Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2022-20487 State: PUBLISHED Published: 2022-12-13T00:00:00.000Z Last Updated: 2025-04-22T14:10:18.043Z Vendors: n/a Products: Android Problem Types: Elevation of privilege Description: In NotificationChannel of NotificationChannel.java, there is a possible failure to persist permissions settings due to resource exhaustion. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-10 Android-11 Android-12 Android-12L Android-13Android ID: A-242703202 Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://source.android.
703202 Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://source.android.com/security/bulletin/2022-12-01
CVE ID: CVE-2022-20488 State: PUBLISHED Published: 2022-12-13T00:00:00.000Z Last Updated: 2025-04-22T14:09:02.518Z Vendors: n/a Products: Android Problem Types: Elevation of privilege Description: In NotificationChannel of NotificationChannel.java, there is a possible failure to persist permissions settings due to resource exhaustion. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-10 Android-11 Android-12 Android-12L Android-13Android ID: A-242703217 Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://source.android.
703217 Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://source.android.com/security/bulletin/2022-12-01
CVE ID: CVE-2022-20489 State: PUBLISHED Published: 2023-01-24T00:00:00.000Z Last Updated: 2025-04-02T15:20:29.038Z Vendors: n/a Products: Android Problem Types: Elevation of privilege Description: In many functions of AutomaticZenRule.java, there is a possible failure to persist permissions settings due to resource exhaustion. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-10 Android-11 Android-12 Android-12L Android-13Android ID: A-242703460 Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://source.android.com/secu
dditional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://source.android.com/security/bulletin/2023-01-01
CVE ID: CVE-2022-20490 State: PUBLISHED Published: 2023-01-24T00:00:00.000Z Last Updated: 2025-04-01T19:35:09.919Z Vendors: n/a Products: Android Problem Types: Elevation of privilege Description: In multiple functions of AutomaticZenRule.java, there is a possible failure to persist permissions settings due to resource exhaustion. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-10 Android-11 Android-12 Android-12L Android-13Android ID: A-242703505 Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://source.android.com/
05 Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://source.android.com/security/bulletin/2023-01-01
CVE ID: CVE-2022-20491 State: PUBLISHED Published: 2022-12-13T00:00:00.000Z Last Updated: 2025-04-22T14:07:30.752Z Vendors: n/a Products: Android Problem Types: Elevation of privilege Description: In NotificationChannel of NotificationChannel.java, there is a possible failure to persist permissions settings due to resource exhaustion. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-10 Android-11 Android-12 Android-12L Android-13Android ID: A-242703556 Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://source.android.
703556 Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://source.android.com/security/bulletin/2022-12-01
CVE ID: CVE-2022-20492 State: PUBLISHED Published: 2023-01-24T00:00:00.000Z Last Updated: 2025-04-03T20:09:21.679Z Vendors: n/a Products: Android Problem Types: Elevation of privilege Description: In many functions of AutomaticZenRule.java, there is a possible failure to persist permissions settings due to resource exhaustion. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-10 Android-11 Android-12 Android-12L Android-13Android ID: A-242704043 Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://source.android.com/secu
CVE ID: CVE-2022-20493 State: PUBLISHED Published: 2023-01-24T00:00:00.000Z Last Updated: 2025-04-03T20:09:52.547Z Vendors: n/a Products: Android Problem Types: Elevation of privilege Description: In Condition of Condition.java, there is a possible way to grant notification access due to improper input validation. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is needed for exploitation.Product: AndroidVersions: Android-10 Android-11 Android-12 Android-12L Android-13Android ID: A-242846316 Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://source.android.com/security/bulletin/202
Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://source.android.com/security/bulletin/2023-01-01
