Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2021-0927 State: PUBLISHED Published: 2021-12-15T18:05:24 Last Updated: 2024-08-03T15:55:16.905Z Vendors: n/a Products: Android Problem Types: Elevation of privilege Description: In requestChannelBrowsable of TvInputManagerService.java, there is a possible permission bypass due to a logic error in the code. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-10 Android-11 Android-12 Android-8.1 Android-9Android ID: A-189824175 Additional Analyst Notes: - CVE Program Container: References: - https://source.android.com/security/bulletin/2021-11-01
CVE ID: CVE-2021-0928 State: PUBLISHED Published: 2021-12-15T18:05:23 Last Updated: 2024-08-03T15:55:17.421Z Vendors: n/a Products: Android Problem Types: Elevation of privilege Description: In createFromParcel of OutputConfiguration.java, there is a possible parcel serialization/deserialization mismatch due to improper input validation. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-10 Android-11 Android-9Android ID: A-188675581 Additional Analyst Notes: - CVE Program Container: References: - https://source.android.com/security/bulletin/2021-11-01
CVE ID: CVE-2021-0929 State: PUBLISHED Published: 2021-12-15T18:05:22 Last Updated: 2024-08-03T15:55:16.897Z Vendors: n/a Products: Android Problem Types: Elevation of privilege Description: In ion_dma_buf_end_cpu_access and related functions of ion.c, there is a possible way to corrupt memory due to a use after free. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android kernelAndroid ID: A-187527909References: Upstream kernel Additional Analyst Notes: - CVE Program Container: References: - https://source.android.com/security/bulletin/2021-11-01
CVE ID: CVE-2021-0930 State: PUBLISHED Published: 2021-12-15T18:05:22 Last Updated: 2024-08-03T15:55:16.883Z Vendors: n/a Products: Android Problem Types: Remote code execution Description: In phNxpNciHal_process_ext_rsp of phNxpNciHal_ext.cc, there is a possible out of bounds write due to a missing bounds check. This could lead to remote code execution over NFC with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-10 Android-11 Android-12 Android-9Android ID: A-181660091 Additional Analyst Notes: - CVE Program Container: References: - https://source.android.com/security/bulletin/2021-11-01
CVE ID: CVE-2021-0931 State: PUBLISHED Published: 2021-12-15T18:05:21 Last Updated: 2024-08-03T15:55:17.673Z Vendors: n/a Products: Android Problem Types: Information disclosure Description: In getAlias of BluetoothDevice.java, there is a possible way to create misleading permission dialogs due to missing data filtering. This could lead to local information disclosure with User execution privileges needed. User interaction is needed for exploitation.Product: AndroidVersions: Android-10 Android-11 Android-12 Android-9Android ID: A-180747689 Additional Analyst Notes: - CVE Program Container: References: - https://source.android.com/security/bulletin/2021-11-01
CVE ID: CVE-2021-0932 State: PUBLISHED Published: 2021-12-15T18:05:19 Last Updated: 2024-08-03T15:55:17.571Z Vendors: n/a Products: Android Problem Types: Elevation of privilege Description: In showNotification of NavigationModeController.java, there is a possible confused deputy due to an unsafe PendingIntent. This could lead to local escalation of privilege that allows actions performed as the System UI with User execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-10Android ID: A-173025705 Additional Analyst Notes: - CVE Program Container: References: - https://source.android.com/security/bulletin/2021-11-01
CVE ID: CVE-2021-0933 State: PUBLISHED Published: 2021-12-15T18:05:18 Last Updated: 2024-08-03T15:55:17.593Z Vendors: n/a Products: Android Problem Types: Elevation of privilege Description: In onCreate of CompanionDeviceActivity.java or DeviceChooserActivity.java, there is a possible way for HTML tags to interfere with a consent dialog due to improper input validation. This could lead to remote escalation of privilege, confusing the user into accepting pairing of a malicious Bluetooth device, with no additional execution privileges needed. User interaction is needed for exploitation.Product: AndroidVersions: Android-10 Android-11 Android-12 Android-9Android ID: A-172251622 Additional Analys
