Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2020-0407 State: PUBLISHED Published: 2020-09-17T15:41:18 Last Updated: 2024-08-04T06:02:52.004Z Vendors: n/a Products: Android Problem Types: Information disclosure Description: In various functions in fscrypt_ice.c and related files in some implementations of f2fs encryption that use encryption hardware which only supports 32-bit IVs (Initialization Vectors), 64-bit IVs are used and later are truncated to 32 bits. This may cause IV reuse and thus weakened disk encryption. This could lead to local information disclosure with System execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android kernelAndroid ID: A-153450752Reference
User interaction is not needed for exploitation.Product: AndroidVersions: Android kernelAndroid ID: A-153450752References: N/A Additional Analyst Notes: - CVE Program Container: References: - https://source.android.com/security/bulletin/2020-09-01
CVE ID: CVE-2020-0408 State: PUBLISHED Published: 2020-10-14T13:05:14 Last Updated: 2024-08-04T06:02:51.320Z Vendors: n/a Products: Android Problem Types: Elevation of privilege Description: In remove of String16.cpp, there is a possible out of bounds write due to an integer overflow. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-11 Android-8.0 Android-8.1 Android-9 Android-10Android ID: A-156999009 Additional Analyst Notes: - CVE Program Container: References: - https://source.android.com/security/bulletin/2020-10-01
CVE ID: CVE-2020-0409 State: PUBLISHED Published: 2020-11-10T12:48:30 Last Updated: 2024-08-04T06:02:52.030Z Vendors: n/a Products: Android Problem Types: Elevation of privilege Description: In create of FileMap.cpp, there is a possible out of bounds write due to an integer overflow. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-10 Android-8.0 Android-8.1 Android-9Android ID: A-156997193 Additional Analyst Notes: - CVE Program Container: References: - https://source.android.com/security/bulletin/2020-11-01
CVE ID: CVE-2020-0410 State: PUBLISHED Published: 2020-10-14T13:04:31 Last Updated: 2024-08-04T06:02:52.026Z Vendors: n/a Products: Android Problem Types: Information disclosure Description: In setNotification of SapServer.java, there is a possible permission bypass due to a PendingIntent error. This could lead to local information disclosure with User execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-8.0 Android-8.1 Android-9 Android-10 Android-11Android ID: A-156021269 Additional Analyst Notes: - CVE Program Container: References: - https://source.android.com/security/bulletin/2020-10-01
CVE ID: CVE-2020-0411 State: PUBLISHED Published: 2020-10-14T13:02:35 Last Updated: 2024-08-04T06:02:51.778Z Vendors: n/a Products: Android Problem Types: Information disclosure Description: In ~AACExtractor() of AACExtractor.cpp, there is a possible out of bounds write due to uninitialized data. This could lead to remote information disclosure with no additional execution privileges needed. User interaction is needed for exploitation.Product: AndroidVersions: Android-10 Android-11Android ID: A-142641801 Additional Analyst Notes: - CVE Program Container: References: - https://source.android.com/security/bulletin/2020-10-01
CVE ID: CVE-2020-0412 State: PUBLISHED Published: 2020-10-14T13:07:05 Last Updated: 2024-08-04T06:02:51.321Z Vendors: n/a Products: Android Problem Types: Information disclosure Description: In setProcessMemoryTrimLevel of ActivityManagerService.java, there is a missing permission check. This could lead to local information disclosure of foreground processes with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-10 Android-11 Android-8.0 Android-8.1 Android-9Android ID: A-160390416 Additional Analyst Notes: - CVE Program Container: References: - https://source.android.com/security/bulletin/2020-10-01