CVE ID: CVE-2022-20494 State: PUBLISHED Published: 2023-01-24T00:00:00.000Z Last Updated: 2025-04-03T20:10:27.210Z Vendors: n/a Products: Android Problem Types: Denial of service Description: In AutomaticZenRule of AutomaticZenRule.java, there is a possible persistent DoS due to resource exhaustion. This could lead to local denial of service with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-10 Android-11 Android-12 Android-12L Android-13Android ID: A-243794204 Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://source.android.com/security/bulletin/2023-01-01
CVE ID: CVE-2022-20495 State: PUBLISHED Published: 2022-12-13T00:00:00.000Z Last Updated: 2025-04-22T14:06:09.114Z Vendors: n/a Products: Android Problem Types: Elevation of privilege Description: In getEnabledAccessibilityServiceList of AccessibilityManager.java, there is a possible way to hide an accessibility service due to a logic error in the code. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-10 Android-11 Android-12 Android-12L Android-13Android ID: A-243849844 Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - http
13Android ID: A-243849844 Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://source.android.com/security/bulletin/2022-12-01
CVE ID: CVE-2022-20496 State: PUBLISHED Published: 2022-12-13T00:00:00.000Z Last Updated: 2025-04-22T14:04:47.790Z Vendors: n/a Products: Android Problem Types: Information disclosure Description: In setDataSource of initMediaExtractor.cpp, there is a possibility of arbitrary code execution due to a use after free. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-12 Android-12L Android-13Android ID: A-245242273 Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://source.android.com/security/bulletin/2022-12-01
CVE ID: CVE-2022-20497 State: PUBLISHED Published: 2022-12-13T00:00:00.000Z Last Updated: 2025-04-22T14:02:02.090Z Vendors: n/a Products: Android Problem Types: Information disclosure Description: In updatePublicMode of NotificationLockscreenUserManagerImpl.java, there is a possible way to reveal sensitive notifications on the lockscreen due to an incorrect state transition. This could lead to local information disclosure with physical access required and an app that runs above the lockscreen, with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-12 Android-12L Android-13Android ID: A-246301979 Additional Analyst Not
r exploitation.Product: AndroidVersions: Android-12 Android-12L Android-13Android ID: A-246301979 Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://source.android.com/security/bulletin/2022-12-01
CVE ID: CVE-2022-20498 State: PUBLISHED Published: 2022-12-13T00:00:00.000Z Last Updated: 2025-04-22T13:58:17.730Z Vendors: n/a Products: Android Problem Types: Information disclosure Description: In fdt_path_offset_namelen of fdt_ro.c, there is a possible out of bounds read due to an incorrect bounds check. This could lead to local information disclosure with System execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-10 Android-11 Android-12 Android-12L Android-13Android ID: A-246465319 Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://source.android.com/security/bulletin/2022-12-01
CVE ID: CVE-2022-20499 State: PUBLISHED Published: 2023-03-24T00:00:00.000Z Last Updated: 2025-02-28T20:02:30.887Z Vendors: n/a Products: Android Problem Types: Denial of service Description: In validateForCommonR1andR2 of PasspointConfiguration.java, uncaught errors in parsing stored configs could lead to local persistent denial of service with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-12 Android-12L Android-13Android ID: A-246539931 Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://source.android.com/security/bulletin/2023-03-01
CVE ID: CVE-2022-20500 State: PUBLISHED Published: 2022-12-13T00:00:00.000Z Last Updated: 2025-04-22T13:52:57.629Z Vendors: n/a Products: Android Problem Types: Denial of service Description: In loadFromXml of ShortcutPackage.java, there is a possible crash on boot due to an uncaught exception. This could lead to local denial of service with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-10 Android-11 Android-12 Android-12L Android-13Android ID: A-246540168 Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://source.android.com/security/bulletin/2022-12-01
CVE ID: CVE-2022-20501 State: PUBLISHED Published: 2022-12-13T00:00:00.000Z Last Updated: 2025-04-22T17:35:15.114Z Vendors: n/a Products: Android Problem Types: Elevation of privilege Description: In onCreate of EnableAccountPreferenceActivity.java, there is a possible way to mislead the user into enabling a malicious phone account due to a tapjacking/overlay attack. This could lead to local escalation of privilege with User execution privileges needed. User interaction is needed for exploitation.Product: AndroidVersions: Android-10 Android-11 Android-12 Android-12L Android-13Android ID: A-246933359 Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - htt
