Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2021-39671 State: PUBLISHED Published: 2022-02-11T17:40:53 Last Updated: 2024-08-04T02:13:37.632Z Vendors: n/a Products: Android Problem Types: Elevation of privilege Description: In code generated by aidl_const_expressions.cpp, there is a possible out of bounds read due to uninitialized data. This could lead to information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-12Android ID: A-206718630 Additional Analyst Notes: - CVE Program Container: References: - https://source.android.com/security/bulletin/2022-02-01
CVE ID: CVE-2021-39672 State: PUBLISHED Published: 2022-02-11T17:40:56 Last Updated: 2024-08-04T02:13:37.756Z Vendors: n/a Products: Android Problem Types: Elevation of privilege Description: In fastboot, there is a possible secure boot bypass due to a configuration error. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation. Product: Android Versions: Android SoC Android ID: A-202018701 Additional Analyst Notes: - CVE Program Container: References: - https://source.android.com/security/bulletin/2022-02-01
CVE ID: CVE-2021-39674 State: PUBLISHED Published: 2022-02-11T17:40:54 Last Updated: 2024-08-04T02:13:37.586Z Vendors: n/a Products: Android Problem Types: Elevation of privilege Description: In btm_sec_connected and btm_sec_disconnected of btm_sec.cc file , there is a possible use after free. This could lead to local escalation of privilege with User execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-10 Android-11 Android-12Android ID: A-201083442 Additional Analyst Notes: - CVE Program Container: References: - https://source.android.com/security/bulletin/2022-02-01
CVE ID: CVE-2021-39675 State: PUBLISHED Published: 2022-02-11T17:40:55 Last Updated: 2024-08-04T02:13:37.698Z Vendors: n/a Products: Android Problem Types: Elevation of privilege Description: In GKI_getbuf of gki_buffer.cc, there is a possible out of bounds write due to a heap buffer overflow. This could lead to remote escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-12Android ID: A-205729183 Additional Analyst Notes: - CVE Program Container: References: - https://source.android.com/security/bulletin/2022-02-01
CVE ID: CVE-2021-39676 State: PUBLISHED Published: 2022-02-11T17:40:56 Last Updated: 2024-08-04T02:13:37.806Z Vendors: n/a Products: Android Problem Types: Elevation of privilege Description: In writeThrowable of AndroidFuture.java, there is a possible parcel serialization/deserialization mismatch due to improper input validation. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-11Android ID: A-197228210 Additional Analyst Notes: - CVE Program Container: References: - https://source.android.com/security/bulletin/2022-02-01
CVE ID: CVE-2021-39677 State: PUBLISHED Published: 2022-02-11T17:40:59 Last Updated: 2024-08-04T02:13:37.759Z Vendors: n/a Products: Android Problem Types: Information disclosure Description: In startVideoStream() there is a possibility of an OOB Read in the heap, when the camera buffer is ‘zero’ in size.Product: AndroidVersions: Android-11Android ID: A-205097028 Additional Analyst Notes: - CVE Program Container: References: - https://source.android.com/security/bulletin/aaos/2022-02-01
CVE ID: CVE-2021-39678 State: PUBLISHED Published: 2022-01-14T19:11:12 Last Updated: 2024-08-04T02:13:37.744Z Vendors: n/a Products: Android Problem Types: Elevation of privilege Description: In <TBD> of <TBD>, there is a possible bypass of Factory Reset Protection due to <TBD>. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android kernelAndroid ID: A-171742549References: N/A Additional Analyst Notes: - CVE Program Container: References: - https://source.android.com/security/bulletin/pixel/2022-01-01
CVE ID: CVE-2021-39679 State: PUBLISHED Published: 2022-01-14T19:11:13 Last Updated: 2024-08-04T02:13:37.936Z Vendors: n/a Products: Android Problem Types: Elevation of privilege Description: In init of vendor_graphicbuffer_meta.cpp, there is a possible use after free due to a race condition. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android kernelAndroid ID: A-188745089References: N/A Additional Analyst Notes: - CVE Program Container: References: - https://source.android.com/security/bulletin/pixel/2022-01-01