CVE ID: CVE-2020-0413 State: PUBLISHED Published: 2020-10-14T13:05:55 Last Updated: 2024-08-04T06:02:51.753Z Vendors: n/a Products: Android Problem Types: Information disclosure Description: In gatt_process_read_by_type_rsp of gatt_cl.cc, there is a possible out of bounds read due to a missing bounds check. This could lead to remote information disclosure in the Bluetooth server with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-8.1 Android-9 Android-10 Android-11 Android-8.0Android ID: A-158778659 Additional Analyst Notes: - CVE Program Container: References: - https://source.android.com/security/bulletin/2020-10
59 Additional Analyst Notes: - CVE Program Container: References: - https://source.android.com/security/bulletin/2020-10-01
CVE ID: CVE-2020-0414 State: PUBLISHED Published: 2020-10-14T13:05:29 Last Updated: 2024-08-04T06:02:51.966Z Vendors: n/a Products: Android Problem Types: Information disclosure Description: In AudioFlinger::RecordThread::threadLoop of audioflinger/Threads.cpp, there is a possible non-silenced audio buffer due to a permissions bypass. This could lead to remote information disclosure with no additional execution privileges needed. User interaction is needed for exploitation.Product: AndroidVersions: Android-10 Android-11Android ID: A-157708122 Additional Analyst Notes: - CVE Program Container: References: - https://source.android.com/security/bulletin/2020-10-01
CVE ID: CVE-2020-0415 State: PUBLISHED Published: 2020-10-14T13:04:20 Last Updated: 2024-08-04T06:02:52.293Z Vendors: n/a Products: Android Problem Types: Information disclosure Description: In various locations in SystemUI, there is a possible permission bypass due to an unsafe PendingIntent. This could lead to local information disclosure of contact data with User execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-9 Android-10 Android-11 Android-8.0 Android-8.1Android ID: A-156020795 Additional Analyst Notes: - CVE Program Container: References: - https://source.android.com/security/bulletin/2020-10-01
CVE ID: CVE-2020-0416 State: PUBLISHED Published: 2020-10-14T13:04:09 Last Updated: 2024-08-04T06:02:52.063Z Vendors: n/a Products: Android Problem Types: Elevation of privilege Description: In multiple settings screens, there are possible tapjacking attacks due to an insecure default value. This could lead to local escalation of privilege and permissions with no additional execution privileges needed. User interaction is needed for exploitation.Product: AndroidVersions: Android-9 Android-10 Android-11 Android-8.0 Android-8.1Android ID: A-155288585 Additional Analyst Notes: - CVE Program Container: References: - https://source.android.com/security/bulletin/2020-10-01
CVE ID: CVE-2020-0417 State: PUBLISHED Published: 2021-07-14T13:43:07 Last Updated: 2024-08-04T06:02:52.041Z Vendors: n/a Products: Android Problem Types: Elevation of privilege Description: In setNiNotification of GpsNetInitiatedHandler.java, there is a possible permissions bypass due to an empty mutable PendingIntent. This could lead to local escalation of privilege with User execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-10 Android-8.1 Android-9Android ID: A-154319182 Additional Analyst Notes: - CVE Program Container: References: - https://source.android.com/security/bulletin/2021-07-01
CVE ID: CVE-2020-0418 State: PUBLISHED Published: 2020-11-10T12:47:40 Last Updated: 2024-08-04T06:02:52.127Z Vendors: n/a Products: Android Problem Types: Elevation of privilege Description: In getPermissionInfosForGroup of Utils.java, there is a logic error. This could lead to local escalation of privilege with User execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-10Android ID: A-153879813 Additional Analyst Notes: - CVE Program Container: References: - https://source.android.com/security/bulletin/2020-11-01
CVE ID: CVE-2020-0419 State: PUBLISHED Published: 2020-10-14T13:02:25 Last Updated: 2024-08-04T06:02:52.028Z Vendors: n/a Products: Android Problem Types: Information disclosure Description: In generateInfo of PackageInstallerSession.java, there is a possible leak of cross-profile URI data during app installation due to a missing permission check. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-8.1 Android-9 Android-10 Android-11Android ID: A-142125338 Additional Analyst Notes: - CVE Program Container: References: - https://source.android.com/security/bulletin/202