ploitation.Product: AndroidVersions: Android-10 Android-11 Android-12 Android-9Android ID: A-172251622 Additional Analyst Notes: - CVE Program Container: References: - https://source.android.com/security/bulletin/2021-11-01
CVE ID: CVE-2021-0934 State: PUBLISHED Published: 2022-12-13T00:00:00.000Z Last Updated: 2025-04-22T14:37:26.559Z Vendors: n/a Products: Android Problem Types: Denial of service Description: In findAllDeAccounts of AccountsDb.java, there is a possible denial of service due to resource exhaustion. This could lead to local denial of service with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-10 Android-11 Android-12 Android-12L Android-13Android ID: A-169762606 Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://source.android.com/security/bulletin/2022-12-01
CVE ID: CVE-2021-0935 State: PUBLISHED Published: 2021-10-25T13:20:25 Last Updated: 2024-08-03T15:55:18.050Z Vendors: n/a Products: Android Problem Types: Elevation of privilege Description: In ip6_xmit of ip6_output.c, there is a possible out of bounds write due to a use after free. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android kernelAndroid ID: A-168607263References: Upstream kernel Additional Analyst Notes: - CVE Program Container: References: - https://source.android.com/security/bulletin/pixel/2021-10-01
CVE ID: CVE-2021-0936 State: PUBLISHED Published: 2021-10-25T13:20:45 Last Updated: 2024-08-03T15:55:17.848Z Vendors: n/a Products: Android Problem Types: Elevation of privilege Description: In acc_read of f_accessory.c, there is a possible memory corruption due to a use after free. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android kernelAndroid ID: A-173789633References: Upstream kernel Additional Analyst Notes: - CVE Program Container: References: - https://source.android.com/security/bulletin/pixel/2021-10-01
CVE ID: CVE-2021-0937 State: REJECTED Published: N/A Last Updated: 2025-01-17T23:18:25.319Z Description: No description available.
CVE ID: CVE-2021-0938 State: PUBLISHED Published: 2021-10-25T13:20:39 Last Updated: 2024-08-03T15:55:18.271Z Vendors: n/a Products: Android Problem Types: Information disclosure Description: In memzero_explicit of compiler-clang.h, there is a possible bypass of defense in depth due to uninitialized data. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android kernelAndroid ID: A-171418586References: Upstream kernel Additional Analyst Notes: - CVE Program Container: References: - https://source.android.com/security/bulletin/pixel/2021-10-01
CVE ID: CVE-2021-0939 State: PUBLISHED Published: 2021-10-25T13:20:51 Last Updated: 2024-08-03T15:55:17.999Z Vendors: n/a Products: Android Problem Types: Information disclosure Description: In set_default_passthru_cfg of passthru.c, there is a possible out of bounds read due to a missing bounds check. This could lead to local information disclosure with System execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android kernelAndroid ID: A-186026549References: N/A Additional Analyst Notes: - CVE Program Container: References: - https://source.android.com/security/bulletin/pixel/2021-10-01
CVE ID: CVE-2021-0940 State: PUBLISHED Published: 2021-10-25T13:20:31 Last Updated: 2024-08-03T15:55:18.130Z Vendors: n/a Products: Android Problem Types: Elevation of privilege Description: In TBD of TBD, there is a possible out of bounds write due to improper locking. This could lead to local escalation of privilege in the kernel with System execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android kernelAndroid ID: A-171315276References: N/A Additional Analyst Notes: - CVE Program Container: References: - https://source.android.com/security/bulletin/pixel/2021-10-01
CVE ID: CVE-2021-0941 State: PUBLISHED Published: 2021-10-25T13:20:17 Last Updated: 2024-08-03T15:55:18.052Z Vendors: n/a Products: Android Problem Types: Elevation of privilege Description: In bpf_skb_change_head of filter.c, there is a possible out of bounds read due to a use after free. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android kernelAndroid ID: A-154177719References: Upstream kernel Additional Analyst Notes: - CVE Program Container: References: - https://source.android.com/security/bulletin/pixel/2021-10-01
