Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2024-32890 State: PUBLISHED Published: 2024-05-01T06:34:13.364Z Last Updated: 2024-08-21T14:47:47.000Z Severity: MEDIUM (CVSS 6.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N) Vendors: librespeed Products: speedtest Problem Types: CWE-79 Description: librespeed/speedtest is an open source, self-hosted speed test for HTML5. In affected versions missing neutralization of the ISP information in a speedtest result leads to stored Cross-site scripting in the JSON API. The `processedString` field in the `ispinfo` parameter is missing neutralization. It is stored when a user submits a speedtest result to the telemetry API (`results/telemetry.php`) and returned in the JSON API (`results/
a user submits a speedtest result to the telemetry API (`results/telemetry.php`) and returned in the JSON API (`results/json.php`). This vulnerability has been introduced in commit 3937b94. This vulnerability affects LibreSpeed speedtest instances running version 5.2.5 or higher which have telemetry enabled and has been addressed in version 5.3.1. Users are advised to upgrade. There are no known workarounds for this vulnerability. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/librespeed/speedtest/security/advisories/GHSA-3954-xrwh-fq4q - https://github.com/librespeed/speedtest/commit/3937b940e80b734acae36cd41a2a31819593e728 - htt
ries/GHSA-3954-xrwh-fq4q - https://github.com/librespeed/speedtest/commit/3937b940e80b734acae36cd41a2a31819593e728 - https://github.com/librespeed/speedtest/commit/dd1ce2cb8830d94dcaa0b8e70b9406144a0e5f8d
CVE ID: CVE-2024-32891 State: PUBLISHED Published: 2024-06-13T21:01:56.771Z Last Updated: 2024-08-02T02:20:35.606Z Vendors: Google Products: Android Problem Types: Elevation of privilege Description: In sec_media_unprotect of media.c, there is a possible memory corruption due to a race condition. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://source.android.com/security/bulletin/pixel/2024-06-01
CVE ID: CVE-2024-32892 State: PUBLISHED Published: 2024-06-13T21:01:56.914Z Last Updated: 2025-03-13T19:35:37.644Z Vendors: Google Products: Android Problem Types: Elevation of privilege Description: In handle_init of goodix/main/main.c, there is a possible memory corruption due to type confusion. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://source.android.com/security/bulletin/pixel/2024-06-01
CVE ID: CVE-2024-32893 State: PUBLISHED Published: 2024-06-13T21:01:57.070Z Last Updated: 2024-08-02T02:20:35.616Z Vendors: Google Products: Android Problem Types: Information disclosure Description: In _s5e9865_mif_set_rate of exynos_dvfs.c, there is a possible out of bounds read due to improper casting. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://source.android.com/security/bulletin/pixel/2024-06-01
CVE ID: CVE-2024-32894 State: PUBLISHED Published: 2024-06-13T21:01:57.220Z Last Updated: 2025-03-27T19:03:15.273Z Vendors: Google Products: Android Problem Types: Information disclosure Description: In bc_get_converted_received_bearer of bc_utilities.c, there is a possible out of bounds read due to a missing bounds check. This could lead to remote information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://source.android.com/security/bulletin/pixel/2024-06-01
CVE ID: CVE-2024-32895 State: PUBLISHED Published: 2024-06-13T21:01:57.373Z Last Updated: 2024-08-19T13:44:30.509Z Vendors: Google Products: Android Problem Types: Elevation of privilege Description: In BCMFASTPATH of dhd_msgbuf.c, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://source.android.com/security/bulletin/pixel/2024-06-01
CVE ID: CVE-2024-32896 State: PUBLISHED Published: 2024-06-13T21:01:57.521Z Last Updated: 2025-10-21T22:56:22.051Z Vendors: Google Products: Android Problem Types: Elevation of privilege Description: there is a possible way to bypass due to a logic error in the code. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is needed for exploitation. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://source.android.com/security/bulletin/pixel/2024-06-01
CVE ID: CVE-2024-32897 State: PUBLISHED Published: 2024-06-13T21:01:57.671Z Last Updated: 2025-03-13T19:30:52.525Z Vendors: Google Products: Android Problem Types: Information disclosure Description: In ProtocolCdmaCallWaitingIndAdapter::GetCwInfo() of protocolsmsadapter.cpp, there is a possible out of bounds read due to a missing bounds check. This could lead to remote information disclosure with baseband firmware compromise required. User interaction is not needed for exploitation. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://source.android.com/security/bulletin/pixel/2024-06-01
