Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2021-0684 State: PUBLISHED Published: 2021-10-06T14:11:11 Last Updated: 2024-08-03T15:47:28.305Z Vendors: n/a Products: Android Problem Types: Elevation of privilege Description: In TouchInputMapper::sync of TouchInputMapper.cpp, there is a possible out of bounds write due to a use after free. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-10 Android-11 Android-8.1 Android-9Android ID: A-179839665 Additional Analyst Notes: - CVE Program Container: References: - https://source.android.com/security/bulletin/2021-09-01
CVE ID: CVE-2021-0685 State: PUBLISHED Published: 2021-10-06T14:12:22 Last Updated: 2024-08-03T15:47:28.270Z Vendors: n/a Products: Android Problem Types: Elevation of privilege Description: In ParsedIntentInfo of ParsedIntentInfo.java, there is a possible parcel serialization/deserialization mismatch due to unsafe deserialization. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-11Android ID: A-191055353 Additional Analyst Notes: - CVE Program Container: References: - https://source.android.com/security/bulletin/2021-09-01
CVE ID: CVE-2021-0686 State: PUBLISHED Published: 2021-10-06T14:10:58 Last Updated: 2024-08-03T15:47:28.545Z Vendors: n/a Products: Android Problem Types: Information disclosure Description: In getDefaultSmsPackage of RoleManagerService.java, there is a possible way to get information about the default sms app of a different device user due to a missing permission check. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-11 Android-10Android ID: A-177927831 Additional Analyst Notes: - CVE Program Container: References: - https://source.android.com/security/bulletin/2
77927831 Additional Analyst Notes: - CVE Program Container: References: - https://source.android.com/security/bulletin/2021-09-01
CVE ID: CVE-2021-0687 State: PUBLISHED Published: 2021-10-06T14:11:57 Last Updated: 2024-08-03T15:47:28.251Z Vendors: n/a Products: Android Problem Types: Denial of service Description: In ellipsize of Layout.java, there is a possible ANR due to improper input validation. This could lead to local denial of service with no additional execution privileges needed. User interaction is needed for exploitation.Product: AndroidVersions: Android-9 Android-10 Android-11 Android-8.1Android ID: A-188913943 Additional Analyst Notes: - CVE Program Container: References: - https://source.android.com/security/bulletin/2021-09-01
CVE ID: CVE-2021-0688 State: PUBLISHED Published: 2021-10-06T14:10:40 Last Updated: 2024-08-03T15:47:28.307Z Vendors: n/a Products: Android Problem Types: Elevation of privilege Description: In lockNow of PhoneWindowManager.java, there is a possible lock screen bypass due to a race condition. This could lead to local escalation of privilege with User execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-10 Android-11 Android-8.1 Android-9Android ID: A-161149543 Additional Analyst Notes: - CVE Program Container: References: - https://source.android.com/security/bulletin/2021-09-01
CVE ID: CVE-2021-0689 State: PUBLISHED Published: 2021-10-06T14:12:16 Last Updated: 2024-08-03T15:47:28.283Z Vendors: n/a Products: Android Problem Types: Information disclosure Description: In RGB_to_BGR1_portable of SkSwizzler_opts.h, there is a possible out of bounds read due to a missing bounds check. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-10 Android-11 Android-8.1 Android-9Android ID: A-190188264 Additional Analyst Notes: - CVE Program Container: References: - https://source.android.com/security/bulletin/2021-09-01
CVE ID: CVE-2021-0690 State: PUBLISHED Published: 2021-10-06T14:11:27 Last Updated: 2024-08-03T15:47:28.288Z Vendors: n/a Products: Android Problem Types: Information disclosure Description: In ih264d_mark_err_slice_skip of ih264d_parse_pslice.c, there is a possible out of bounds write due to a heap buffer overflow. This could lead to remote information disclosure with no additional execution privileges needed. User interaction is needed for exploitation.Product: AndroidVersions: Android-9 Android-10 Android-11 Android-8.1Android ID: A-182152757 Additional Analyst Notes: - CVE Program Container: References: - https://source.android.com/security/bulletin/2021-09-01
CVE ID: CVE-2021-0691 State: PUBLISHED Published: 2021-10-06T14:11:51 Last Updated: 2024-08-03T15:47:28.553Z Vendors: n/a Products: Android Problem Types: Elevation of privilege Description: In the SELinux policy configured in system_app.te, there is a possible way for system_app to gain code execution in other processes due to an overly-permissive SELinux policy. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-11Android ID: A-188554048 Additional Analyst Notes: - CVE Program Container: References: - https://source.android.com/security/bulletin/2021-09-01
CVE ID: CVE-2021-0692 State: PUBLISHED Published: 2021-10-06T14:11:05 Last Updated: 2024-08-03T15:47:28.302Z Vendors: n/a Products: Android Problem Types: Elevation of privilege Description: In sendBroadcastToInstaller of FirstScreenBroadcast.java, there is a possible activity launch due to an unsafe PendingIntent. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-11 Android-9 Android-10Android ID: A-179289753 Additional Analyst Notes: - CVE Program Container: References: - https://source.android.com/security/bulletin/2021-09-01