125338 Additional Analyst Notes: - CVE Program Container: References: - https://source.android.com/security/bulletin/2020-10-01
CVE ID: CVE-2020-0420 State: PUBLISHED Published: 2020-10-14T13:08:03 Last Updated: 2024-08-04T06:02:51.889Z Vendors: n/a Products: Android Problem Types: Elevation of privilege Description: In setUpdatableDriverPath of GpuService.cpp, there is a possible memory corruption due to a missing permission check. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-11Android ID: A-162383705 Additional Analyst Notes: - CVE Program Container: References: - https://source.android.com/security/bulletin/2020-10-01
CVE ID: CVE-2020-0421 State: PUBLISHED Published: 2020-10-14T13:07:32 Last Updated: 2024-08-04T06:02:51.739Z Vendors: n/a Products: Android Problem Types: Elevation of privilege Description: In appendFormatV of String8.cpp, there is a possible out of bounds write due to incorrect error handling. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-8.1 Android-9 Android-10 Android-11 Android-8.0Android ID: A-161894517 Additional Analyst Notes: - CVE Program Container: References: - https://source.android.com/security/bulletin/2020-10-01
CVE ID: CVE-2020-0422 State: PUBLISHED Published: 2020-10-14T13:07:24 Last Updated: 2024-08-04T06:02:52.059Z Vendors: n/a Products: Android Problem Types: Information disclosure Description: In constructImportFailureNotification of NotificationImportExportListener.java, there is a possible permissions bypass due to an unsafe PendingIntent. This could lead to local information disclosure of contact data with User execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-8.1 Android-9 Android-10 Android-11 Android-8.0Android ID: A-161718556 Additional Analyst Notes: - CVE Program Container: References: - https://source.android.com/security/b
d ID: A-161718556 Additional Analyst Notes: - CVE Program Container: References: - https://source.android.com/security/bulletin/2020-10-01
CVE ID: CVE-2020-0423 State: PUBLISHED Published: 2020-10-14T13:07:13 Last Updated: 2024-08-04T06:02:51.790Z Vendors: n/a Products: Android Problem Types: Elevation of privilege Description: In binder_release_work of binder.c, there is a possible use-after-free due to improper locking. This could lead to local escalation of privilege in the kernel with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android kernelAndroid ID: A-161151868References: N/A Additional Analyst Notes: - CVE Program Container: References: - https://source.android.com/security/bulletin/2020-10-01 - https://lists.debian.org/debian-lts-announce/2020/12
rences: - https://source.android.com/security/bulletin/2020-10-01 - https://lists.debian.org/debian-lts-announce/2020/12/msg00015.html
CVE ID: CVE-2020-0424 State: PUBLISHED Published: 2020-11-10T12:51:17 Last Updated: 2024-08-04T06:02:52.049Z Vendors: n/a Products: Android Problem Types: Information disclosure Description: In send_vc of res_send.cpp, there is a possible out of bounds read due to an incorrect bounds check. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-11 Android-9 Android-10Android ID: A-161362564 Additional Analyst Notes: - CVE Program Container: References: - https://source.android.com/security/bulletin/2020-11-01
CVE ID: CVE-2020-0425 State: PUBLISHED Published: 2020-09-17T20:50:39 Last Updated: 2024-08-04T06:02:52.011Z Vendors: n/a Products: Android Problem Types: Information disclosure Description: There is a possible way to view notifications even when the "Lockdown" feature is on. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-11Android ID: A-124000380 Additional Analyst Notes: - CVE Program Container: References: - https://source.android.com/security/bulletin/android-11
CVE ID: CVE-2020-0426 State: PUBLISHED Published: 2020-09-17T20:50:51 Last Updated: 2024-08-04T06:02:51.830Z Vendors: n/a Products: Android Problem Types: Information disclosure Description: In SyncManager, there is a possible permission bypass due to an unsafe PendingIntent. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-11Android ID: A-154921790 Additional Analyst Notes: - CVE Program Container: References: - https://source.android.com/security/bulletin/android-11