CVE ID: CVE-2021-0942 State: PUBLISHED Published: 2022-09-13T19:13:39 Last Updated: 2024-08-03T15:55:17.580Z Vendors: n/a Products: Android Problem Types: Elevation of privilege Description: The path in this case is a little bit convoluted. The end result is that via an ioctl an untrusted app can control the ui32PageIndex offset in the expression:sPA.uiAddr = page_to_phys(psOSPageArrayData->pagearray[ui32PageIndex]);With the current PoC this crashes as an OOB read. However, given that the OOB read value is ending up as the address field of a struct I think i seems plausible that this could lead to an OOB write if the attacker is able to cause the OOB read to pull an interesting kernel addres
that this could lead to an OOB write if the attacker is able to cause the OOB read to pull an interesting kernel address. Regardless if this is a read or write, it is a High severity issue in the kernel.Product: AndroidVersions: Android SoCAndroid ID: A-238904312 Additional Analyst Notes: - CVE Program Container: References: - https://source.android.com/security/bulletin/2022-09-01
CVE ID: CVE-2021-0943 State: PUBLISHED Published: 2022-09-13T19:14:19 Last Updated: 2024-08-03T15:55:18.169Z Vendors: n/a Products: Android Problem Types: Elevation of privilege Description: In MMU_MapPages of TBD, there is a possible out of bounds write due to improper input validation. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android SoCAndroid ID: A-238916921 Additional Analyst Notes: - CVE Program Container: References: - https://source.android.com/security/bulletin/2022-09-01
CVE ID: CVE-2021-0945 State: PUBLISHED Published: 2023-06-15T00:00:00 Last Updated: 2024-12-18T19:00:07.040Z Vendors: n/a Products: Android Problem Types: Elevation of privilege Description: In _PMRCreate of the PowerVR kernel driver, a missing bounds check means it is possible to overwrite heap memory via PhysmemNewRamBackedPMR. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://source.android.com/security/bulletin/2023-06-01
CVE ID: CVE-2021-0946 State: PUBLISHED Published: 2022-08-24T13:38:55 Last Updated: 2024-08-03T15:55:17.702Z Vendors: n/a Products: Android Problem Types: Information disclosure Description: The method PVRSRVBridgePMRPDumpSymbolicAddr allocates puiMemspaceNameInt on the heap, fills the contents of the buffer via PMR_PDumpSymbolicAddr, and then copies the buffer to userspace. The method PMR_PDumpSymbolicAddr may fail, and if it does the buffer will be left uninitialized and despite the error will still be copied to userspace. Kernel leak of uninitialized heap data with no privs required.Product: AndroidVersions: Android SoCAndroid ID: A-236846966 Additional Analyst Notes: - CVE Program Contai
ivs required.Product: AndroidVersions: Android SoCAndroid ID: A-236846966 Additional Analyst Notes: - CVE Program Container: References: - https://source.android.com/security/bulletin/2022-08-01
CVE ID: CVE-2021-0947 State: PUBLISHED Published: 2022-08-24T13:40:05 Last Updated: 2024-08-03T15:55:18.158Z Vendors: n/a Products: Android Problem Types: Information disclosure Description: The method PVRSRVBridgeTLDiscoverStreams allocates puiStreamsInt on the heap, fills the contents of the buffer via TLServerDiscoverStreamsKM, and then copies the buffer to userspace. The method TLServerDiscoverStreamsKM may fail for several reasons including invalid sizes. If this method fails the buffer will be left uninitialized and despite the error will still be copied to userspace. Kernel leak of uninitialized heap data with no privs required.Product: AndroidVersions: Android SoCAndroid ID: A-236838
Kernel leak of uninitialized heap data with no privs required.Product: AndroidVersions: Android SoCAndroid ID: A-236838960 Additional Analyst Notes: - CVE Program Container: References: - https://source.android.com/security/bulletin/2022-08-01
CVE ID: CVE-2021-0948 State: PUBLISHED Published: 2023-07-12T23:16:21.465Z Last Updated: 2024-11-06T17:27:37.540Z Vendors: Google Products: Android Problem Types: Information disclosure Description: The PVRSRVBridgeGetMultiCoreInfo ioctl in the PowerVR kernel driver can return uninitialized kernel memory to user space. The contents of this memory could contain sensitive information. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://source.android.com/security/bulletin/2023-07-01
