Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2017-13276 State: PUBLISHED Published: 2018-04-04T16:00:00Z Last Updated: 2024-09-16T23:36:40.692Z Vendors: Google Inc. Products: Android Problem Types: Remote code execution Description: In CProgramConfig_ReadHeightExt of tpdec_asc.cpp, there is a possible stack buffer overflow due to a missing bounds check. This could lead to a remote code execution with no additional execution privileges needed. User interaction is needed for exploitation. Product: Android. Versions: 6.0, 6.0.1, 7.0, 7.1.1, 7.1.2, 8.0, 8.1. Android ID: A-70637599. Additional Analyst Notes: - CVE Program Container: References: - https://source.android.com/security/bulletin/2018-04-01
CVE ID: CVE-2017-13277 State: PUBLISHED Published: 2018-04-04T16:00:00Z Last Updated: 2024-09-16T20:02:58.215Z Vendors: Google Inc. Products: Android Problem Types: Remote code execution Description: In ihevcd_fmt_conv of ihevcd_fmt_conv.c, there is a possible out of bounds write due to a missing bounds check. This could lead to remote code execution with no additional execution privileges needed. User interaction is needed for exploitation. Product: Android. Versions: 6.0, 6.0.1, 7.0, 7.1.1, 7.1.2, 8.0, 8.1. Android ID: A-72165027. Additional Analyst Notes: - CVE Program Container: References: - https://source.android.com/security/bulletin/2018-04-01
CVE ID: CVE-2017-13278 State: PUBLISHED Published: 2018-04-04T16:00:00Z Last Updated: 2024-09-16T16:28:24.709Z Vendors: Google Inc. Products: Android Problem Types: Elevation of privilege Description: In MediaPlayerService::Client::notify of MediaPlayerService.cpp, there is a possible use after free. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation. Product: Android. Versions: 6.0, 6.0.1, 7.0, 7.1.1, 7.1.2, 8.0, 8.1. Android ID: A-70546581. Additional Analyst Notes: - CVE Program Container: References: - https://source.android.com/security/bulletin/2018-04-01
CVE ID: CVE-2017-13279 State: PUBLISHED Published: 2018-04-04T16:00:00Z Last Updated: 2024-09-16T20:17:37.331Z Vendors: Google Inc. Products: Android Problem Types: Denial of service Description: In M3UParser::parse of M3UParser.cpp, there is a memory resource exhaustion due to a large loop of pushing items into a vector. This could lead to remote denial of service with no additional execution privileges needed. User interaction is needed for exploitation. Product: Android. Versions: 6.0, 6.0.1, 7.0, 7.1.1, 7.1.2, 8.0, 8.1. Android ID: A-68399439. Additional Analyst Notes: - CVE Program Container: References: - https://source.android.com/security/bulletin/2018-04-01
CVE ID: CVE-2017-13280 State: PUBLISHED Published: 2018-04-04T16:00:00Z Last Updated: 2024-09-17T01:11:04.748Z Vendors: Google Inc. Products: Android Problem Types: Denial of service Description: In the FrameSequence_gif::FrameSequence_gif function of libframesequence, there is a out of bounds read due to a missing bounds check. This could lead to a remote denial of service with no additional execution privileges needed. User interaction is not needed for exploitation. Product: Android. Versions: 6.0, 6.0.1, 7.0, 7.1.1, 7.1.2, 8.0, 8.1. Android ID: A-71361451. Additional Analyst Notes: - CVE Program Container: References: - https://source.android.com/security/bulletin/2018-04-01
CVE ID: CVE-2017-13281 State: PUBLISHED Published: 2018-04-04T16:00:00Z Last Updated: 2024-09-16T18:54:14.872Z Vendors: Google Inc. Products: Android Problem Types: Remote code execution Description: In avrc_pars_browsing_cmd of avrc_pars_tg.cc, there is a possible stack buffer overflow due to an incorrect bounds check. This could lead to remote code execution with no additional execution privileges needed. User interaction is not needed for exploitation. Product: Android. Versions: 8.0, 8.1. Android ID: A-71603262. Additional Analyst Notes: - CVE Program Container: References: - https://source.android.com/security/bulletin/2018-04-01