CVE ID: CVE-2021-0693 State: PUBLISHED Published: 2021-10-06T14:11:39 Last Updated: 2024-08-03T15:47:28.309Z Vendors: n/a Products: Android Problem Types: Information disclosure Description: In openFile of HeapDumpProvider.java, there is a possible way to retrieve generated heap dumps from debuggable apps due to an unprotected provider. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-11Android ID: A-184046948 Additional Analyst Notes: - CVE Program Container: References: - https://source.android.com/security/bulletin/2021-09-01
CVE ID: CVE-2021-0694 State: PUBLISHED Published: 2022-04-12T16:11:38 Last Updated: 2024-08-03T15:47:28.395Z Vendors: n/a Products: Android Problem Types: Elevation of privilege Description: In setServiceForegroundInnerLocked of ActiveServices.java, there is a possible way for a background application to regain foreground permissions due to insufficient background restrictions. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-11Android ID: A-183147114 Additional Analyst Notes: - CVE Program Container: References: - https://source.android.com/security/bulletin/2022
47114 Additional Analyst Notes: - CVE Program Container: References: - https://source.android.com/security/bulletin/2022-04-01
CVE ID: CVE-2021-0695 State: PUBLISHED Published: 2021-10-06T14:11:33 Last Updated: 2024-08-03T15:47:28.306Z Vendors: n/a Products: Android Problem Types: Information disclosure Description: In get_sock_stat of xt_qtaguid.c, there is a possible out of bounds read due to a use after free. This could lead to local information disclosure with User execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android kernelAndroid ID: A-184018316References: Upstream kernel Additional Analyst Notes: - CVE Program Container: References: - https://source.android.com/security/bulletin/2021-09-01
CVE ID: CVE-2021-0696 State: PUBLISHED Published: 2022-10-11T00:00:00 Last Updated: 2024-08-03T15:47:28.510Z Vendors: n/a Products: Android Problem Types: Elevation of privilege Description: In dllist_remove_node of TBD, there is a possible use after free bug due to a race condition. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android SoCAndroid ID: A-242344778 Additional Analyst Notes: - CVE Program Container: References: - https://source.android.com/security/bulletin/2022-10-01
CVE ID: CVE-2021-0697 State: PUBLISHED Published: 2022-09-13T19:13:28 Last Updated: 2024-08-03T15:47:28.340Z Vendors: n/a Products: Android Problem Types: Elevation of privilege Description: In PVRSRVRGXSubmitTransferKM of rgxtransfer.c, there is a possible user after free due to a race condition. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android SoCAndroid ID: A-238918403 Additional Analyst Notes: - CVE Program Container: References: - https://source.android.com/security/bulletin/2022-09-01
CVE ID: CVE-2021-0698 State: PUBLISHED Published: 2022-08-24T13:35:14 Last Updated: 2024-08-03T15:47:28.311Z Vendors: n/a Products: Android Problem Types: Information disclosure Description: In PVRSRVBridgeHeapCfgHeapDetails, there is a possible leak of kernel heap content due to uninitialized data. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android SoCAndroid ID: A-236848165 Additional Analyst Notes: - CVE Program Container: References: - https://source.android.com/security/bulletin/2022-08-01
CVE ID: CVE-2021-0699 State: PUBLISHED Published: 2022-10-14T00:00:00.000Z Last Updated: 2025-05-15T15:13:14.999Z Vendors: n/a Products: Android Problem Types: Elevation of privilege Description: In HTBLogKM of TBD, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege in the kernel with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android SoCAndroid ID: A-242345178 Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://source.android.com/security/bulletin/2022-10-01
CVE ID: CVE-2021-0701 State: PUBLISHED Published: 2023-06-15T00:00:00 Last Updated: 2024-12-18T19:01:45.349Z Vendors: n/a Products: Android Problem Types: Elevation of privilege Description: In PVRSRVBridgeSyncPrimOpCreate of the PowerVR kernel driver, a missing size check means there is a possible integer overflow that could allow out-of-bounds heap access. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://source.android.com/security/bulletin/2023-06-01
CVE ID: CVE-2021-0702 State: PUBLISHED Published: 2021-10-22T13:27:42 Last Updated: 2024-08-03T15:47:28.429Z Vendors: n/a Products: Android Problem Types: Information disclosure Description: In RevertActiveSessions of apexd.cpp, there is a possible way to share the wrong file due to an unintentional MediaStore downgrade. This could lead to local information disclosure with no additional execution privileges needed. User interaction is needed for exploitation.Product: AndroidVersions: Android-11Android ID: A-193932765 Additional Analyst Notes: - CVE Program Container: References: - https://source.android.com/security/bulletin/2021-10-01
