Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2018-9381 State: PUBLISHED Published: 2024-12-02T19:56:28.890Z Last Updated: 2024-12-02T21:23:58.597Z Vendors: Google Products: Android Description: In gatts_process_read_by_type_req of gatt_sr.c, there is a possible information disclosure due to uninitialized data. This could lead to remote information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://source.android.com/docs/security/bulletin/pixel/2018-06-01
CVE ID: CVE-2018-9382 State: PUBLISHED Published: 2025-01-17T23:10:28.749Z Last Updated: 2025-03-13T14:18:55.703Z Vendors: Google Products: Android Description: In multiple functions of WifiServiceImpl.java, there is a possible way to activate Wi-Fi hotspot from a non-owner profile due to a missing permission check. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://source.android.com/security/bulletin/pixel/2018-06-01
CVE ID: CVE-2018-9383 State: PUBLISHED Published: 2025-01-17T23:03:54.771Z Last Updated: 2025-03-18T14:23:12.487Z Vendors: Google Products: Android Description: In asn1_ber_decoder of asn1_decoder.c, there is a possible out of bounds read due to a missing bounds check. This could lead to local information disclosure with System execution privileges needed. User interaction is not needed for exploitation. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://source.android.com/security/bulletin/pixel/2018-06-01
CVE ID: CVE-2018-9384 State: PUBLISHED Published: 2025-01-17T23:04:49.336Z Last Updated: 2025-03-15T15:09:47.458Z Vendors: Google Products: Android Description: In multiple locations, there is a possible way to bypass KASLR due to an unusual root cause. This could lead to local information disclosure with System execution privileges needed. User interaction is not needed for exploitation. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://source.android.com/security/bulletin/pixel/2018-06-01
CVE ID: CVE-2018-9385 State: PUBLISHED Published: 2018-11-06T17:00:00Z Last Updated: 2024-09-17T04:20:44.846Z Vendors: Google Inc. Products: Android Problem Types: Elevation of privilege Description: In driver_override_store of bus.c, there is a possible out of bounds write due to an incorrect bounds check. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Product: Android Versions: Android kernel Android ID: A-74128061 References: Upstream kernel. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/105887 - https://source.android.com/security/bulletin/pixel/
m Container: References: - http://www.securityfocus.com/bid/105887 - https://source.android.com/security/bulletin/pixel/2018-06-01
CVE ID: CVE-2018-9386 State: PUBLISHED Published: 2024-12-05T22:20:40.144Z Last Updated: 2024-12-06T16:39:39.034Z Vendors: Google Products: Android Description: In reboot_block_command of htc reboot_block driver, there is a possible stack buffer overflow due to a missing bounds check. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://source.android.com/security/bulletin/pixel/2018-06-01
CVE ID: CVE-2018-9387 State: PUBLISHED Published: 2025-01-17T23:14:44.749Z Last Updated: 2025-03-14T15:21:42.277Z Vendors: Google Products: Android Description: In multiple functions of mnh-sm.c, there is a possible way to trigger a heap overflow due to an integer overflow. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://source.android.com/security/bulletin/pixel/2018-06-01
CVE ID: CVE-2018-9388 State: PUBLISHED Published: 2024-12-05T22:22:17.968Z Last Updated: 2024-12-06T16:36:43.909Z Vendors: Google Products: Android Description: In store_upgrade and store_cmd of drivers/input/touchscreen/stm/ftm4_pdc.c, there are out of bound writes due to missing bounds checks or integer underflows. These could lead to escalation of privilege. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://source.android.com/security/bulletin/pixel/2018-06-01
CVE ID: CVE-2018-9389 State: PUBLISHED Published: 2025-01-17T23:15:26.974Z Last Updated: 2025-02-03T13:45:49.801Z Vendors: Google Products: Android Description: In ip6_append_data of ip6_output.c, there is a possible way to achieve code execution due to a heap buffer overflow. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://source.android.com/security/bulletin/pixel/2018-06-01
CVE ID: CVE-2018-9390 State: PUBLISHED Published: 2024-12-05T22:23:33.742Z Last Updated: 2024-12-06T16:34:19.189Z Vendors: Google Products: Android Description: In procfile_write of gl_proc.c, there is a possible out of bounds read of a function pointer due to an incorrect bounds check. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://source.android.com/security/bulletin/pixel/2018-06-01