CVE ID: CVE-2017-13282 State: PUBLISHED Published: 2018-04-04T16:00:00Z Last Updated: 2024-09-17T03:34:19.991Z Vendors: Google Inc. Products: Android Problem Types: Remote code execution Description: In avrc_ctrl_pars_vendor_rsp of avrc_pars_ct.cc, there is a possible stack buffer overflow due to a missing bounds check. This could lead to remote code execution with no additional execution privileges needed. User interaction is not needed for exploitation. Product: Android. Versions: 7.0, 7.1.1, 7.1.2, 8.0, 8.1. Android ID: A-71603315. Additional Analyst Notes: - CVE Program Container: References: - https://source.android.com/security/bulletin/2018-04-01
CVE ID: CVE-2017-13283 State: PUBLISHED Published: 2018-04-04T16:00:00Z Last Updated: 2024-09-16T19:24:51.589Z Vendors: Google Inc. Products: Android Problem Types: Remote code execution Description: In avrc_ctrl_pars_vendor_rsp of bluetooth avrcp_ctrl, there is a possible out of bounds write on the stack due to a missing bounds check. This could lead to remote code execution with no additional execution privileges needed. User interaction is not needed for exploitation. Product: Android. Versions: 7.0, 7.1.1, 7.1.2, 8.0, 8.1. Android ID: A-71603410. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/105482 - https://source.android.com/security/
s: - CVE Program Container: References: - http://www.securityfocus.com/bid/105482 - https://source.android.com/security/bulletin/2018-04-01
CVE ID: CVE-2017-13284 State: PUBLISHED Published: 2018-04-04T16:00:00Z Last Updated: 2024-09-16T17:58:41.881Z Vendors: Google Inc. Products: Android Problem Types: Elevation of privilege Description: In config_set_string of config.cc, it is possible to pair a second BT keyboard without user approval due to improper input validation. This could lead to remote escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation. Product: Android. Versions: 6.0, 6.0.1, 7.0, 7.1.1, 7.1.2, 8.0, 8.1. Android ID: A-70808273. Additional Analyst Notes: - CVE Program Container: References: - https://source.android.com/security/bulletin/2018-04-01
CVE ID: CVE-2017-13285 State: PUBLISHED Published: 2018-04-04T16:00:00Z Last Updated: 2024-09-16T20:37:05.260Z Vendors: Google Inc. Products: Android Problem Types: Remote code execution Description: In SvoxSsmlParser and startElement of svox_ssml_parser.cpp, there is a possible out of bounds write due to an uninitialized buffer. This could lead to remote code execution in an unprivileged process with no additional execution privileges needed. User interaction is not needed for exploitation. Product: Android. Versions: 6.0, 6.0.1, 7.0, 7.1.1, 7.1.2, 8.0, 8.1. Android ID: A-69177126. Additional Analyst Notes: - CVE Program Container: References: - https://source.android.com/security/bulletin/
69177126. Additional Analyst Notes: - CVE Program Container: References: - https://source.android.com/security/bulletin/2018-04-01
CVE ID: CVE-2017-13286 State: PUBLISHED Published: 2018-04-04T16:00:00Z Last Updated: 2024-09-16T21:07:27.066Z Vendors: Google Inc. Products: Android Problem Types: Elevation of privilege Description: In writeToParcel and readFromParcel of OutputConfiguration.java, there is a permission bypass due to mismatched serialization. This could lead to a local escalation of privilege where the user can start an activity with system privileges, with no additional execution privileges needed. User interaction is not needed for exploitation. Product: Android. Versions: 8.0, 8.1. Android ID: A-69683251. Additional Analyst Notes: - CVE Program Container: References: - https://source.android.com/security/
id ID: A-69683251. Additional Analyst Notes: - CVE Program Container: References: - https://source.android.com/security/bulletin/2018-04-01
