09T14:48:21.937Z Vendors: Google Products: Android Problem Types: Information disclosure Description: In updateActionViews of PipMenuView.java, there is a possible bypass of a multi user security boundary due to a confused deputy. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://android.googlesource.com/platform/frameworks/base/+/7212a4bec2d2f1a74fa54a12a04255d6a183baa9 - https://source.android.com/securi
googlesource.com/platform/frameworks/base/+/7212a4bec2d2f1a74fa54a12a04255d6a183baa9 - https://source.android.com/security/bulletin/2023-10-01
CVE ID: CVE-2023-40124 State: PUBLISHED Published: 2024-02-15T22:31:16.353Z Last Updated: 2024-11-04T16:17:33.093Z Vendors: Google Products: Android Problem Types: Information disclosure Description: In multiple locations, there is a possible cross-user read due to a confused deputy. This could lead to local information disclosure of photos or other images with no additional execution privileges needed. User interaction is not needed for exploitation. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://android.googlesource.com/platform/frameworks/base/+/86c8421c1181816b6cb333eb62a78e32290c4b17 - https://source.android.com/security/bulletin/2023-1
latform/frameworks/base/+/86c8421c1181816b6cb333eb62a78e32290c4b17 - https://source.android.com/security/bulletin/2023-11-01
CVE ID: CVE-2023-40125 State: PUBLISHED Published: 2023-10-27T20:22:57.089Z Last Updated: 2025-05-05T14:59:00.509Z Vendors: Google Products: Android Problem Types: Elevation of privilege Description: In onCreate of ApnEditor.java, there is a possible way for a Guest user to change the APN due to a permission bypass. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://android.googlesource.com/platform/packages/apps/Settings/+/63d464c3fa5c7b9900448fef3844790756e557eb - https://source.android.com/security/
ce.com/platform/packages/apps/Settings/+/63d464c3fa5c7b9900448fef3844790756e557eb - https://source.android.com/security/bulletin/2023-10-01
CVE ID: CVE-2023-40127 State: PUBLISHED Published: 2023-10-27T20:22:57.293Z Last Updated: 2024-09-09T14:45:48.814Z Vendors: Google Products: Android Problem Types: Information disclosure Description: In multiple locations, there is a possible way to access screenshots due to a confused deputy. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://android.googlesource.com/platform/packages/providers/MediaProvider/+/747431250612507e8289ae8eb1a56303e79ab678 - https://source.android.com/security/bulletin/2023-
/providers/MediaProvider/+/747431250612507e8289ae8eb1a56303e79ab678 - https://source.android.com/security/bulletin/2023-10-01
CVE ID: CVE-2023-40128 State: PUBLISHED Published: 2023-10-27T20:22:57.517Z Last Updated: 2024-09-09T14:44:35.111Z Vendors: Google Products: Android Problem Types: Elevation of privilege Description: In several functions of xmlregexp.c, there is a possible out of bounds write due to a heap buffer overflow. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://android.googlesource.com/platform/external/libxml2/+/1ccf89b87a3969edd56956e2d447f896037c8be7 - https://source.android.com/security/bulletin/2023-10
tform/external/libxml2/+/1ccf89b87a3969edd56956e2d447f896037c8be7 - https://source.android.com/security/bulletin/2023-10-01
CVE ID: CVE-2023-40129 State: PUBLISHED Published: 2023-10-27T20:22:57.693Z Last Updated: 2024-09-09T14:41:13.584Z Vendors: Google Products: Android Problem Types: Remote code execution Description: In build_read_multi_rsp of gatt_sr.cc, there is a possible out of bounds write due to a heap buffer overflow. This could lead to remote (proximal/adjacent) code execution with no additional execution privileges needed. User interaction is not needed for exploitation. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://android.googlesource.com/platform/packages/modules/Bluetooth/+/c0151aa3ba76c785b32c7f9d16c98febe53017b1 - https://source.android.com/se