CVE ID: CVE-2020-0427 State: PUBLISHED Published: 2020-09-17T00:00:00 Last Updated: 2024-08-04T06:02:52.034Z Vendors: n/a Products: Android Problem Types: Information disclosure Description: In create_pinctrl of core.c, there is a possible out of bounds read due to a use after free. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android kernelAndroid ID: A-140550171 Additional Analyst Notes: - CVE Program Container: References: - https://source.android.com/security/bulletin/pixel/2020-09-01 - http://lists.opensuse.org/opensuse-security-announce/2020-10/msg00001.html - ht
com/security/bulletin/pixel/2020-09-01 - http://lists.opensuse.org/opensuse-security-announce/2020-10/msg00001.html - http://lists.opensuse.org/opensuse-security-announce/2020-10/msg00021.html - https://lists.debian.org/debian-lts-announce/2020/12/msg00027.html - http://packetstormsecurity.com/files/161229/Kernel-Live-Patch-Security-Notice-LSN-0074-1.html - https://www.starwindsoftware.com/security/sw-20210325-0005/
CVE ID: CVE-2020-0428 State: PUBLISHED Published: 2020-09-17T18:42:05 Last Updated: 2024-08-04T06:02:52.036Z Vendors: n/a Products: Android Problem Types: Elevation of privilege Description: In CamX code, there is a possible use after free due to a race condition. This could lead to local escalation of privilege with System execution privileges required. User interaction is not needed for exploitation.Product: AndroidVersions: Android kernelAndroid ID: A-123999783 Additional Analyst Notes: - CVE Program Container: References: - https://source.android.com/security/bulletin/pixel/2020-09-01
CVE ID: CVE-2020-0429 State: PUBLISHED Published: 2020-09-17T18:42:18 Last Updated: 2024-08-04T06:02:52.059Z Vendors: n/a Products: Android Problem Types: Elevation of privilege Description: In l2tp_session_delete and related functions of l2tp_core.c, there is possible memory corruption due to a use after free. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android kernelAndroid ID: A-152735806 Additional Analyst Notes: - CVE Program Container: References: - https://source.android.com/security/bulletin/pixel/2020-09-01
CVE ID: CVE-2020-0430 State: PUBLISHED Published: 2020-09-17T18:44:40 Last Updated: 2024-08-04T06:02:51.835Z Vendors: n/a Products: Android Problem Types: Elevation of privilege Description: In skb_headlen of /include/linux/skbuff.h, there is a possible out of bounds read due to memory corruption. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android kernelAndroid ID: A-153881554 Additional Analyst Notes: - CVE Program Container: References: - https://source.android.com/security/bulletin/pixel/2020-09-01
CVE ID: CVE-2020-0431 State: PUBLISHED Published: 2020-09-17T18:45:00 Last Updated: 2024-08-04T06:02:52.156Z Vendors: n/a Products: Android Problem Types: Elevation of privilege Description: In kbd_keycode of keyboard.c, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android kernelAndroid ID: A-144161459 Additional Analyst Notes: - CVE Program Container: References: - https://source.android.com/security/bulletin/pixel/2020-09-01 - http://lists.opensuse.org/opensuse-security-announce/2020-10/msg00001.
.android.com/security/bulletin/pixel/2020-09-01 - http://lists.opensuse.org/opensuse-security-announce/2020-10/msg00001.html - http://lists.opensuse.org/opensuse-security-announce/2020-10/msg00021.html
CVE ID: CVE-2020-0432 State: PUBLISHED Published: 2020-09-17T18:45:31 Last Updated: 2024-08-04T06:02:52.299Z Vendors: n/a Products: Android Problem Types: Elevation of privilege Description: In skb_to_mamac of networking.c, there is a possible out of bounds write due to an integer overflow. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android kernelAndroid ID: A-143560807 Additional Analyst Notes: - CVE Program Container: References: - https://source.android.com/security/bulletin/pixel/2020-09-01 - http://lists.opensuse.org/opensuse-security-announce/2020-10/msg00001.