-13Android ID: A-246933359 Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://source.android.com/security/bulletin/2022-12-01
CVE ID: CVE-2022-20502 State: PUBLISHED Published: 2022-12-13T00:00:00.000Z Last Updated: 2025-04-22T17:17:27.212Z Vendors: n/a Products: Android Problem Types: Information disclosure Description: In GetResolvedMethod of entrypoint_utils-inl.h, there is a possible use after free due to a stale cache. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-13Android ID: A-222166527 Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://source.android.com/security/bulletin/2022-12-01
CVE ID: CVE-2022-20503 State: PUBLISHED Published: 2022-12-16T00:00:00.000Z Last Updated: 2025-04-21T13:41:02.095Z Vendors: n/a Products: Android Problem Types: Elevation of privilege Description: In onCreate of WifiDppConfiguratorActivity.java, there is a possible way for a guest user to add a WiFi configuration due to a missing permission check. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-13Android ID: A-224772890 Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://source.android.com/security/bulletin/pixel/2022
- CVE Program Container: - CISA ADP Vulnrichment: References: - https://source.android.com/security/bulletin/pixel/2022-12-01
CVE ID: CVE-2022-20504 State: PUBLISHED Published: 2022-12-16T00:00:00.000Z Last Updated: 2025-04-21T13:39:45.993Z Vendors: n/a Products: Android Problem Types: Elevation of privilege Description: In multiple locations of DreamManagerService.java, there is a missing permission check. This could lead to local escalation of privilege and dismissal of system dialogs with User execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-13Android ID: A-225878553 Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://source.android.com/security/bulletin/pixel/2022-12-01
CVE ID: CVE-2022-20505 State: PUBLISHED Published: 2022-12-16T00:00:00.000Z Last Updated: 2025-04-21T13:38:21.107Z Vendors: n/a Products: Android Problem Types: Elevation of privilege Description: In openFile of CallLogProvider.java, there is a possible permission bypass due to a path traversal error. This could lead to local escalation of privilege with User execution privileges needed. User interaction is not needed for exploitationProduct: AndroidVersions: Android-13Android ID: A-225981754 Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://source.android.com/security/bulletin/pixel/2022-12-01
CVE ID: CVE-2022-20506 State: PUBLISHED Published: 2022-12-16T00:00:00.000Z Last Updated: 2025-04-21T13:33:41.203Z Vendors: n/a Products: Android Problem Types: Elevation of privilege Description: In onCreate of WifiDialogActivity.java, there is a missing permission check. This could lead to local escalation of privilege from a guest user with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-13Android ID: A-226133034 Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://source.android.com/security/bulletin/pixel/2022-12-01
CVE ID: CVE-2022-20507 State: PUBLISHED Published: 2022-12-16T00:00:00.000Z Last Updated: 2025-04-21T13:32:14.571Z Vendors: n/a Products: Android Problem Types: Elevation of privilege Description: In onMulticastListUpdateNotificationReceived of UwbEventManager.java, there is a possible arbitrary code execution due to a missing bounds check. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-13Android ID: A-246649179 Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://source.android.com/security/bulletin/pixel/2022-12-01
CVE ID: CVE-2022-20508 State: PUBLISHED Published: 2022-12-16T00:00:00.000Z Last Updated: 2025-04-21T13:30:51.201Z Vendors: n/a Products: Android Problem Types: Elevation of privilege Description: In onAttach of ConfigureWifiSettings.java, there is a possible way for a guest user to change WiFi settings due to a permissions bypass. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-13Android ID: A-218679614 Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://source.android.com/security/bulletin/pixel/2022-12-01
CVE ID: CVE-2022-20509 State: PUBLISHED Published: 2022-12-16T00:00:00.000Z Last Updated: 2025-04-21T13:29:44.833Z Vendors: n/a Products: Android Problem Types: Elevation of privilege Description: In mapGrantorDescr of MessageQueueBase.h, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-13Android ID: A-244713317 Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://source.android.com/security/bulletin/pixel/2022-12-01
CVE ID: CVE-2022-20510 State: PUBLISHED Published: 2022-12-16T00:00:00.000Z Last Updated: 2025-04-21T13:28:25.561Z Vendors: n/a Products: Android Problem Types: Information disclosure Description: In getNearbyNotificationStreamingPolicy of DevicePolicyManagerService.java, there is a possible way to learn about the notification streaming policy of other users due to a permissions bypass. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-13Android ID: A-235822336 Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://source.a
