Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2022-20519 State: PUBLISHED Published: 2022-12-16T00:00:00.000Z Last Updated: 2025-04-18T15:54:04.210Z Vendors: n/a Products: Android Problem Types: Elevation of privilege Description: In onCreate of AddAppNetworksActivity.java, there is a possible way for a guest user to configure WiFi networks due to a missing permission check. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-13Android ID: A-224772678 Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://source.android.com/security/bulletin/pixel/2022-12-01
CVE ID: CVE-2022-20520 State: PUBLISHED Published: 2022-12-16T00:00:00.000Z Last Updated: 2025-04-18T15:53:17.552Z Vendors: n/a Products: Android Problem Types: Elevation of privilege Description: In onCreate of various files, there is a possible tapjacking/overlay attack. This could lead to local escalation of privilege or denial of server with User execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-13Android ID: A-227203202 Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://source.android.com/security/bulletin/pixel/2022-12-01
CVE ID: CVE-2022-20521 State: PUBLISHED Published: 2022-12-16T00:00:00.000Z Last Updated: 2025-04-23T19:59:35.821Z Vendors: n/a Products: Android Problem Types: Denial of service Description: In sdpu_find_most_specific_service_uuid of sdp_utils.cc, there is a possible way to crash Bluetooth due to a missing null check. This could lead to local denial of service with no additional execution privileges needed. User interaction is needed for exploitation.Product: AndroidVersions: Android-13Android ID: A-227203684 Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://source.android.com/security/bulletin/pixel/2022-12-01
CVE ID: CVE-2022-20522 State: PUBLISHED Published: 2022-12-16T00:00:00.000Z Last Updated: 2025-04-18T15:50:12.727Z Vendors: n/a Products: Android Problem Types: Elevation of privilege Description: In getSlice of ProviderModelSlice.java, there is a missing permission check. This could lead to local escalation of privilege from the guest user with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-13Android ID: A-227470877 Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://source.android.com/security/bulletin/pixel/2022-12-01
CVE ID: CVE-2022-20523 State: PUBLISHED Published: 2022-12-16T00:00:00.000Z Last Updated: 2025-04-21T13:26:21.818Z Vendors: n/a Products: Android Problem Types: Information disclosure Description: In IncFs_GetFilledRangesStartingFrom of incfs.cpp, there is a possible out of bounds read due to a missing bounds check. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-13Android ID: A-228222508 Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://source.android.com/security/bulletin/pixel/2022-12-01
CVE ID: CVE-2022-20524 State: PUBLISHED Published: 2022-12-16T00:00:00.000Z Last Updated: 2025-04-21T13:25:16.508Z Vendors: n/a Products: Android Problem Types: Elevation of privilege Description: In compose of Vibrator.cpp, there is a possible arbitrary code execution due to a use after free. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-13Android ID: A-228523213 Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://source.android.com/security/bulletin/pixel/2022-12-01
CVE ID: CVE-2022-20525 State: PUBLISHED Published: 2022-12-16T00:00:00.000Z Last Updated: 2025-04-21T13:23:51.348Z Vendors: n/a Products: Android Problem Types: Elevation of privilege Description: In enforceVisualVoicemailPackage of PhoneInterfaceManager.java, there is a possible leak of visual voicemail package name due to a permissions bypass. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-13Android ID: A-229742768 Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://source.android.com/security/bulletin/pixel/2022-1
CVE Program Container: - CISA ADP Vulnrichment: References: - https://source.android.com/security/bulletin/pixel/2022-12-01
CVE ID: CVE-2022-20526 State: PUBLISHED Published: 2022-12-16T00:00:00.000Z Last Updated: 2025-04-21T13:22:48.043Z Vendors: n/a Products: Android Problem Types: Elevation of privilege Description: In CanvasContext::draw of CanvasContext.cpp, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is needed for exploitation.Product: AndroidVersions: Android-13Android ID: A-229742774 Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://source.android.com/security/bulletin/pixel/2022-12-01
CVE ID: CVE-2022-20527 State: PUBLISHED Published: 2022-12-16T00:00:00.000Z Last Updated: 2025-04-21T13:21:49.099Z Vendors: n/a Products: Android Problem Types: Information disclosure Description: In HalCoreCallback of halcore.cc, there is a possible out of bounds read due to a missing bounds check. This could lead to local information disclosure from the NFC firmware with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-13Android ID: A-229994861 Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://source.android.com/security/bulletin/pixel/2022-12-01