CVE ID: CVE-2021-39680 State: PUBLISHED Published: 2022-01-14T19:11:14 Last Updated: 2024-08-04T02:13:37.729Z Vendors: n/a Products: Android Problem Types: Information disclosure Description: In sec_SHA256_Transform of sha256_core.c, there is a possible way to read heap data due to uninitialized data. This could lead to local information disclosure with System execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android kernelAndroid ID: A-197965864References: N/A Additional Analyst Notes: - CVE Program Container: References: - https://source.android.com/security/bulletin/pixel/2022-01-01
CVE ID: CVE-2021-39681 State: PUBLISHED Published: 2022-01-14T19:11:16 Last Updated: 2024-08-04T02:13:37.669Z Vendors: n/a Products: Android Problem Types: Elevation of privilege Description: In delete_protocol of main.c, there is a possible arbitrary code execution due to a use after free. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android kernelAndroid ID: A-200251074References: N/A Additional Analyst Notes: - CVE Program Container: References: - https://source.android.com/security/bulletin/pixel/2022-01-01
CVE ID: CVE-2021-39682 State: PUBLISHED Published: 2022-01-14T19:11:17 Last Updated: 2024-08-04T02:13:37.776Z Vendors: n/a Products: Android Problem Types: Elevation of privilege Description: In mgm_alloc_page of memory_group_manager.c, there is a possible out of bounds write due to an incorrect bounds check. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android kernelAndroid ID: A-201677538References: N/A Additional Analyst Notes: - CVE Program Container: References: - https://source.android.com/security/bulletin/pixel/2022-01-01
CVE ID: CVE-2021-39683 State: PUBLISHED Published: 2022-01-14T19:11:19 Last Updated: 2024-08-04T02:13:37.642Z Vendors: n/a Products: Android Problem Types: Elevation of privilege Description: In copy_from_mbox of sss_ice_util.c, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android kernelAndroid ID: A-202003354References: N/A Additional Analyst Notes: - CVE Program Container: References: - https://source.android.com/security/bulletin/pixel/2022-01-01
CVE ID: CVE-2021-39684 State: PUBLISHED Published: 2022-01-14T19:11:20 Last Updated: 2024-08-04T02:13:37.757Z Vendors: n/a Products: Android Problem Types: Elevation of privilege Description: In target_init of gs101/abl/target/slider/target.c, there is a possible allocation of RWX memory due to a logic error in the code. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android kernelAndroid ID: A-203250788References: N/A Additional Analyst Notes: - CVE Program Container: References: - https://source.android.com/security/bulletin/pixel/2022-01-01
CVE ID: CVE-2021-39685 State: PUBLISHED Published: 2022-03-16T14:04:07 Last Updated: 2024-08-04T02:13:37.681Z Vendors: n/a Products: Android Problem Types: Elevation of privilege Description: In various setup methods of the USB gadget subsystem, there is a possible out of bounds write due to an incorrect flag check. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android kernelAndroid ID: A-210292376References: Upstream kernel Additional Analyst Notes: - CVE Program Container: References: - https://source.android.com/security/bulletin/2022-03-01
CVE ID: CVE-2021-39686 State: PUBLISHED Published: 2022-03-16T14:04:08 Last Updated: 2024-08-04T02:13:37.689Z Vendors: n/a Products: Android Problem Types: Elevation of privilege Description: In several functions of binder.c, there is a possible way to represent the wrong domain to SELinux due to a race condition. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android kernelAndroid ID: A-200688826References: Upstream kernel Additional Analyst Notes: - CVE Program Container: References: - https://source.android.com/security/bulletin/2022-03-01
CVE ID: CVE-2021-39687 State: PUBLISHED Published: 2022-02-11T17:40:59 Last Updated: 2024-08-04T02:13:37.747Z Vendors: n/a Products: Android Problem Types: Information disclosure Description: In HandleTransactionIoEvent of actuator_driver.cc, there is a possible out of bounds read due to a heap buffer overflow. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android kernelAndroid ID: A-204421047References: N/A Additional Analyst Notes: - CVE Program Container: References: - https://source.android.com/security/bulletin/pixel/2022-02-01