: A-235822336 Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://source.android.com/security/bulletin/pixel/2022-12-01
CVE ID: CVE-2022-20511 State: PUBLISHED Published: 2022-12-16T00:00:00.000Z Last Updated: 2025-04-21T14:14:37.457Z Vendors: n/a Products: Android Problem Types: Information disclosure Description: In getNearbyAppStreamingPolicy of DevicePolicyManagerService.java, there is a missing permission check. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-13Android ID: A-235821829 Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://source.android.com/security/bulletin/pixel/2022-12-01
CVE ID: CVE-2022-20512 State: PUBLISHED Published: 2022-12-16T00:00:00.000Z Last Updated: 2025-04-21T14:12:33.920Z Vendors: n/a Products: Android Problem Types: Elevation of privilege Description: In navigateUpTo of Task.java, there is a possible way to launch an intent handler with a mismatched intent due to improper input validation. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-13Android ID: A-238602879 Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://source.android.com/security/bulletin/pixel/2022-12-01
CVE ID: CVE-2022-20513 State: PUBLISHED Published: 2022-12-16T00:00:00.000Z Last Updated: 2025-04-21T14:10:49.360Z Vendors: n/a Products: Android Problem Types: Information disclosure Description: In decrypt_1_2 of CryptoPlugin.cpp, there is a possible out of bounds read due to a missing bounds check. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-13Android ID: A-244569759 Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://source.android.com/security/bulletin/pixel/2022-12-01
CVE ID: CVE-2022-20514 State: PUBLISHED Published: 2022-12-16T00:00:00.000Z Last Updated: 2025-04-21T13:58:34.598Z Vendors: n/a Products: Android Problem Types: Elevation of privilege Description: In acquireFabricatedOverlayIterator, nextFabricatedOverlayInfos, and releaseFabricatedOverlayIterator of Idmap2Service.cpp, there is a possible out of bounds write due to a use after free. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-13Android ID: A-245727875 Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://source.android.com
875 Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://source.android.com/security/bulletin/pixel/2022-12-01
CVE ID: CVE-2022-20515 State: PUBLISHED Published: 2022-12-16T00:00:00.000Z Last Updated: 2025-04-18T15:57:40.623Z Vendors: n/a Products: Android Problem Types: Information disclosure Description: In onPreferenceClick of AccountTypePreferenceLoader.java, there is a possible way to retrieve protected files from the Settings app due to a confused deputy. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-13Android ID: A-220733496 Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://source.android.com/security/bulletin/pixel/
tes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://source.android.com/security/bulletin/pixel/2022-12-01
CVE ID: CVE-2022-20516 State: PUBLISHED Published: 2022-12-16T00:00:00.000Z Last Updated: 2025-04-18T15:56:43.779Z Vendors: n/a Products: Android Problem Types: Information disclosure Description: In rw_t3t_act_handle_check_ndef_rsp of rw_t3t.cc, there is a possible out of bounds read due to an integer overflow. This could lead to remote information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-13Android ID: A-224002331 Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://source.android.com/security/bulletin/pixel/2022-12-01
CVE ID: CVE-2022-20517 State: PUBLISHED Published: 2022-12-16T00:00:00.000Z Last Updated: 2025-04-18T15:55:58.456Z Vendors: n/a Products: Android Problem Types: Information disclosure Description: In getMessagesByPhoneNumber of MmsSmsProvider.java, there is a possible access to restricted tables due to SQL injection. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-13Android ID: A-224769956 Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://source.android.com/security/bulletin/pixel/2022-12-01
CVE ID: CVE-2022-20518 State: PUBLISHED Published: 2022-12-16T00:00:00.000Z Last Updated: 2025-04-18T15:55:05.819Z Vendors: n/a Products: Android Problem Types: Information disclosure Description: In query of MmsSmsProvider.java, there is a possible access to restricted tables due to SQL injection. This could lead to local information disclosure with User execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-13Android ID: A-224770203 Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://source.android.com/security/bulletin/pixel/2022-12-01