CVE ID: CVE-2017-13287 State: PUBLISHED Published: 2018-04-04T16:00:00Z Last Updated: 2024-09-16T21:57:05.450Z Vendors: Google Inc. Products: Android Problem Types: Elevation of privilege Description: In createFromParcel of VerifyCredentialResponse.java, there is a possible invalid parcel read due to improper input validation. This could lead to local escalation of privilege if mPayload in writeToParcel were null, with no additional execution privileges needed. User interaction is not needed for exploitation. Product: Android. Versions: 6.0.1, 7.0, 7.1.1, 7.1.2, 8.0, 8.1. Android ID: A-71714464. Additional Analyst Notes: - CVE Program Container: References: - https://source.android.com/secur
ndroid ID: A-71714464. Additional Analyst Notes: - CVE Program Container: References: - https://source.android.com/security/bulletin/2018-04-01
CVE ID: CVE-2017-13288 State: PUBLISHED Published: 2018-04-04T16:00:00Z Last Updated: 2024-09-16T16:59:05.258Z Vendors: Google Inc. Products: Android Problem Types: Elevation of privilege Description: In writeToParcel and readFromParcel of PeriodicAdvertisingReport.java, there is a permission bypass due to a 64/32bit int mismatch. This could lead to a local escalation of privilege where the user can start an activity with system privileges, with no additional execution privileges needed. User interaction is not needed for exploitation. Product: Android. Versions: 8.0, 8.1. Android ID: A-69634768. Additional Analyst Notes: - CVE Program Container: References: - https://source.android.com/secu
Android ID: A-69634768. Additional Analyst Notes: - CVE Program Container: References: - https://source.android.com/security/bulletin/2018-04-01
CVE ID: CVE-2017-13289 State: PUBLISHED Published: 2018-04-04T16:00:00Z Last Updated: 2024-09-16T22:45:22.814Z Vendors: Google Inc. Products: Android Problem Types: Elevation of privilege Description: In writeToParcel and createFromParcel of RttManager.java, there is a permission bypass due to a write size mismatch. This could lead to a local escalation of privileges where the user can start an activity with system privileges, with no additional execution privileges needed. User interaction is not needed for exploitation. Product: Android. Versions: 6.0, 6.0.1, 7.0, 7.1.1, 7.1.2, 8.0, 8.1. Android ID: A-70398564. Additional Analyst Notes: - CVE Program Container: References: - https://source
7.1.2, 8.0, 8.1. Android ID: A-70398564. Additional Analyst Notes: - CVE Program Container: References: - https://source.android.com/security/bulletin/2018-04-01
CVE ID: CVE-2017-13290 State: PUBLISHED Published: 2018-04-04T16:00:00Z Last Updated: 2024-09-16T22:01:56.494Z Vendors: Google Inc. Products: Android Problem Types: Information disclosure Description: In sdp_server_handle_client_req of sdp_server.cc, there is an out of bounds read due to a missing bounds check. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation. Product: Android. Versions: 6.0, 6.0.1, 7.0, 7.1.1, 7.1.2, 8.0, 8.1. Android ID: A-69384124. Additional Analyst Notes: - CVE Program Container: References: - https://source.android.com/security/bulletin/2018-04-01
CVE ID: CVE-2017-13291 State: PUBLISHED Published: 2018-04-04T16:00:00Z Last Updated: 2024-09-17T00:02:21.834Z Vendors: Google Inc. Products: Android Problem Types: Denial of service Description: In avrc_ctrl_pars_vendor_rsp of avrc_pars_ct.cc, there is a possible NULL pointer dereference due to missing bounds checks. This could lead to remote denial of service with no additional execution privileges needed. User interaction is not needed for exploitation. Product: Android. Versions: 7.0, 7.1.1, 7.1.2, 8.0, 8.1. Android ID: A-71603553. Additional Analyst Notes: - CVE Program Container: References: - https://source.android.com/security/bulletin/2018-04-01