CVE ID: CVE-2022-20528 State: PUBLISHED Published: 2022-12-16T00:00:00.000Z Last Updated: 2025-04-18T15:48:19.285Z Vendors: n/a Products: Android Problem Types: Information disclosure Description: In findParam of HevcUtils.cpp there is a possible out of bounds read due to a missing bounds check. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-13Android ID: A-230172711 Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://source.android.com/security/bulletin/pixel/2022-12-01
CVE ID: CVE-2022-20529 State: PUBLISHED Published: 2022-12-16T00:00:00.000Z Last Updated: 2025-04-18T15:47:25.776Z Vendors: n/a Products: Android Problem Types: Elevation of privilege Description: In multiple locations of WifiDialogActivity.java, there is a possible limited lockscreen bypass due to a logic error in the code. This could lead to local escalation of privilege in wifi settings with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-13Android ID: A-231583603 Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://source.android.com/security/bulletin/pixel/2022-12-01
CVE ID: CVE-2022-20530 State: PUBLISHED Published: 2022-12-16T00:00:00.000Z Last Updated: 2025-04-18T15:45:02.082Z Vendors: n/a Products: Android Problem Types: Information disclosure Description: In strings.xml, there is a possible permission bypass due to a misleading string. This could lead to remote information disclosure of call logs with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-13Android ID: A-231585645 Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://source.android.com/security/bulletin/pixel/2022-12-01
CVE ID: CVE-2022-20531 State: PUBLISHED Published: 2023-10-30T16:18:54.199Z Last Updated: 2024-12-03T14:36:32.654Z Vendors: Google Products: Android Problem Types: Information disclosure Description: In Telecom, there is a possible way to determine whether an app is installed, without query permissions, due to side channel information disclosure. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://source.android.com/docs/security/bulletin/android-14
CVE ID: CVE-2022-20532 State: PUBLISHED Published: 2023-03-24T00:00:00.000Z Last Updated: 2025-02-28T20:04:10.862Z Vendors: n/a Products: Android Problem Types: Elevation of privilege Description: In parseTrackFragmentRun() of MPEG4Extractor.cpp, there is a possible out of bounds read due to an integer overflow. This could lead to remote escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-13Android ID: A-232242894 Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://source.android.com/security/bulletin/pixel/2023-03-01
CVE ID: CVE-2022-20533 State: PUBLISHED Published: 2022-12-16T00:00:00.000Z Last Updated: 2025-04-18T15:43:34.184Z Vendors: n/a Products: Android Problem Types: Elevation of privilege Description: In getSlice of WifiSlice.java, there is a possible way to connect a new WiFi network from the guest mode due to a missing permission check. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-13Android ID: A-232798363 Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://source.android.com/security/bulletin/pixel/2022-12-01
CVE ID: CVE-2022-20535 State: PUBLISHED Published: 2022-12-16T00:00:00.000Z Last Updated: 2025-04-18T15:42:49.245Z Vendors: n/a Products: Android Problem Types: Information disclosure Description: In registerLocalOnlyHotspotSoftApCallback of WifiManager.java, there is a possible way to determine whether an app is installed, without query permissions, due to side channel information disclosure. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-13Android ID: A-233605242 Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://s
roid ID: A-233605242 Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://source.android.com/security/bulletin/pixel/2022-12-01
CVE ID: CVE-2022-20536 State: PUBLISHED Published: 2022-12-16T00:00:00.000Z Last Updated: 2025-04-18T15:41:40.617Z Vendors: n/a Products: Android Problem Types: Elevation of privilege Description: In registerBroadcastReceiver of RcsService.java, there is a possible way to change preferred TTY mode due to a missing permission check. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-13Android ID: A-235100180 Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://source.android.com/security/bulletin/pixel/2022-12-01