CVE ID: CVE-2024-32898 State: PUBLISHED Published: 2024-06-13T21:01:57.839Z Last Updated: 2025-03-13T13:17:16.996Z Vendors: Google Products: Android Problem Types: Information disclosure Description: In ProtocolCellIdentityParserV4::Parse() of protocolnetadapter.cpp, there is a possible out of bounds read due to a missing bounds check. This could lead to local information disclosure with baseband firmware compromise required. User Interaction is not needed for exploitation. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://source.android.com/security/bulletin/pixel/2024-06-01
CVE ID: CVE-2024-32899 State: PUBLISHED Published: 2024-06-13T21:01:58.004Z Last Updated: 2024-08-08T14:07:25.060Z Vendors: Google Products: Android Problem Types: Elevation of privilege Description: In gpu_pm_power_off_top_nolock of pixel_gpu_power.c, there is a possible compromise of protected memory due to a race condition. This could lead to local escalation of privilege to TEE with no additional execution privileges needed. User interaction is not needed for exploitation. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://source.android.com/security/bulletin/pixel/2024-06-01
CVE ID: CVE-2024-32900 State: PUBLISHED Published: 2024-06-13T21:01:58.220Z Last Updated: 2024-08-19T13:43:09.501Z Vendors: Google Products: Android Problem Types: Elevation of privilege Description: In lwis_fence_signal of lwis_debug.c, there is a possible Use after Free due to improper locking. This could lead to local escalation of privilege from hal_camera_default SELinux label with no additional execution privileges needed. User interaction is not needed for exploitation. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://source.android.com/security/bulletin/pixel/2024-06-01
CVE ID: CVE-2024-32901 State: PUBLISHED Published: 2024-06-13T21:01:58.372Z Last Updated: 2025-03-24T16:09:05.620Z Vendors: Google Products: Android Problem Types: Elevation of privilege Description: In v4l2_smfc_qbuf of smfc-v4l2-ioctls.c, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://source.android.com/security/bulletin/pixel/2024-06-01
CVE ID: CVE-2024-32902 State: PUBLISHED Published: 2024-06-13T21:01:58.523Z Last Updated: 2025-03-27T14:42:06.974Z Vendors: Google Products: Android Problem Types: Denial of service Description: Remote prevention of access to cellular service with no user interaction (for example, crashing the cellular radio service with a malformed packet) Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://source.android.com/security/bulletin/pixel/2024-06-01
CVE ID: CVE-2024-32903 State: PUBLISHED Published: 2024-06-13T21:01:58.676Z Last Updated: 2024-08-20T17:51:49.942Z Vendors: Google Products: Android Problem Types: Elevation of privilege Description: In prepare_response_locked of lwis_transaction.c, there is a possible out of bounds write due to improper input validation. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://source.android.com/security/bulletin/pixel/2024-06-01
CVE ID: CVE-2024-32904 State: PUBLISHED Published: 2024-06-13T21:01:58.819Z Last Updated: 2025-03-13T18:39:50.756Z Vendors: Google Products: Android Problem Types: Information disclosure Description: In ProtocolVsimOperationAdapter() of protocolvsimadapter.cpp, there is a possible out of bounds read due to a missing bounds check. This could lead to local information disclosure with baseband firmware compromise required. User Interaction is not needed for exploitation. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://source.android.com/security/bulletin/pixel/2024-06-01
CVE ID: CVE-2024-32905 State: PUBLISHED Published: 2024-06-13T21:01:58.976Z Last Updated: 2024-08-02T02:20:35.671Z Vendors: Google Products: Android Problem Types: Remote code execution Description: In circ_read of link_device_memory_legacy.c, there is a possible out of bounds write due to an incorrect bounds check. This could lead to remote code execution with no additional execution privileges needed. User interaction is not needed for exploitation. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://source.android.com/security/bulletin/pixel/2024-06-01
CVE ID: CVE-2024-32906 State: PUBLISHED Published: 2024-06-13T21:01:59.122Z Last Updated: 2024-08-08T14:06:57.410Z Vendors: Google Products: Android Problem Types: Elevation of privilege Description: In AcvpOnMessage of avcp.cpp, there is a possible EOP due to uninitialized data. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://source.android.com/security/bulletin/pixel/2024-06-01
CVE ID: CVE-2024-32907 State: PUBLISHED Published: 2024-06-13T21:01:59.264Z Last Updated: 2024-08-02T02:20:35.667Z Vendors: Google Products: Android Problem Types: Elevation of privilege Description: In memcall_add of memlog.c, there is a possible buffer overflow due to improper input validation. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://source.android.com/security/bulletin/pixel/2024-06-01