CVE ID: CVE-2021-39688 State: PUBLISHED Published: 2022-02-11T17:41:00 Last Updated: 2024-08-04T02:13:37.777Z Vendors: n/a Products: Android Problem Types: Information disclosure Description: In TBD of TBD, there is a possible out of bounds read due to TBD. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android kernelAndroid ID: A-206039140References: N/A Additional Analyst Notes: - CVE Program Container: References: - https://source.android.com/security/bulletin/pixel/2022-02-01
CVE ID: CVE-2021-39689 State: PUBLISHED Published: 2022-03-16T14:04:09 Last Updated: 2024-08-04T02:13:37.819Z Vendors: n/a Products: Android Problem Types: Elevation of privilege Description: In multiple functions of odsign_main.cpp, there is a possible way to persist system attack due to a logic error in the code. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-12Android ID: A-206090748 Additional Analyst Notes: - CVE Program Container: References: - https://source.android.com/security/bulletin/2022-03-01
CVE ID: CVE-2021-39690 State: PUBLISHED Published: 2022-03-16T14:04:09 Last Updated: 2024-08-04T02:13:37.883Z Vendors: n/a Products: Android Problem Types: Denial of service Description: In setDisplayPadding of WallpaperManagerService.java, there is a possible way to cause a persistent DoS due to improper input validation. This could lead to local denial of service with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-12Android ID: A-204316511 Additional Analyst Notes: - CVE Program Container: References: - https://source.android.com/security/bulletin/2022-03-01
CVE ID: CVE-2021-39691 State: PUBLISHED Published: 2022-06-15T12:57:57 Last Updated: 2024-08-04T02:13:37.719Z Vendors: n/a Products: Android Problem Types: Elevation of privilege Description: In WindowManager, there is a possible tapjacking attack due to an incorrect window flag when processing user input. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is needed for exploitation.Product: AndroidVersions: Android-10 Android-11 Android-12Android ID: A-157929241 Additional Analyst Notes: - CVE Program Container: References: - https://source.android.com/security/bulletin/2022-06-01
CVE ID: CVE-2021-39692 State: PUBLISHED Published: 2022-03-16T14:04:10 Last Updated: 2024-08-04T02:13:37.834Z Vendors: n/a Products: Android Problem Types: Elevation of privilege Description: In onCreate of SetupLayoutActivity.java, there is a possible way to setup a work profile bypassing user consent due to a tapjacking/overlay attack. This could lead to local escalation of privilege with User execution privileges needed. User interaction is needed for exploitation.Product: AndroidVersions: Android-10 Android-11 Android-12Android ID: A-209611539 Additional Analyst Notes: - CVE Program Container: References: - https://source.android.com/security/bulletin/2022-03-01
CVE ID: CVE-2021-39693 State: PUBLISHED Published: 2022-03-16T14:04:11 Last Updated: 2024-08-04T02:13:37.703Z Vendors: n/a Products: Android Problem Types: Elevation of privilege Description: In onUidStateChanged of AppOpsService.java, there is a possible way to access location without a visible indicator due to a logic error in the code. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-12Android ID: A-208662370 Additional Analyst Notes: - CVE Program Container: References: - https://source.android.com/security/bulletin/2022-03-01
CVE ID: CVE-2021-39694 State: PUBLISHED Published: 2022-03-16T14:04:12 Last Updated: 2024-08-04T02:13:37.760Z Vendors: n/a Products: Android Problem Types: Elevation of privilege Description: In parse of RoleParser.java, there is a possible way for default apps to get permissions explicitly denied by the user due to a permissions bypass. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-12Android ID: A-202312327 Additional Analyst Notes: - CVE Program Container: References: - https://source.android.com/security/bulletin/2022-03-01