CVE ID: CVE-2021-0951 State: PUBLISHED Published: 2022-10-11T00:00:00 Last Updated: 2024-08-03T15:55:18.079Z Vendors: n/a Products: Android Problem Types: Elevation of privilege Description: In DevmemIntHeapAcquire of TBD, there is a possible arbitrary code execution due to an integer overflow. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android SoCAndroid ID: A-242345085 Additional Analyst Notes: - CVE Program Container: References: - https://source.android.com/security/bulletin/2022-10-01
CVE ID: CVE-2021-0952 State: PUBLISHED Published: 2021-12-15T18:05:45 Last Updated: 2024-08-03T15:55:18.142Z Vendors: n/a Products: Android Problem Types: Information disclosure Description: In doCropPhoto of PhotoSelectionHandler.java, there is a possible permission bypass due to a confused deputy. This could lead to local information disclosure of user's contacts with no additional execution privileges needed. User interaction is needed for exploitation.Product: AndroidVersions: Android-10 Android-11 Android-12 Android-9Android ID: A-195748381 Additional Analyst Notes: - CVE Program Container: References: - https://source.android.com/security/bulletin/2021-12-01
CVE ID: CVE-2021-0953 State: PUBLISHED Published: 2021-12-15T18:05:41 Last Updated: 2024-08-03T15:55:18.199Z Vendors: n/a Products: Android Problem Types: Elevation of privilege Description: In setOnClickActivityIntent of SearchWidgetProvider.java, there is a possible way to access contacts and history bookmarks without permission due to an unsafe PendingIntent. This could lead to local escalation of privilege with User execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-10 Android-11 Android-12 Android-9Android ID: A-184046278 Additional Analyst Notes: - CVE Program Container: References: - https://source.android.com/security/bullet
A-184046278 Additional Analyst Notes: - CVE Program Container: References: - https://source.android.com/security/bulletin/2021-12-01
CVE ID: CVE-2021-0954 State: PUBLISHED Published: 2021-12-15T18:05:39 Last Updated: 2024-08-03T15:55:18.270Z Vendors: n/a Products: Android Problem Types: Elevation of privilege Description: In ResolverActivity, there is a possible user interaction bypass due to a tapjacking/overlay attack. This could lead to local escalation of privilege with User execution privileges needed. User interaction is needed for exploitation.Product: AndroidVersions: Android-10 Android-11Android ID: A-143559931 Additional Analyst Notes: - CVE Program Container: References: - https://source.android.com/security/bulletin/2021-12-01
CVE ID: CVE-2021-0955 State: PUBLISHED Published: 2021-12-15T18:05:43 Last Updated: 2024-08-03T15:55:18.014Z Vendors: n/a Products: Android Problem Types: Elevation of privilege Description: In pf_write_buf of FuseDaemon.cpp, there is possible memory corruption due to a race condition. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-11Android ID: A-192085766 Additional Analyst Notes: - CVE Program Container: References: - https://source.android.com/security/bulletin/2021-12-01
CVE ID: CVE-2021-0956 State: PUBLISHED Published: 2021-12-15T18:05:42 Last Updated: 2024-08-03T15:55:18.532Z Vendors: n/a Products: Android Problem Types: Elevation of privilege Description: In NfcTag::discoverTechnologies (activation) of NfcTag.cpp, there is a possible out of bounds write due to an incorrect bounds check. This could lead to remote escalation of privilege with no additionalSystem execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-11 Android-12Android ID: A-189942532 Additional Analyst Notes: - CVE Program Container: References: - https://source.android.com/security/bulletin/2021-12-01
CVE ID: CVE-2021-0957 State: PUBLISHED Published: 2022-03-16T14:04:05 Last Updated: 2024-08-03T15:55:18.272Z Vendors: n/a Products: Android Problem Types: Elevation of privilege Description: In NotificationStackScrollLayout of NotificationStackScrollLayout.java, there is a possible way to bypass Factory Reset Protections. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-10 Android-11 Android-12Android ID: A-193149550 Additional Analyst Notes: - CVE Program Container: References: - https://source.android.com/security/bulletin/2022-03-01