CVE ID: CVE-2024-32908 State: PUBLISHED Published: 2024-06-13T21:01:59.498Z Last Updated: 2024-08-02T02:20:35.677Z Vendors: Google Products: Android Problem Types: Elevation of privilege Description: In sec_media_protect of media.c, there is a possible permission bypass due to a race condition. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://source.android.com/security/bulletin/pixel/2024-06-01
CVE ID: CVE-2024-32909 State: PUBLISHED Published: 2024-06-13T21:01:59.725Z Last Updated: 2024-08-02T02:20:35.608Z Vendors: Google Products: Android Problem Types: Elevation of privilege Description: In handle_msg of main.cpp, there is a possible out of bounds write due to a heap buffer overflow. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://source.android.com/security/bulletin/pixel/2024-06-01
CVE ID: CVE-2024-32910 State: PUBLISHED Published: 2024-06-13T21:01:59.881Z Last Updated: 2025-03-13T13:27:18.635Z Vendors: Google Products: Android Problem Types: Information disclosure Description: In handle_msg_shm_map_req of trusty/user/base/lib/spi/srv/tipc/tipc.c, there is a possible stack data disclosure due to uninitialized data. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://source.android.com/security/bulletin/pixel/2024-06-01
CVE ID: CVE-2024-32911 State: PUBLISHED Published: 2024-06-13T21:02:00.108Z Last Updated: 2024-09-06T23:00:06.219Z Vendors: Google Products: Android Problem Types: Elevation of privilege Description: There is a possible escalation of privilege due to improperly used crypto. This could lead to remote escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://source.android.com/security/bulletin/pixel/2024-06-01
CVE ID: CVE-2024-32912 State: PUBLISHED Published: 2024-06-13T21:02:00.263Z Last Updated: 2025-03-20T14:13:52.530Z Vendors: Google Products: Android Problem Types: Denial of service Description: there is a possible persistent Denial of Service due to test/debugging code left in a production build. This could lead to local denial of service of impaired use of the device with no additional execution privileges needed. User interaction is not needed for exploitation. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://source.android.com/security/bulletin/pixel/2024-06-01
CVE ID: CVE-2024-32913 State: PUBLISHED Published: 2024-06-13T21:02:00.412Z Last Updated: 2024-08-19T13:40:43.079Z Vendors: Google Products: Android Problem Types: Remote code execution Description: In wl_notify_rx_mgmt_frame of wl_cfg80211.c, there is a possible out of bounds write due to an integer overflow. This could lead to remote code execution with no additional execution privileges needed. User interaction is not needed for exploitation. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://source.android.com/security/bulletin/pixel/2024-06-01
CVE ID: CVE-2024-32914 State: PUBLISHED Published: 2024-06-13T21:02:00.561Z Last Updated: 2024-11-06T15:04:00.644Z Vendors: Google Products: Android Problem Types: Information disclosure Description: In tpu_get_int_state of tpu.c, there is a possible information disclosure due to uninitialized data. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://source.android.com/security/bulletin/pixel/2024-06-01
CVE ID: CVE-2024-32915 State: PUBLISHED Published: 2024-06-13T21:02:00.728Z Last Updated: 2024-11-04T17:12:33.894Z Vendors: Google Products: Android Problem Types: Information disclosure Description: In CellInfoListParserV2::FillCellInfo() of protocolnetadapter.cpp, there is a possible out of bounds read due to a missing bounds check. This could lead to local information disclosure with baseband firmware compromise required. User interaction is not needed for exploitation. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://source.android.com/security/bulletin/pixel/2024-06-01
CVE ID: CVE-2024-32916 State: PUBLISHED Published: 2024-06-13T21:02:00.954Z Last Updated: 2024-12-06T17:58:41.792Z Vendors: Google Products: Android Problem Types: Information disclosure Description: In fvp_freq_histogram_init of fvp.c, there is a possible Information Disclosure due to uninitialized data. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://source.android.com/security/bulletin/pixel/2024-06-01
CVE ID: CVE-2024-32917 State: PUBLISHED Published: 2024-06-13T21:02:01.129Z Last Updated: 2024-08-15T15:34:42.289Z Vendors: Google Products: Android Problem Types: Elevation of privilege Description: In pl330_dma_from_peri_start() of fp_spi_dma.c, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://source.android.com/security/bulletin/pixel/2024-06-01