CVE ID: CVE-2021-39695 State: PUBLISHED Published: 2022-03-16T14:04:12 Last Updated: 2024-08-04T02:13:37.695Z Vendors: n/a Products: Android Problem Types: Elevation of privilege Description: In createOrUpdate of BasePermission.java, there is a possible permission bypass due to a logic error in the code. This could lead to local escalation of privilege with User execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-11Android ID: A-209607944 Additional Analyst Notes: - CVE Program Container: References: - https://source.android.com/security/bulletin/2022-03-01
CVE ID: CVE-2021-39696 State: PUBLISHED Published: 2022-08-09T20:20:24 Last Updated: 2024-08-04T02:13:37.703Z Vendors: n/a Products: Android Problem Types: Elevation of privilege Description: In Task.java, there is a possible escalation of privilege due to a confused deputy. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is needed for exploitation.Product: AndroidVersions: Android-10 Android-11 Android-12Android ID: A-185810717 Additional Analyst Notes: - CVE Program Container: References: - https://source.android.com/security/bulletin/2022-08-01
CVE ID: CVE-2021-39697 State: PUBLISHED Published: 2022-03-16T14:04:13 Last Updated: 2024-08-04T02:13:37.825Z Vendors: n/a Products: Android Problem Types: Elevation of privilege Description: In checkFileUriDestination of DownloadProvider.java, there is a possible way to bypass external storage private directories protection due to a missing permission check. This could lead to local escalation of privilege with User execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-11 Android-12Android ID: A-200813547 Additional Analyst Notes: - CVE Program Container: References: - https://source.android.com/security/bulletin/2022-03-01
CVE ID: CVE-2021-39698 State: PUBLISHED Published: 2022-03-16T14:04:14 Last Updated: 2024-08-04T02:13:37.664Z Vendors: n/a Products: Android Problem Types: Elevation of privilege Description: In aio_poll_complete_work of aio.c, there is a possible memory corruption due to a use after free. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android kernelAndroid ID: A-185125206References: Upstream kernel Additional Analyst Notes: - CVE Program Container: References: - https://source.android.com/security/bulletin/2022-03-01
CVE ID: CVE-2021-39700 State: PUBLISHED Published: 2022-05-10T19:54:59 Last Updated: 2024-08-04T02:13:37.883Z Vendors: n/a Products: Android Problem Types: Information disclosure Description: In the policies of adbd.te, there was a logic error which caused the CTS Listening Ports Test to report invalid results. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-10 Android-11 Android-12Android ID: A-201645790 Additional Analyst Notes: - CVE Program Container: References: - https://source.android.com/security/bulletin/2022-05-01
CVE ID: CVE-2021-39701 State: PUBLISHED Published: 2022-03-16T14:04:15 Last Updated: 2024-08-04T02:13:37.761Z Vendors: n/a Products: Android Problem Types: Elevation of privilege Description: In serviceConnection of ControlsProviderLifecycleManager.kt, there is a possible way to keep service running in foreground without notification or permission due to improper input validation. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is needed for exploitation.Product: AndroidVersions: Android-11 Android-12Android ID: A-212286849 Additional Analyst Notes: - CVE Program Container: References: - https://source.android.com/security/bul
ID: A-212286849 Additional Analyst Notes: - CVE Program Container: References: - https://source.android.com/security/bulletin/2022-03-01
CVE ID: CVE-2021-39702 State: PUBLISHED Published: 2022-03-16T14:04:15 Last Updated: 2024-08-04T02:13:37.964Z Vendors: n/a Products: Android Problem Types: Elevation of privilege Description: In onCreate of RequestManageCredentials.java, there is a possible way for a third party app to install certificates without user approval due to a tapjacking/overlay attack. This could lead to local escalation of privilege with User execution privileges needed. User interaction is needed for exploitation.Product: AndroidVersions: Android-12Android ID: A-205150380 Additional Analyst Notes: - CVE Program Container: References: - https://source.android.com/security/bulletin/2022-03-01