CVE ID: CVE-2018-9391 State: PUBLISHED Published: 2024-12-05T22:25:10.215Z Last Updated: 2024-12-06T16:29:50.053Z Vendors: Google Products: Android Description: In update_gps_sv and output_vzw_debug of vendor/mediatek/proprietary/hardware/connectivity/gps/gps_hal/src/gpshal_wor ker.c, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://source.android.com/security/bulletin/pixel/2018-06-01
CVE ID: CVE-2018-9392 State: PUBLISHED Published: 2024-12-04T17:15:26.490Z Last Updated: 2024-12-05T18:53:34.277Z Vendors: Google Products: Android Description: In get_binary of vendor/mediatek/proprietary/hardware/connectivity/gps/gps_hal/src/data_coder.c, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://source.android.com/security/bulletin/pixel/2018-06-01
CVE ID: CVE-2018-9393 State: PUBLISHED Published: 2024-12-04T17:17:25.388Z Last Updated: 2024-12-05T18:51:02.979Z Vendors: Google Products: Android Description: In procfile_write of drivers/misc/mediatek/connectivity/wlan/gen2/os/linux/gl_proc.c, there is a possible OOB write due to a missing bounds check. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://source.android.com/security/bulletin/pixel/2018-06-01
CVE ID: CVE-2018-9394 State: PUBLISHED Published: 2024-12-04T17:19:10.992Z Last Updated: 2024-12-05T17:15:12.151Z Vendors: Google Products: Android Description: In mtk_p2p_wext_set_key of drivers/misc/mediatek/connectivity/wlan/gen2/os/linux/gl_p2p.c, there is a possible OOB write due to improper input validation. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://source.android.com/security/bulletin/pixel/2018-06-01
CVE ID: CVE-2018-9395 State: PUBLISHED Published: 2024-12-04T17:20:55.185Z Last Updated: 2024-12-05T17:13:11.248Z Vendors: Google Products: Android Description: In mtk_cfg80211_vendor_packet_keep_alive_start and mtk_cfg80211_vendor_set_config of drivers/misc/mediatek/connectivity/wlan/gen2/os/linux/gl_vendor.c, there is a possible OOB write due to a missing bounds check. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://source.android.com/security/bulletin/pixel/2018-06-01
CVE ID: CVE-2018-9396 State: PUBLISHED Published: 2024-12-04T21:59:02.879Z Last Updated: 2024-12-05T17:08:24.572Z Vendors: Google Products: Android Description: In rpc_msg_handler and related handlers of drivers/misc/mediatek/eccci/port_rpc.c, there is a possible out of bounds write due to an incorrect bounds check. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://source.android.com/security/bulletin/pixel/2018-06-01
CVE ID: CVE-2018-9397 State: PUBLISHED Published: 2024-12-04T23:10:14.272Z Last Updated: 2024-12-05T16:52:04.806Z Vendors: Google Products: Android Description: In WMT_unlocked_ioctl of MTK WMT device driver, there is a possible OOB write due to a missing bounds check. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://source.android.com/security/bulletin/pixel/2018-06-01
CVE ID: CVE-2018-9398 State: PUBLISHED Published: 2024-12-04T23:11:48.916Z Last Updated: 2024-12-05T16:43:06.134Z Vendors: Google Products: Android Description: In fm_set_stat of mediatek FM radio driver, there is a possible OOB write due to improper input validation. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://source.android.com/security/bulletin/pixel/2018-06-01
CVE ID: CVE-2018-9399 State: PUBLISHED Published: 2024-12-04T23:13:11.225Z Last Updated: 2024-12-05T16:32:36.314Z Vendors: Google Products: Android Description: In /proc/driver/wmt_dbg driver, there are several possible out of bounds writes. These could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://source.android.com/security/bulletin/pixel/2018-06-01
CVE ID: CVE-2018-9400 State: PUBLISHED Published: 2024-12-04T23:14:32.596Z Last Updated: 2024-12-05T16:29:20.701Z Vendors: Google Products: Android Description: In gt1x_debug_write_proc and gt1x_tool_write of drivers/input/touchscreen/mediatek/GT1151/gt1x_generic.c and gt1x_tools.c, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://source.android.com/security/bulletin/pixel/2018-06-01
CVE ID: CVE-2018-9401 State: PUBLISHED Published: 2025-01-17T23:17:04.245Z Last Updated: 2025-03-24T16:14:47.452Z Vendors: Google Products: Android Description: In many locations, there is a possible way to access kernel memory in user space due to an incorrect bounds check. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://source.android.com/security/bulletin/pixel/2018-06-01
CVE ID: CVE-2018-9402 State: PUBLISHED Published: 2024-12-04T23:27:42.808Z Last Updated: 2024-12-05T16:21:56.367Z Vendors: Google Products: Android Description: In multiple functions of gl_proc.c, there is a buffer overwrite due to a missing bounds check. This could lead to escalation of privileges in the kernel. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://source.android.com/security/bulletin/pixel/2018-06-01