CVE ID: CVE-2017-13292 State: PUBLISHED Published: 2018-04-04T16:00:00Z Last Updated: 2024-09-17T02:07:06.004Z Vendors: Google Inc. Products: Android Problem Types: Remote code execution Description: In wl_get_assoc_ies of wl_cfg80211.c, there is a possible out of bounds write due to an incorrect bounds check. This could lead to remote code execution with no additional execution privileges needed. User interaction is not needed for exploitation. Product: Android. Versions: Android kernel. Android ID: A-70722061. References: B-V2018010201. Additional Analyst Notes: - CVE Program Container: References: - https://source.android.com/security/bulletin/2018-04-01
CVE ID: CVE-2017-13293 State: PUBLISHED Published: 2018-04-04T16:00:00Z Last Updated: 2024-09-17T01:16:19.682Z Vendors: Google Inc. Products: Android Problem Types: Elevation of privilege Description: In the nfc_hci_cmd_received() function of core.c, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege in the kernel with no additional execution privileges needed. User interaction is not needed for exploitation. Product: Android. Versions: Android kernel. Android ID: A-62679701. Additional Analyst Notes: - CVE Program Container: References: - https://source.android.com/security/bulletin/2018-04-01
CVE ID: CVE-2017-13294 State: PUBLISHED Published: 2018-04-04T16:00:00Z Last Updated: 2024-09-16T20:36:42.086Z Vendors: Google Inc. Products: Android Problem Types: Information disclosure Description: A information disclosure vulnerability in the Android framework (aosp email application). Product: Android. Versions: 6.0, 6.0.1, 7.0, 7.1.1, 7.1.2, 8.0, 8.1. Android ID: A-71814449. Additional Analyst Notes: - CVE Program Container: References: - https://source.android.com/security/bulletin/pixel/2018-04-01
CVE ID: CVE-2017-13295 State: PUBLISHED Published: 2018-04-04T16:00:00Z Last Updated: 2024-09-17T01:36:09.072Z Vendors: Google Inc. Products: Android Problem Types: Denial of service Description: A denial of service vulnerability in the Android framework (package installer). Product: Android. Versions: 6.0, 6.0.1, 7.0, 7.1.1, 7.1.2, 8.0, 8.1. Android ID: A-62537081. Additional Analyst Notes: - CVE Program Container: References: - https://source.android.com/security/bulletin/pixel/2018-04-01
CVE ID: CVE-2017-13296 State: PUBLISHED Published: 2018-04-04T16:00:00Z Last Updated: 2024-09-16T18:19:42.444Z Vendors: Google Inc. Products: Android Problem Types: Information disclosure Description: A information disclosure vulnerability in the Android media framework (libavc). Product: Android. Versions: 6.0, 6.0.1, 7.0, 7.1.1, 7.1.2, 8.0, 8.1. Android ID: A-70897454. Additional Analyst Notes: - CVE Program Container: References: - https://source.android.com/security/bulletin/pixel/2018-04-01
CVE ID: CVE-2017-13297 State: PUBLISHED Published: 2018-04-04T16:00:00Z Last Updated: 2024-09-17T03:33:58.902Z Vendors: Google Inc. Products: Android Problem Types: Information disclosure Description: A information disclosure vulnerability in the Android media framework (libhevc). Product: Android. Versions: 6.0, 6.0.1, 7.0, 7.1.1, 7.1.2, 8.0, 8.1. Android ID: A-71766721. Additional Analyst Notes: - CVE Program Container: References: - https://source.android.com/security/bulletin/pixel/2018-04-01
CVE ID: CVE-2017-13298 State: PUBLISHED Published: 2018-04-04T16:00:00Z Last Updated: 2024-09-16T22:03:09.265Z Vendors: Google Inc. Products: Android Problem Types: Information disclosure Description: A information disclosure vulnerability in the Android media framework (libhavc). Product: Android. Versions: 6.0, 6.0.1, 7.0, 7.1.1, 7.1.2, 8.0, 8.1. Android ID: A-72117051. Additional Analyst Notes: - CVE Program Container: References: - https://source.android.com/security/bulletin/pixel/2018-04-01