CVE ID: CVE-2021-39703 State: PUBLISHED Published: 2022-03-16T14:04:16 Last Updated: 2024-08-04T02:13:37.804Z Vendors: n/a Products: Android Problem Types: Elevation of privilege Description: In updateState of UsbDeviceManager.java, there is a possible unauthorized access of files due to a confused deputy. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-12Android ID: A-207057578 Additional Analyst Notes: - CVE Program Container: References: - https://source.android.com/security/bulletin/2022-03-01
CVE ID: CVE-2021-39704 State: PUBLISHED Published: 2022-03-16T14:04:17 Last Updated: 2024-08-04T02:13:37.838Z Vendors: n/a Products: Android Problem Types: Elevation of privilege Description: In deleteNotificationChannelGroup of NotificationManagerService.java, there is a possible way to run foreground service without user notification due to a permissions bypass. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-10 Android-11 Android-12Android ID: A-209965481 Additional Analyst Notes: - CVE Program Container: References: - https://source.android.com/security/bulle
: A-209965481 Additional Analyst Notes: - CVE Program Container: References: - https://source.android.com/security/bulletin/2022-03-01
CVE ID: CVE-2021-39705 State: REJECTED Published: 2022-03-16T14:04:18 Last Updated: 2022-05-26T16:21:26 Description: No description available.
CVE ID: CVE-2021-39706 State: PUBLISHED Published: 2022-03-16T14:04:19 Last Updated: 2024-08-04T02:13:37.784Z Vendors: n/a Products: Android Problem Types: Elevation of privilege Description: In onResume of CredentialStorage.java, there is a possible way to cleanup content of credentials storage due to a missing permission check. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is needed for exploitation.Product: AndroidVersions: Android-10 Android-11 Android-12Android ID: A-200164168 Additional Analyst Notes: - CVE Program Container: References: - https://source.android.com/security/bulletin/2022-03-01
CVE ID: CVE-2021-39707 State: PUBLISHED Published: 2022-03-16T14:04:20 Last Updated: 2024-08-04T02:13:37.979Z Vendors: n/a Products: Android Problem Types: Elevation of privilege Description: In onReceive of AppRestrictionsFragment.java, there is a possible way to start a phone call without permissions due to a confused deputy. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-10 Android-11 Android-12Android ID: A-200688991 Additional Analyst Notes: - CVE Program Container: References: - https://source.android.com/security/bulletin/2022-03-01
CVE ID: CVE-2021-39708 State: PUBLISHED Published: 2022-03-16T14:04:20 Last Updated: 2024-08-04T02:13:37.879Z Vendors: n/a Products: Android Problem Types: Elevation of privilege Description: In gatt_process_notification of gatt_cl.cc, there is a possible out of bounds write due to an incorrect bounds check. This could lead to remote escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-12Android ID: A-206128341 Additional Analyst Notes: - CVE Program Container: References: - https://source.android.com/security/bulletin/2022-03-01
CVE ID: CVE-2021-39709 State: PUBLISHED Published: 2022-03-16T14:04:21 Last Updated: 2024-08-04T02:13:37.802Z Vendors: n/a Products: Android Problem Types: Elevation of privilege Description: In sendSipAccountsRemovedNotification of SipAccountRegistry.java, there is a possible permission bypass due to an unsafe PendingIntent. This could lead to local escalation of privilege with User execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-12Android ID: A-208817618 Additional Analyst Notes: - CVE Program Container: References: - https://source.android.com/security/bulletin/2022-03-01
CVE ID: CVE-2021-39710 State: PUBLISHED Published: 2022-03-16T14:03:41 Last Updated: 2024-08-04T02:13:37.930Z Vendors: n/a Products: Android Problem Types: Elevation of privilege Description: Product: AndroidVersions: Android kernelAndroid ID: A-202160245References: N/A Additional Analyst Notes: - CVE Program Container: References: - https://source.android.com/security/bulletin/pixel/2022-03-01