CVE ID: CVE-2018-9403 State: PUBLISHED Published: 2024-12-04T23:29:24.147Z Last Updated: 2024-12-05T16:19:12.212Z Vendors: Google Products: Android Description: In the MTK_FLP_MSG_HAL_DIAG_REPORT_DATA_NTF handler of flp2hal_- interface.c, there is a possible stack buffer overflow due to a missing bounds check. This could lead to local escalation of privilege in a privileged process with System execution privileges needed. User interaction is not needed for exploitation. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://source.android.com/security/bulletin/pixel/2018-06-01
CVE ID: CVE-2018-9404 State: PUBLISHED Published: 2024-12-04T23:32:00.249Z Last Updated: 2024-12-05T16:01:26.044Z Vendors: Google Products: Android Description: In oemCallback of ril.cpp, there is a possible out of bounds write due to an integer overflow. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://source.android.com/security/bulletin/pixel/2018-06-01
CVE ID: CVE-2018-9405 State: PUBLISHED Published: 2025-01-17T23:17:44.361Z Last Updated: 2025-03-14T16:56:48.152Z Vendors: Google Products: Android Description: In BnDmAgent::onTransact of dm_agent.cpp, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://source.android.com/security/bulletin/pixel/2018-06-01
CVE ID: CVE-2018-9406 State: PUBLISHED Published: 2025-01-17T23:16:13.761Z Last Updated: 2025-01-31T20:33:40.878Z Vendors: Google Products: Android Description: In NlpService, there is a possible way to obtain location information due to a missing permission check. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://source.android.com/security/bulletin/pixel/2018-06-01
CVE ID: CVE-2018-9407 State: PUBLISHED Published: 2024-12-04T23:33:27.727Z Last Updated: 2024-12-05T15:53:59.576Z Vendors: Google Products: Android Description: In emmc_rpmb_ioctl of emmc_rpmb.c, there is an Information Disclosure due to a Missing Bounds Check. This could lead to Information Disclosure of kernel data. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://source.android.com/security/bulletin/pixel/2018-06-01
CVE ID: CVE-2018-9408 State: PUBLISHED Published: 2024-12-04T23:34:59.397Z Last Updated: 2024-12-05T15:52:07.414Z Vendors: Google Products: Android Description: In m3326_gps_write and m3326_gps_read of gps.s, there is a possible Out Of Bounds Read due to a missing bounds check. This could lead to a local information disclosure with System execution privileges needed. User interaction is not needed for exploitation. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://source.android.com/security/bulletin/pixel/2018-06-01
CVE ID: CVE-2018-9409 State: PUBLISHED Published: 2024-11-19T19:26:23.886Z Last Updated: 2024-11-20T19:50:55.876Z Vendors: Google Products: Android Description: In HWCSession::SetColorModeById of hwc_session.cpp, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://source.android.com/security/bulletin/2018-06-01
CVE ID: CVE-2018-9410 State: PUBLISHED Published: 2024-11-19T21:04:59.464Z Last Updated: 2024-11-21T15:07:38.597Z Vendors: Google Products: Android Description: In analyzeAxes of FontUtils.cpp, there is a possible out of bounds read due to a missing bounds check. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://source.android.com/security/bulletin/2018-07-01
CVE ID: CVE-2018-9411 State: PUBLISHED Published: 2024-11-19T21:06:22.949Z Last Updated: 2024-11-20T15:55:45.282Z Vendors: Google Products: Android Description: In decrypt of ClearKeyCasPlugin.cpp there is a possible out-of-bounds write due to a missing bounds check. This could lead to remote arbitrary code execution with no additional execution privileges needed. User interaction is needed for exploitation. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://source.android.com/security/bulletin/2018-07-01
CVE ID: CVE-2018-9412 State: PUBLISHED Published: 2024-11-19T21:08:26.491Z Last Updated: 2025-03-19T17:15:42.796Z Vendors: Google Products: Android Description: In removeUnsynchronization of ID3.cpp there is a possible resource exhaustion due to improper input validation. This could lead to denial of service with no additional execution privileges needed. User interaction is needed for exploitation. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://source.android.com/security/bulletin/2018-07-01
CVE ID: CVE-2018-9413 State: PUBLISHED Published: 2024-12-02T21:03:50.218Z Last Updated: 2024-12-03T18:37:45.447Z Vendors: Google Products: Android Description: In handle_notification_response of btif_rc.cc, there is a possible out of bounds write due to a missing bounds check. This could lead to remote code execution with no additional execution privileges needed. User interaction is needed for exploitation. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://source.android.com/docs/security/bulletin/pixel/2018-07-01