ource.com/platform/packages/modules/Bluetooth/+/c0151aa3ba76c785b32c7f9d16c98febe53017b1 - https://source.android.com/security/bulletin/2023-10-01
CVE ID: CVE-2023-40130 State: PUBLISHED Published: 2023-10-27T20:22:57.878Z Last Updated: 2024-09-09T19:46:05.580Z Vendors: Google Products: Android Problem Types: Elevation of privilege Description: In onBindingDied of CallRedirectionProcessor.java, there is a possible permission bypass due to a logic error in the code. This could lead to local escalation of privilege and background activity launch with no additional execution privileges needed. User interaction is not needed for exploitation. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://android.googlesource.com/platform/packages/services/Telecomm/+/5b335401d1c8de7d1c85f4a0cf353f7f9fc3021
rences: - https://android.googlesource.com/platform/packages/services/Telecomm/+/5b335401d1c8de7d1c85f4a0cf353f7f9fc30218 - https://source.android.com/security/bulletin/2023-10-01
CVE ID: CVE-2023-40131 State: PUBLISHED Published: 2023-10-27T20:22:58.077Z Last Updated: 2025-04-30T20:17:44.180Z Vendors: Google Products: Android Problem Types: Elevation of privilege Description: In GpuService of GpuService.cpp, there is a possible use after free due to a race condition. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://android.googlesource.com/platform/frameworks/native/+/0cda11569dd256ff3220b4fe44f861f8081d7116 - https://source.android.com/security/bulletin/2023-10-01
CVE ID: CVE-2023-40132 State: PUBLISHED Published: 2025-01-21T23:04:42.269Z Last Updated: 2025-03-24T16:18:57.207Z Vendors: Google Products: Android Problem Types: Elevation of privilege Description: In setActualDefaultRingtoneUri of RingtoneManager.java, there is a possible way to bypass content providers read permissions due to a missing permission check. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is needed for exploitation. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://source.android.com/security/bulletin/2025-01-01
CVE ID: CVE-2023-40133 State: PUBLISHED Published: 2023-10-27T20:22:58.290Z Last Updated: 2024-09-09T19:42:17.245Z Vendors: Google Products: Android Problem Types: Information disclosure Description: In multiple locations of DialogFillUi.java, there is a possible way to view another user's images due to a confused deputy. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://android.googlesource.com/platform/frameworks/base/+/08becc8c600f14c5529115cc1a1e0c97cd503f33 - https://source.android.com/security/bu
esource.com/platform/frameworks/base/+/08becc8c600f14c5529115cc1a1e0c97cd503f33 - https://source.android.com/security/bulletin/2023-10-01
CVE ID: CVE-2023-40134 State: PUBLISHED Published: 2023-10-27T20:22:58.463Z Last Updated: 2024-09-09T19:41:38.400Z Vendors: Google Products: Android Problem Types: Information disclosure Description: In isFullScreen of FillUi.java, there is a possible way to view another user's images due to a confused deputy. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://android.googlesource.com/platform/frameworks/base/+/08becc8c600f14c5529115cc1a1e0c97cd503f33 - https://source.android.com/security/bulletin/2023-
platform/frameworks/base/+/08becc8c600f14c5529115cc1a1e0c97cd503f33 - https://source.android.com/security/bulletin/2023-10-01
CVE ID: CVE-2023-40135 State: PUBLISHED Published: 2023-10-27T20:22:58.641Z Last Updated: 2024-09-09T19:41:08.331Z Vendors: Google Products: Android Problem Types: Information disclosure Description: In applyCustomDescription of SaveUi.java, there is a possible way to view another user's images due to a confused deputy. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://android.googlesource.com/platform/frameworks/base/+/08becc8c600f14c5529115cc1a1e0c97cd503f33 - https://source.android.com/security/bull
ource.com/platform/frameworks/base/+/08becc8c600f14c5529115cc1a1e0c97cd503f33 - https://source.android.com/security/bulletin/2023-10-01