CVE ID: CVE-2021-0703 State: PUBLISHED Published: 2021-10-22T13:27:09 Last Updated: 2024-08-03T15:47:28.308Z Vendors: n/a Products: Android Problem Types: Elevation of privilege Description: In SecondStageMain of init.cpp, there is a possible use after free due to incorrect shared_ptr usage. This could lead to local escalation of privilege if the attacker has physical access to the device, with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-11Android ID: A-184569329 Additional Analyst Notes: - CVE Program Container: References: - https://source.android.com/security/bulletin/2021-10-01
CVE ID: CVE-2021-0704 State: PUBLISHED Published: 2021-12-15T18:05:40 Last Updated: 2024-08-03T15:47:28.422Z Vendors: n/a Products: Android Problem Types: Information disclosure Description: In createNoCredentialsPermissionNotification and related functions of AccountManagerService.java, there is a possible way to retrieve accounts from the device without permissions due to a permissions bypass. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-10 Android-11 Android-9Android ID: A-179338675 Additional Analyst Notes: - CVE Program Container: References: - https://sou
Android-11 Android-9Android ID: A-179338675 Additional Analyst Notes: - CVE Program Container: References: - https://source.android.com/security/bulletin/2021-12-01
CVE ID: CVE-2021-0705 State: PUBLISHED Published: 2021-10-22T13:27:22 Last Updated: 2024-08-03T15:47:28.261Z Vendors: n/a Products: Android Problem Types: Elevation of privilege Description: In sanitizeSbn of NotificationManagerService.java, there is a possible way to keep service running in foreground and keep granted permissions due to Bypass of Background Service Restrictions. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-11 Android-10Android ID: A-185388103 Additional Analyst Notes: - CVE Program Container: References: - https://source.android.com/security/
id ID: A-185388103 Additional Analyst Notes: - CVE Program Container: References: - https://source.android.com/security/bulletin/2021-10-01
CVE ID: CVE-2021-0706 State: PUBLISHED Published: 2021-10-22T13:27:35 Last Updated: 2024-08-03T15:47:28.327Z Vendors: n/a Products: Android Problem Types: Denial of service Description: In startListening of PluginManagerImpl.java, there is a possible way to disable arbitrary app components due to a missing permission check. This could lead to local denial of service with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-10 Android-11Android ID: A-193444889 Additional Analyst Notes: - CVE Program Container: References: - https://source.android.com/security/bulletin/2022-02-01
CVE ID: CVE-2021-0707 State: PUBLISHED Published: 2022-04-12T16:11:38 Last Updated: 2024-08-03T15:47:28.301Z Vendors: n/a Products: Android Problem Types: Elevation of privilege Description: In dma_buf_release of dma-buf.c, there is a possible memory corruption due to a use after free. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android kernelAndroid ID: A-155756045References: Upstream kernel Additional Analyst Notes: - CVE Program Container: References: - https://source.android.com/security/bulletin/2022-04-01
CVE ID: CVE-2021-0708 State: PUBLISHED Published: 2021-10-22T13:26:54 Last Updated: 2024-08-03T15:47:28.321Z Vendors: n/a Products: Android Problem Types: Elevation of privilege Description: In runDumpHeap of ActivityManagerShellCommand.java, there is a possible deletion of system files due to a confused deputy. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-9 Android-10 Android-11 Android-8.1Android ID: A-183262161 Additional Analyst Notes: - CVE Program Container: References: - https://source.android.com/security/bulletin/2021-10-01
CVE ID: CVE-2021-0734 State: PUBLISHED Published: 2022-08-11T15:06:04 Last Updated: 2024-08-03T15:47:28.293Z Vendors: n/a Products: Android Problem Types: Information disclosure Description: In Settings, there is a possible way to determine whether an app is installed without query permissions, due to side channel information disclosure. This could lead to local information disclosure of an installed package, without proper query permissions, with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-13Android ID: A-189122911 Additional Analyst Notes: - CVE Program Container: References: - https://source.android.com/secur
ndroid ID: A-189122911 Additional Analyst Notes: - CVE Program Container: References: - https://source.android.com/security/bulletin/android-13
CVE ID: CVE-2021-0735 State: PUBLISHED Published: 2022-08-11T15:06:18 Last Updated: 2024-08-03T15:47:28.375Z Vendors: n/a Products: Android Problem Types: Information disclosure Description: In PackageManager, there is a possible way to get information about installed packages ignoring limitations introduced in Android 11 due to a missing permission check. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-13Android ID: A-188913056 Additional Analyst Notes: - CVE Program Container: References: - https://source.android.com/security/bulletin/android-13