CVE ID: CVE-2018-9414 State: PUBLISHED Published: 2024-12-02T21:09:16.394Z Last Updated: 2024-12-03T17:26:05.941Z Vendors: Google Products: Android Description: In gattServerSendResponseNative of com_android_bluetooth_gatt.cpp, there is a possible out of bounds stack write due to a missing bounds check. This could lead to local escalation of privilege with User execution privileges needed. User interaction is not needed for exploitation. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://source.android.com/docs/security/bulletin/pixel/2018-07-01
CVE ID: CVE-2018-9415 State: PUBLISHED Published: 2018-11-06T17:00:00Z Last Updated: 2024-09-16T20:42:41.131Z Vendors: Google Inc. Products: Android Problem Types: Elevation of privilege Description: In driver_override_store and driver_override_show of bus.c, there is a possible double free due to improper locking. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Product: Android Versions: Android kernel Android ID: A-69129004 References: Upstream kernel. Additional Analyst Notes: - CVE Program Container: References: - https://usn.ubuntu.com/3752-2/ - https://usn.ubuntu.com/3752-3/ - https://source.andr
E Program Container: References: - https://usn.ubuntu.com/3752-2/ - https://usn.ubuntu.com/3752-3/ - https://source.android.com/security/bulletin/pixel/2018-07-01 - https://usn.ubuntu.com/3752-1/
CVE ID: CVE-2018-9416 State: PUBLISHED Published: 2024-12-04T23:36:19.267Z Last Updated: 2024-12-05T15:41:46.739Z Vendors: Google Products: Android Description: In sg_remove_scat of scsi/sg.c, there is a possible memory corruption due to an unusual root cause. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://source.android.com/security/bulletin/pixel/2018-07-01
CVE ID: CVE-2018-9417 State: PUBLISHED Published: 2024-11-19T21:10:08.251Z Last Updated: 2024-11-20T15:47:29.444Z Vendors: Google Products: Android Description: In f_hidg_read and hidg_disable of f_hid.c, there is a possible use-after-free due to improper locking. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://source.android.com/security/bulletin/2018-07-01
CVE ID: CVE-2018-9418 State: PUBLISHED Published: 2024-12-02T21:23:20.707Z Last Updated: 2024-12-03T15:12:16.153Z Vendors: Google Products: Android Description: In handle_app_cur_val_response of dtif_rc.cc, there is a possible stack buffer overflow due to a missing bounds check. This could lead to remote code execution with no additional execution privileges needed. User interaction is not needed for exploitation. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://source.android.com/docs/security/bulletin/pixel/2018-07-01
CVE ID: CVE-2018-9419 State: PUBLISHED Published: 2024-11-19T21:11:45.990Z Last Updated: 2024-11-20T15:40:28.265Z Vendors: Google Products: Android Description: In l2cble_process_sig_cmd of l2c_ble.cc, there is a possible out of bounds read due to a missing bounds check. This could lead to remote information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://source.android.com/security/bulletin/2018-07-01
CVE ID: CVE-2018-9420 State: PUBLISHED Published: 2024-11-19T21:20:13.958Z Last Updated: 2024-11-20T15:36:13.387Z Vendors: Google Products: Android Description: In BnCameraService::onTransact of CameraService.cpp, there is a possible information disclosure due to uninitialized data. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://source.android.com/security/bulletin/2018-07-01
CVE ID: CVE-2018-9421 State: PUBLISHED Published: 2024-11-19T21:22:12.436Z Last Updated: 2024-11-20T15:34:27.270Z Vendors: Google Products: Android Description: In writeInplace of Parcel.cpp, there is a possible information leak across processes, using Binder, due to uninitialized data. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://source.android.com/security/bulletin/2018-07-01
CVE ID: CVE-2018-9422 State: PUBLISHED Published: 2018-11-06T17:00:00Z Last Updated: 2024-09-16T18:24:27.587Z Vendors: Google Inc. Products: Android Problem Types: Elevation of privilege Description: In get_futex_key of futex.c, there is a use-after-free due to improper locking. This could lead to local escalation of privilege with no additional privileges needed. User interaction is not needed for exploitation. Product: Android Versions: Android kernel Android ID: A-74250718 References: Upstream kernel. Additional Analyst Notes: - CVE Program Container: References: - https://lists.debian.org/debian-lts-announce/2018/07/msg00015.html - https://lists.debian.org/debian-lts-announce/2018/07/msg
://lists.debian.org/debian-lts-announce/2018/07/msg00015.html - https://lists.debian.org/debian-lts-announce/2018/07/msg00016.html - https://source.android.com/security/bulletin/2018-07-01 - https://bugzilla.suse.com/show_bug.cgi?id=1102001&_ga=2.244341506.661832603.1561012452-1774095668.1553066022