CVE ID: CVE-2024-32918 State: PUBLISHED Published: 2024-06-13T21:02:01.322Z Last Updated: 2024-08-19T13:39:04.813Z Vendors: Google Products: Android Problem Types: Information disclosure Description: Permission Bypass allowing attackers to disable HDCP 2.2 encryption by not completing the HDCP Key Exchange initialization steps Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://source.android.com/security/bulletin/pixel/2024-06-01
CVE ID: CVE-2024-32919 State: PUBLISHED Published: 2024-06-13T21:02:01.482Z Last Updated: 2024-08-02T02:20:35.729Z Vendors: Google Products: Android Problem Types: Elevation of privilege Description: In lwis_add_completion_fence of lwis_fence.c, there is a possible escalation of privilege due to type confusion. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://source.android.com/security/bulletin/pixel/2024-06-01
CVE ID: CVE-2024-32920 State: PUBLISHED Published: 2024-06-13T21:02:01.622Z Last Updated: 2024-11-01T15:36:56.687Z Vendors: Google Products: Android Problem Types: Information disclosure Description: In set_secure_reg of sac_handler.c, there is a possible out of bounds read due to a missing bounds check. This could lead to local information disclosure of 4 bytes of stack memory with no additional execution privileges needed. User interaction is not needed for exploitation. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://source.android.com/security/bulletin/pixel/2024-06-01
CVE ID: CVE-2024-32921 State: PUBLISHED Published: 2024-06-13T21:02:01.771Z Last Updated: 2024-08-20T17:06:05.803Z Vendors: Google Products: Android Problem Types: Elevation of privilege Description: In lwis_initialize_transaction_fences of lwis_fence.c, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://source.android.com/security/bulletin/pixel/2024-06-01
CVE ID: CVE-2024-32922 State: PUBLISHED Published: 2024-06-13T21:02:01.921Z Last Updated: 2024-08-20T17:58:05.720Z Vendors: Google Products: Android Problem Types: Elevation of privilege Description: In gpu_pm_power_on_top_nolock of pixel_gpu_power.c, there is a possible compromise of protected memory due to a logic error in the code. This could lead to local escalation of privilege to TEE with no additional execution privileges needed. User interaction is not needed for exploitation. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://source.android.com/security/bulletin/pixel/2024-06-01
CVE ID: CVE-2024-32923 State: PUBLISHED Published: 2024-06-13T21:02:02.100Z Last Updated: 2024-11-22T18:35:28.693Z Vendors: Google Products: Android Problem Types: Denial of service Description: there is a possible cellular denial of service due to a logic error in the code. This could lead to remote denial of service with no additional execution privileges needed. User interaction is not needed for exploitation. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://source.android.com/security/bulletin/pixel/2024-06-01
CVE ID: CVE-2024-32924 State: PUBLISHED Published: 2024-06-13T21:02:02.256Z Last Updated: 2025-03-27T15:15:26.721Z Vendors: Google Products: Android Problem Types: Denial of service Description: In DeregAcceptProcINT of cn_NrmmStateDeregInit.cpp, there is a possible denial of service due to a logic error in the code. This could lead to remote denial of service with no additional execution privileges needed. User interaction is not needed for exploitation. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://source.android.com/security/bulletin/pixel/2024-06-01
CVE ID: CVE-2024-32925 State: PUBLISHED Published: 2024-06-13T21:02:02.404Z Last Updated: 2024-08-02T02:27:52.371Z Vendors: Google Products: Android Problem Types: Remote code execution Description: In dhd_prot_txstatus_process of dhd_msgbuf.c, there is a possible out of bounds write due to a missing bounds check. This could lead to remote code execution with no additional execution privileges needed. User interaction is not needed for exploitation. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://source.android.com/security/bulletin/pixel/2024-06-01
CVE ID: CVE-2024-32926 State: PUBLISHED Published: 2024-06-13T21:02:02.603Z Last Updated: 2024-11-06T15:38:24.096Z Vendors: Google Products: Android Problem Types: Information disclosure Description: there is a possible information disclosure due to side channel information disclosure. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://source.android.com/security/bulletin/pixel/2024-06-01
CVE ID: CVE-2024-32927 State: PUBLISHED Published: 2024-08-19T16:47:50.955Z Last Updated: 2024-08-19T17:36:28.922Z Vendors: Google Products: Android Problem Types: Elevation of privilege Description: In sendDeviceState_1_6 of RadioExt.cpp, there is a possible use after free due to improper locking. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://source.android.com/security/bulletin/pixel/2024-08-01