CVE ID: CVE-2021-0769 State: PUBLISHED Published: 2021-12-15T18:06:07 Last Updated: 2024-08-03T15:47:28.372Z Vendors: n/a Products: Android Problem Types: Elevation of privilege Description: In onCreate of AllowBindAppWidgetActivity.java, there is a possible bypass of user interaction requirements due to unclear UI. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is needed for exploitation.Product: AndroidVersions: Android-12Android ID: A-184676316 Additional Analyst Notes: - CVE Program Container: References: - https://source.android.com/security/bulletin/pixel/2021-12-01
CVE ID: CVE-2021-0799 State: PUBLISHED Published: 2021-12-15T18:05:33 Last Updated: 2024-08-03T15:47:28.634Z Vendors: n/a Products: Android Problem Types: Elevation of privilege Description: In ActivityThread.java, there is a possible way to collide the content provider's authorities. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-12Android ID: A-197647956 Additional Analyst Notes: - CVE Program Container: References: - https://source.android.com/security/bulletin/2021-11-01
CVE ID: CVE-2021-0869 State: PUBLISHED Published: 2021-09-21T12:11:47 Last Updated: 2024-08-03T15:47:28.418Z Vendors: n/a Products: Android Problem Types: Remote code execution Description: In GetTimeStampAndPkt of DumpstateDevice.cpp, there is a possible out of bounds write due to an incorrect bounds check. This could lead to remote code execution with no additional execution privileges needed. User interaction is not needed for exploitation. Product: Android Versions: Android kernel Android ID: A-179620905 References: N/A Additional Analyst Notes: - CVE Program Container: References: - https://source.android.com/security/bulletin/pixel/2021-09-01
CVE ID: CVE-2021-0870 State: PUBLISHED Published: 2021-10-22T13:27:28 Last Updated: 2024-08-03T15:47:28.376Z Vendors: n/a Products: Android Problem Types: Remote code execution Description: In RW_SetActivatedTagType of rw_main.cc, there is possible memory corruption due to a race condition. This could lead to remote code execution with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-9 Android-10 Android-11 Android-8.1Android ID: A-192472262 Additional Analyst Notes: - CVE Program Container: References: - https://source.android.com/security/bulletin/2021-10-01 - http://packetstormsecurity.com/files/164704/Android-NFC
ces: - https://source.android.com/security/bulletin/2021-10-01 - http://packetstormsecurity.com/files/164704/Android-NFC-Type-Confusion.html
CVE ID: CVE-2021-0871 State: PUBLISHED Published: 2022-09-13T19:13:36 Last Updated: 2024-08-03T15:47:28.436Z Vendors: n/a Products: Android Problem Types: Elevation of privilege Description: In PVRSRVBridgePMRPDumpSymbolicAddr of the PowerVR kernel driver, a missing size check means there is a possible integer overflow that could allow out-of-bounds heap access. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android SoCAndroid ID: A-238921253 Additional Analyst Notes: - CVE Program Container: References: - https://source.android.com/security/bulletin/2022-09-01
CVE ID: CVE-2021-0872 State: PUBLISHED Published: 2023-04-19T00:00:00.000Z Last Updated: 2025-02-05T20:30:50.907Z Vendors: n/a Products: Android Problem Types: Elevation of privilege Description: In PVRSRVBridgeRGXKickVRDM of the PowerVR kernel driver, a missing size check means there is a possible integer overflow that could allow out-of-bounds heap access. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android SoCAndroid ID: A-270401229 Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://source.android.com/security/bulleti
alyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://source.android.com/security/bulletin/2023-04-01
CVE ID: CVE-2021-0873 State: PUBLISHED Published: 2023-04-19T00:00:00.000Z Last Updated: 2025-02-05T20:28:26.085Z Vendors: n/a Products: Android Problem Types: Elevation of privilege Description: In PVRSRVBridgeRGXKickRS of the PowerVR kernel driver, a missing size check means there is a possible integer overflow that could allow out-of-bounds heap access. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android SoCAndroid ID: A-270392711 Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://source.android.com/security/bulletin/
yst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://source.android.com/security/bulletin/2023-04-01
CVE ID: CVE-2021-0874 State: PUBLISHED Published: 2023-04-19T00:00:00.000Z Last Updated: 2025-02-05T20:24:12.794Z Vendors: n/a Products: Android Problem Types: Elevation of privilege Description: In PVRSRVBridgeDevicememHistorySparseChange of the PowerVR kernel driver, a missing size check means there is a possible integer overflow that could allow out-of-bounds heap access. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android SoCAndroid ID: A-270399633 Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://source.android.com
633 Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://source.android.com/security/bulletin/2023-04-01