CVE ID: CVE-2020-0433 State: PUBLISHED Published: 2020-09-17T18:45:46 Last Updated: 2024-08-04T06:02:51.949Z Vendors: n/a Products: Android Problem Types: Elevation of privilege Description: In blk_mq_queue_tag_busy_iter of blk-mq-tag.c, there is a possible use after free due to improper locking. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android kernelAndroid ID: A-151939299 Additional Analyst Notes: - CVE Program Container: References: - https://source.android.com/security/bulletin/pixel/2020-09-01
CVE ID: CVE-2020-0434 State: PUBLISHED Published: 2020-09-17T18:46:30 Last Updated: 2024-08-04T06:02:52.032Z Vendors: n/a Products: Android Problem Types: Elevation of privilege Description: In Pixel's use of the Catpipe library, there is possible memory corruption due to a use after free. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android kernelAndroid ID: A-150730508 Additional Analyst Notes: - CVE Program Container: References: - https://source.android.com/security/bulletin/pixel/2020-09-01
CVE ID: CVE-2020-0435 State: REJECTED Published: 2020-09-17T18:47:04 Last Updated: 2020-09-24T14:06:52 Description: No description available.
CVE ID: CVE-2020-0436 State: REJECTED Published: N/A Last Updated: 2025-01-17T23:26:08.691Z Description: No description available.
CVE ID: CVE-2020-0437 State: PUBLISHED Published: 2020-11-10T12:52:51 Last Updated: 2024-08-04T06:02:52.031Z Vendors: n/a Products: Android Problem Types: Denial of service Description: In CellBroadcastReceiver's intent handlers, there is a possible denial of service due to a missing permission check. This could lead to local denial of service of emergency alerts with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-8.0 Android-8.1 Android-9 Android-10 Android-11Android ID: A-162741784 Additional Analyst Notes: - CVE Program Container: References: - https://source.android.com/security/bulletin/2020-11-01
CVE ID: CVE-2020-0438 State: PUBLISHED Published: 2020-11-10T12:51:57 Last Updated: 2024-08-04T06:02:51.992Z Vendors: n/a Products: Android Problem Types: Elevation of privilege Description: In the AIBinder_Class constructor of ibinder.cpp, there is a possible arbitrary code execution due to uninitialized data. This could lead to local escalation of privilege if a process were using libbinder_ndk in a vulnerable way with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-11 Android-10Android ID: A-161812320 Additional Analyst Notes: - CVE Program Container: References: - https://source.android.com/security/bulletin/202
812320 Additional Analyst Notes: - CVE Program Container: References: - https://source.android.com/security/bulletin/2020-11-01
CVE ID: CVE-2020-0439 State: PUBLISHED Published: 2020-11-10T12:46:20 Last Updated: 2024-08-04T06:02:52.031Z Vendors: n/a Products: Android Problem Types: Elevation of privilege Description: In generatePackageInfo of PackageManagerService.java, there is a possible permissions bypass due to an incorrect permission check. This could lead to local escalation of privilege that allows instant apps access to permissions not allowed for instant apps, with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-8.1 Android-9 Android-10 Android-11 Android-8.0Android ID: A-140256621 Additional Analyst Notes: - CVE Program Container:
1 Android-9 Android-10 Android-11 Android-8.0Android ID: A-140256621 Additional Analyst Notes: - CVE Program Container: References: - https://source.android.com/security/bulletin/2020-11-01
CVE ID: CVE-2020-0440 State: PUBLISHED Published: 2020-12-14T21:51:38 Last Updated: 2024-08-04T06:02:51.831Z Vendors: n/a Products: Android Problem Types: Elevation of privilege Description: In createVirtualDisplay of DisplayManagerService.java, there is a possible way to create a trusted virtual display due to a missing permission check. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-11Android ID: A-162627132 Additional Analyst Notes: - CVE Program Container: References: - https://source.android.com/security/bulletin/2020-12-01
CVE ID: CVE-2020-0441 State: PUBLISHED Published: 2020-11-10T12:49:22 Last Updated: 2024-08-04T06:02:51.998Z Vendors: n/a Products: Android Problem Types: Denial of service Description: In Message and toBundle of Notification.java, there is a possible resource exhaustion due to improper input validation. This could lead to remote denial of service requiring a device reset to fix with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-11 Android-8.0 Android-8.1 Android-9 Android-10Android ID: A-158304295 Additional Analyst Notes: - CVE Program Container: References: - https://source.android.com/security/bulletin/2020-11
95 Additional Analyst Notes: - CVE Program Container: References: - https://source.android.com/security/bulletin/2020-11-01