CVE ID: CVE-2017-13299 State: PUBLISHED Published: 2018-04-04T16:00:00Z Last Updated: 2024-09-16T22:56:03.284Z Vendors: Google Inc. Products: Android Problem Types: Denial of service Description: A other vulnerability in the Android media framework (libavc). Product: Android. Versions: 6.0, 6.0.1, 7.0, 7.1.1, 7.1.2, 8.0, 8.1. Android ID: A-70897394. Additional Analyst Notes: - CVE Program Container: References: - https://source.android.com/security/bulletin/pixel/2018-04-01
CVE ID: CVE-2017-13300 State: PUBLISHED Published: 2018-04-04T16:00:00Z Last Updated: 2024-09-16T22:14:38.411Z Vendors: Google Inc. Products: Android Problem Types: Denial of service Description: A denial of service vulnerability in the Android media framework (libhevc). Product: Android. Versions: 6.0, 6.0.1. Android ID: A-71567394. Additional Analyst Notes: - CVE Program Container: References: - https://source.android.com/security/bulletin/pixel/2018-04-01
CVE ID: CVE-2017-13301 State: PUBLISHED Published: 2018-04-04T16:00:00Z Last Updated: 2024-09-17T02:06:42.157Z Vendors: Google Inc. Products: Android Problem Types: Denial of service Description: A denial of service vulnerability in the Android system (system ui). Product: Android. Versions: 8.0. Android ID: A-66498711. Additional Analyst Notes: - CVE Program Container: References: - https://source.android.com/security/bulletin/pixel/2018-04-01
CVE ID: CVE-2017-13302 State: PUBLISHED Published: 2018-04-04T16:00:00Z Last Updated: 2024-09-17T03:47:42.061Z Vendors: Google Inc. Products: Android Problem Types: Denial of service Description: A denial of service vulnerability in the Android system (system ui). Product: Android. Versions: 8.0. Android ID: A-69969749. Additional Analyst Notes: - CVE Program Container: References: - https://source.android.com/security/bulletin/pixel/2018-04-01
CVE ID: CVE-2017-13303 State: PUBLISHED Published: 2018-04-04T16:00:00Z Last Updated: 2024-09-17T04:09:54.923Z Vendors: Google Inc. Products: Android Problem Types: Information disclosure Description: A information disclosure vulnerability in the Broadcom bcmdhd driver. Product: Android. Versions: Android kernel. Android ID: A-71359108. References: B-V2018010501. Additional Analyst Notes: - CVE Program Container: References: - https://source.android.com/security/bulletin/pixel/2018-04-01
CVE ID: CVE-2017-13304 State: PUBLISHED Published: 2018-04-04T16:00:00Z Last Updated: 2024-09-17T03:18:07.595Z Vendors: Google Inc. Products: Android Problem Types: Information disclosure Description: A information disclosure vulnerability in the Upstream kernel mnh_sm driver. Product: Android. Versions: Android kernel. Android ID: A-70576999. Additional Analyst Notes: - CVE Program Container: References: - https://source.android.com/security/bulletin/pixel/2018-04-01
CVE ID: CVE-2017-13305 State: PUBLISHED Published: 2018-04-04T16:00:00Z Last Updated: 2024-09-16T18:13:39.183Z Vendors: Google Inc. Products: Android Problem Types: Information disclosure Description: A information disclosure vulnerability in the Upstream kernel encrypted-keys. Product: Android. Versions: Android kernel. Android ID: A-70526974. Additional Analyst Notes: - CVE Program Container: References: - https://usn.ubuntu.com/3631-2/ - https://usn.ubuntu.com/3631-1/ - https://source.android.com/security/bulletin/pixel/2018-04-01 - https://access.redhat.com/errata/RHSA-2018:2165 - https://usn.ubuntu.com/3655-1/ - https://usn.ubuntu.com/3655-2/ - https://lists.debian.org/debian-lts-announ
2018:2165 - https://usn.ubuntu.com/3655-1/ - https://usn.ubuntu.com/3655-2/ - https://lists.debian.org/debian-lts-announce/2019/03/msg00034.html - https://lists.debian.org/debian-lts-announce/2019/04/msg00004.html
CVE ID: CVE-2017-13306 State: PUBLISHED Published: 2018-04-04T16:00:00Z Last Updated: 2024-09-17T00:46:38.287Z Vendors: Google Inc. Products: Android Problem Types: Elevation of privilege Description: A elevation of privilege vulnerability in the Upstream kernel mnh driver. Product: Android. Versions: Android kernel. Android ID: A-70295063. Additional Analyst Notes: - CVE Program Container: References: - https://source.android.com/security/bulletin/pixel/2018-04-01