CVE ID: CVE-2022-20537 State: PUBLISHED Published: 2022-12-16T00:00:00.000Z Last Updated: 2025-04-18T15:38:19.984Z Vendors: n/a Products: Android Problem Types: Elevation of privilege Description: In createDialog of WifiScanModeActivity.java, there is a possible way for a Guest user to enable location-sensitive settings due to a missing permission check. This could lead to local escalation of privilege from the Guest user with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-13Android ID: A-235601169 Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://source.android.com/s
9 Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://source.android.com/security/bulletin/pixel/2022-12-01
CVE ID: CVE-2022-20538 State: PUBLISHED Published: 2022-12-16T00:00:00.000Z Last Updated: 2025-04-18T15:37:32.243Z Vendors: n/a Products: Android Problem Types: Information disclosure Description: In getSmsRoleHolder of RoleService.java, there is a possible way to determine whether an app is installed, without query permissions, due to side channel information disclosure. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-13Android ID: A-235601770 Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://source.android.com/secu
dditional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://source.android.com/security/bulletin/pixel/2022-12-01
CVE ID: CVE-2022-20539 State: PUBLISHED Published: 2022-12-16T00:00:00.000Z Last Updated: 2025-04-18T15:36:50.669Z Vendors: n/a Products: Android Problem Types: Elevation of privilege Description: In parameterToHal of Effect.cpp, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege in the audio server with System execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-13Android ID: A-237291425 Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://source.android.com/security/bulletin/pixel/2022-12-01
CVE ID: CVE-2022-20540 State: PUBLISHED Published: 2022-12-16T00:00:00.000Z Last Updated: 2025-04-18T15:36:06.164Z Vendors: n/a Products: Android Problem Types: Elevation of privilege Description: In SurfaceFlinger::doDump of SurfaceFlinger.cpp, there is possible arbitrary code execution due to a use after free. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-13Android ID: A-237291506 Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://source.android.com/security/bulletin/pixel/2022-12-01
CVE ID: CVE-2022-20541 State: PUBLISHED Published: 2022-12-16T00:00:00.000Z Last Updated: 2025-04-21T13:20:28.283Z Vendors: n/a Products: Android Problem Types: Information disclosure Description: In phNxpNciHal_ioctl of phNxpNciHal.cc, there is a possible out of bounds read due to a missing bounds check. This could lead to local information disclosure with System execution privileges needed. User interaction is needed for exploitation.Product: AndroidVersions: Android-13Android ID: A-238083126 Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://source.android.com/security/bulletin/pixel/2022-12-01
CVE ID: CVE-2022-20542 State: PUBLISHED Published: 2023-03-24T00:00:00.000Z Last Updated: 2025-02-28T20:07:03.261Z Vendors: n/a Products: Android Problem Types: Elevation of privilege Description: In parseParamsBlob of types.cpp, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-13Android ID: A-238083570 Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://source.android.com/security/bulletin/pixel/2023-03-01
CVE ID: CVE-2022-20543 State: PUBLISHED Published: 2022-12-16T00:00:00.000Z Last Updated: 2025-04-21T13:19:16.111Z Vendors: n/a Products: Android Problem Types: Denial of service Description: In multiple locations, there is a possible display crash loop due to improper input validation. This could lead to local denial of service with system execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-13Android ID: A-238178261 Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://source.android.com/security/bulletin/pixel/2022-12-01
CVE ID: CVE-2022-20544 State: PUBLISHED Published: 2022-12-16T00:00:00.000Z Last Updated: 2025-04-21T13:17:43.030Z Vendors: n/a Products: Android Problem Types: Elevation of privilege Description: In onOptionsItemSelected of ManageApplications.java, there is a possible bypass of profile owner restrictions due to a missing permission check. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-13Android ID: A-238745070 Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://source.android.com/security/bulletin/pixel/2022-12-01
CVE ID: CVE-2022-20545 State: PUBLISHED Published: 2022-12-16T00:00:00.000Z Last Updated: 2025-04-21T13:15:56.403Z Vendors: n/a Products: Android Problem Types: Denial of service Description: In bindArtworkAndColors of MediaControlPanel.java, there is a possible way to crash the phone due to improper input validation. This could lead to remote denial of service with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-13Android ID: A-239368697 Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://source.android.com/security/bulletin/pixel/2022-12-01