CVE ID: CVE-2021-0958 State: PUBLISHED Published: 2021-12-15T18:05:51 Last Updated: 2024-08-03T15:55:18.074Z Vendors: n/a Products: Android Problem Types: Denial of service Description: In update of km_compat.cpp, there is a possible loss of potentially sensitive data due to a logic error in the code. This could lead to local denial of service with User execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-11 Android-12Android ID: A-200041882 Additional Analyst Notes: - CVE Program Container: References: - https://source.android.com/security/bulletin/2021-12-01
CVE ID: CVE-2021-0959 State: PUBLISHED Published: 2022-01-14T19:10:49 Last Updated: 2024-08-03T15:55:18.226Z Vendors: n/a Products: Android Problem Types: Elevation of privilege Description: In jit_memory_region.cc, there is a possible bypass of memory restrictions due to a logic error in the code. This could lead to local escalation of privilege with User execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-12Android ID: A-200284993 Additional Analyst Notes: - CVE Program Container: References: - https://source.android.com/security/bulletin/2022-01-01
CVE ID: CVE-2021-0961 State: PUBLISHED Published: 2021-12-15T18:05:46 Last Updated: 2024-08-03T15:55:18.209Z Vendors: n/a Products: Android Problem Types: Information disclosure Description: In quota_proc_write of xt_quota2.c, there is a possible way to read kernel memory due to uninitialized data. This could lead to local information disclosure with System execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android kernelAndroid ID: A-196046570References: Upstream kernel Additional Analyst Notes: - CVE Program Container: References: - https://source.android.com/security/bulletin/2021-12-01
CVE ID: CVE-2021-0963 State: PUBLISHED Published: 2021-12-15T18:05:49 Last Updated: 2024-08-03T15:55:17.973Z Vendors: n/a Products: Android Problem Types: Elevation of privilege Description: In onCreate of KeyChainActivity.java, there is a possible way to use an app certificate stored in keychain due to a tapjacking/overlay attack. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is needed for exploitation.Product: AndroidVersions: Android-10 Android-11 Android-12 Android-9Android ID: A-199754277 Additional Analyst Notes: - CVE Program Container: References: - https://source.android.com/security/bulletin/2021-12-01
CVE ID: CVE-2021-0964 State: PUBLISHED Published: 2021-12-15T18:05:43 Last Updated: 2024-08-03T15:55:18.139Z Vendors: n/a Products: Android Problem Types: Information disclosure Description: In C2SoftMP3::process() of C2SoftMp3Dec.cpp, there is a possible out of bounds write due to a heap buffer overflow. This could lead to remote information disclosure with no additional execution privileges needed. User interaction is needed for exploitation.Product: AndroidVersions: Android-10 Android-11 Android-12 Android-9Android ID: A-193363621 Additional Analyst Notes: - CVE Program Container: References: - https://source.android.com/security/bulletin/2021-12-01
CVE ID: CVE-2021-0965 State: PUBLISHED Published: 2021-12-15T18:05:44 Last Updated: 2024-08-03T15:55:18.284Z Vendors: n/a Products: Android Problem Types: Elevation of privilege Description: In AndroidManifest.xml of Settings, there is a possible pairing of a Bluetooth device without user's consent due to a missing permission check. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-10 Android-11 Android-12 Android-9Android ID: A-194300867 Additional Analyst Notes: - CVE Program Container: References: - https://source.android.com/security/bulletin/2021-12-01
CVE ID: CVE-2021-0966 State: PUBLISHED Published: 2021-12-15T18:05:48 Last Updated: 2024-08-03T15:55:17.941Z Vendors: n/a Products: Android Problem Types: Information disclosure Description: In code generated by BuildParcelFields of generate_cpp.cpp, there is a possible way for a crafted parcelable to reveal uninitialized memory of a target process due to uninitialized data. This could lead to local information disclosure across Binder transactions with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-11 Android-12Android ID: A-198346478 Additional Analyst Notes: - CVE Program Container: References: - https://source.
id-11 Android-12Android ID: A-198346478 Additional Analyst Notes: - CVE Program Container: References: - https://source.android.com/security/bulletin/2021-12-01