CVE ID: CVE-2017-13307 State: PUBLISHED Published: 2018-04-04T16:00:00Z Last Updated: 2024-09-16T16:24:04.305Z Vendors: Google Inc. Products: Android Problem Types: Elevation of privilege Description: A elevation of privilege vulnerability in the Upstream kernel pci sysfs. Product: Android. Versions: Android kernel. Android ID: A-69128924. Additional Analyst Notes: - CVE Program Container: References: - https://source.android.com/security/bulletin/pixel/2018-04-01
CVE ID: CVE-2017-13308 State: PUBLISHED Published: 2024-12-05T22:05:21.894Z Last Updated: 2024-12-06T16:41:27.210Z Vendors: Google Products: Android Description: In tscpu_write_GPIO_out and mtkts_Abts_write of mtk_ts_Abts.c, there is a possible buffer overflow in an sscanf due to improper input validation. This could lead to a local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://source.android.com/security/bulletin/pixel/2018-06-01
CVE ID: CVE-2017-13309 State: PUBLISHED Published: 2024-11-15T20:52:13.398Z Last Updated: 2024-11-15T21:08:46.046Z Vendors: Google Products: Android Description: In readEncryptedData of ConscryptEngine.java, there is a possible plaintext leak due to improperly used crypto. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://source.android.com/security/bulletin/2018-05-01
CVE ID: CVE-2017-13310 State: PUBLISHED Published: 2024-11-15T21:36:53.028Z Last Updated: 2024-11-19T16:21:34.779Z Vendors: Google Products: Android Description: In createFromParcel of ViewPager.java, there is a possible read/write serialization issue leading to a permissions bypass. This could lead to local escalation of privilege where an app can start an activity with system privileges with no additional execution privileges needed. User interaction is not needed for exploitation. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://source.android.com/security/bulletin/2018-05-01
CVE ID: CVE-2017-13311 State: PUBLISHED Published: 2024-11-15T21:46:33.040Z Last Updated: 2024-11-19T16:13:02.674Z Vendors: Google Products: Android Description: In the read() function of ProcessStats.java, there is a possible read/write serialization issue leading to a permissions bypass. This could lead to local escalation of privilege where an app can start an activity with system privileges with no additional execution privileges needed. User interaction is not needed for exploitation. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://source.android.com/security/bulletin/2018-05-01
CVE ID: CVE-2017-13312 State: PUBLISHED Published: 2024-11-15T21:54:40.228Z Last Updated: 2024-11-19T16:07:58.726Z Vendors: Google Products: Android Description: In createFromParcel of MediaCas.java, there is a possible parcel read/write mismatch due to improper input validation. This could lead to local escalation of privilege where an app can start an activity with system privileges with no additional execution privileges needed. User interaction is not needed for exploitation. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://source.android.com/security/bulletin/2018-05-01
CVE ID: CVE-2017-13313 State: PUBLISHED Published: 2024-11-15T22:00:33.699Z Last Updated: 2024-11-19T16:01:39.585Z Vendors: Google Products: Android Description: In ElementaryStreamQueue::dequeueAccessUnitMPEG4Video of ESQueue.cpp, there is a possible infinite loop leading to resource exhaustion due to an incorrect bounds check. This could lead to remote denial of service with no additional execution privileges needed. User interaction is needed for exploitation. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://source.android.com/security/bulletin/2018-05-01