CVE ID: CVE-2022-20546 State: PUBLISHED Published: 2022-12-16T00:00:00.000Z Last Updated: 2025-04-21T13:14:50.653Z Vendors: n/a Products: Android Problem Types: Elevation of privilege Description: In getCurrentConfigImpl of Effect.cpp, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-13Android ID: A-240266798 Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://source.android.com/security/bulletin/pixel/2022-12-01
CVE ID: CVE-2022-20547 State: PUBLISHED Published: 2022-12-16T00:00:00.000Z Last Updated: 2025-04-21T02:57:10.016Z Vendors: n/a Products: Android Problem Types: Elevation of privilege Description: In multiple functions of AdapterService.java, there is a possible way to manipulate Bluetooth state due to a missing permission check. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-13Android ID: A-240301753 Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://source.android.com/security/bulletin/pixel/2022-12-01
CVE ID: CVE-2022-20548 State: PUBLISHED Published: 2022-12-16T00:00:00.000Z Last Updated: 2025-04-18T20:42:15.109Z Vendors: n/a Products: Android Problem Types: Elevation of privilege Description: In setParameter of EqualizerEffect.cpp, there is a possible out of bounds write due to improper input validation. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-13Android ID: A-240919398 Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://source.android.com/security/bulletin/pixel/2022-12-01
CVE ID: CVE-2022-20549 State: PUBLISHED Published: 2022-12-16T00:00:00.000Z Last Updated: 2025-04-18T20:13:49.138Z Vendors: n/a Products: Android Problem Types: Elevation of privilege Description: In authToken2AidlVec of KeyMintUtils.cpp, there is a possible out of bounds write due to an incorrect bounds check. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-13Android ID: A-242702451 Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://source.android.com/security/bulletin/pixel/2022-12-01
CVE ID: CVE-2022-20550 State: PUBLISHED Published: 2022-12-16T00:00:00.000Z Last Updated: 2025-04-18T15:35:26.632Z Vendors: n/a Products: Android Problem Types: Elevation of privilege Description: In Multiple Locations, there is a possibility to launch arbitrary protected activities due to a confused deputy. This could lead to local escalation of privilege with User execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-13Android ID: A-242845514 Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://source.android.com/security/bulletin/pixel/2022-12-01
CVE ID: CVE-2022-20551 State: PUBLISHED Published: 2023-02-28T00:00:00.000Z Last Updated: 2025-03-21T16:03:49.222Z Vendors: n/a Products: Android Problem Types: Elevation of privilege Description: In createTrack of AudioFlinger.cpp, there is a possible way to record audio without a privacy indicator due to a logic error in the code. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-12 Android-12L Android-13Android ID: A-243376549 Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://source.android.com/security/bulletin/2023-02-0
: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://source.android.com/security/bulletin/2023-02-01
CVE ID: CVE-2022-20552 State: PUBLISHED Published: 2022-12-16T00:00:00.000Z Last Updated: 2025-04-18T15:34:35.345Z Vendors: n/a Products: Android Problem Types: Information disclosure Description: In btif_a2dp_sink_command_ready of btif_a2dp_sink.cc, there is a possible out of bounds read due to a use after free. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-13Android ID: A-243922806 Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://source.android.com/security/bulletin/pixel/2022-12-01
CVE ID: CVE-2022-20553 State: PUBLISHED Published: 2022-12-16T00:00:00.000Z Last Updated: 2025-04-18T15:33:46.566Z Vendors: n/a Products: Android Problem Types: Elevation of privilege Description: In onCreate of LogAccessDialogActivity.java, there is a possible way to bypass a permission check due to a tapjacking/overlay attack. This could lead to local escalation of privilege with System execution privileges needed. User interaction is needed for exploitation.Product: AndroidVersions: Android-13Android ID: A-244155265 Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://source.android.com/security/bulletin/pixel/2022-12-01
CVE ID: CVE-2022-20554 State: PUBLISHED Published: 2022-12-16T00:00:00.000Z Last Updated: 2025-04-18T15:32:53.162Z Vendors: n/a Products: Android Problem Types: Elevation of privilege Description: In removeEventHubDevice of InputDevice.cpp, there is a possible OOB read due to a use after free. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-13Android ID: A-245770596 Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://source.android.com/security/bulletin/pixel/2022-12-01