Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2023-21164 State: PUBLISHED Published: 2023-12-04T22:40:47.041Z Last Updated: 2024-08-02T09:28:25.945Z Vendors: Google Products: Android Problem Types: Elevation of privilege Description: In DevmemIntMapPMR of devicemem_server.c, there is a possible arbitrary code execution due to a use after free. This could lead to local escalation of privilege in the kernel with no additional execution privileges needed. User interaction is not needed for exploitation. Additional Analyst Notes: - CVE Program Container: References: - https://source.android.com/security/bulletin/2023-12-01
CVE ID: CVE-2023-21165 State: PUBLISHED Published: 2024-02-16T18:33:36.337Z Last Updated: 2024-08-26T18:06:55.870Z Vendors: Google Products: Android Problem Types: Elevation of privilege Description: In DevmemIntUnmapPMR of devicemem_server.c, there is a possible arbitrary code execution due to a use after free. This could lead to local escalation of privilege in the kernel with no additional execution privileges needed. User interaction is not needed for exploitation. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://source.android.com/security/bulletin/2024-01-01
CVE ID: CVE-2023-21166 State: PUBLISHED Published: 2023-12-04T22:40:47.237Z Last Updated: 2024-10-11T18:01:19.606Z Vendors: Google Products: Android Problem Types: Elevation of privilege Description: In RGXBackingZSBuffer of rgxta3d.c, there is a possible arbitrary code execution due to a use after free. This could lead to local escalation of privilege in the kernel with no additional execution privileges needed. User interaction is not needed for exploitation. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://source.android.com/security/bulletin/2023-12-01
CVE ID: CVE-2023-21167 State: PUBLISHED Published: 2023-06-28T00:00:00 Last Updated: 2024-12-03T15:10:35.093Z Vendors: n/a Products: Android Problem Types: Denial of service Description: In setProfileName of DevicePolicyManagerService.java, there is a possible way to crash the SystemUI menu due to a missing bounds check. This could lead to local denial of service with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-13Android ID: A-259942964 Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://source.android.com/security/bulletin/pixel/2023-06-01
CVE ID: CVE-2023-21168 State: PUBLISHED Published: 2023-06-28T00:00:00 Last Updated: 2024-12-03T15:09:10.702Z Vendors: n/a Products: Android Problem Types: Information disclosure Description: In convertCbYCrY of ColorConverter.cpp, there is a possible out of bounds read due to a missing bounds check. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-13Android ID: A-253270285 Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://source.android.com/security/bulletin/pixel/2023-06-01
CVE ID: CVE-2023-21169 State: PUBLISHED Published: 2023-06-28T00:00:00 Last Updated: 2024-12-03T15:07:42.562Z Vendors: n/a Products: Android Problem Types: Information disclosure Description: In inviteInternal of p2p_iface.cpp, there is a possible out of bounds read due to a missing bounds check. This could lead to local information disclosure with System execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-13Android ID: A-274443441 Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://source.android.com/security/bulletin/pixel/2023-06-01
CVE ID: CVE-2023-21170 State: PUBLISHED Published: 2023-06-28T00:00:00 Last Updated: 2024-12-03T15:05:28.928Z Vendors: n/a Products: Android Problem Types: Information disclosure Description: In executeSetClientTarget of ComposerCommandEngine.h, there is a possible out of bounds read due to a missing bounds check. This could lead to local information disclosure with System execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-13Android ID: A-252764410 Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://source.android.com/security/bulletin/pixel/2023-06-01
CVE ID: CVE-2023-21171 State: PUBLISHED Published: 2023-06-28T00:00:00 Last Updated: 2024-12-04T21:31:08.420Z Vendors: n/a Products: Android Problem Types: Elevation of privilege Description: In verifyInputEvent of InputDispatcher.cpp, there is a possible way to conduct click fraud due to side channel information disclosure. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-13Android ID: A-261085213 Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://source.android.com/security/bulletin/pixel/2023-06-01
CVE ID: CVE-2023-21172 State: PUBLISHED Published: 2023-06-28T00:00:00 Last Updated: 2024-12-05T16:53:53.607Z Vendors: n/a Products: Android Problem Types: Elevation of privilege Description: In multiple functions of WifiCallingSettings.java, there is a possible way to change calling preferences for the admin user due to a permissions bypass. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-13Android ID: A-262243015 Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://source.android.com/security/bulletin/pixel/2023-06-0
E Program Container: - CISA ADP Vulnrichment: References: - https://source.android.com/security/bulletin/pixel/2023-06-01
CVE ID: CVE-2023-21173 State: PUBLISHED Published: 2023-06-28T00:00:00 Last Updated: 2024-12-05T16:54:28.867Z Vendors: n/a Products: Android Problem Types: Information disclosure Description: In multiple methods of DataUsageList.java, there is a possible way to learn about admin user's network activities due to a missing permission check. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-13Android ID: A-262741858 Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://source.android.com/security/bulletin/pixel/2023-06-01
CVE ID: CVE-2023-21174 State: PUBLISHED Published: 2023-06-28T00:00:00 Last Updated: 2024-12-05T16:55:13.840Z Vendors: n/a Products: Android Problem Types: Elevation of privilege Description: In isPageSearchEnabled of BillingCycleSettings.java, there is a possible way for the guest user to change data limits due to a permissions bypass. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-13Android ID: A-235822222 Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://source.android.com/security/bulletin/pixel/2023-06-01
CVE ID: CVE-2023-21175 State: PUBLISHED Published: 2023-06-28T00:00:00 Last Updated: 2024-12-05T15:39:59.181Z Vendors: n/a Products: Android Problem Types: Elevation of privilege Description: In onCreate of DataUsageSummary.java, there is a possible method for a guest user to enable or disable mobile data due to a permissions bypass. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-13Android ID: A-262243574 Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://source.android.com/security/bulletin/pixel/2023-06-01
CVE ID: CVE-2023-21176 State: PUBLISHED Published: 2023-06-28T00:00:00 Last Updated: 2024-12-05T15:37:43.012Z Vendors: n/a Products: Android Problem Types: Denial of service Description: In list_key_entries of utils.rs, there is a possible way to disable user credentials due to resource exhaustion. This could lead to local denial of service with System execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-13Android ID: A-222287335 Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://source.android.com/security/bulletin/pixel/2023-06-01
CVE ID: CVE-2023-21177 State: PUBLISHED Published: 2023-06-28T00:00:00 Last Updated: 2024-12-04T21:31:17.751Z Vendors: n/a Products: Android Problem Types: Information disclosure Description: In requestAppKeyboardShortcuts of WindowManagerService.java, there is a possible way to infer the app a user is interacting with due to a missing permission check. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-13Android ID: A-273906410 Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://source.android.com/security/bulletin/pixel
CVE ID: CVE-2023-21178 State: PUBLISHED Published: 2023-06-28T00:00:00 Last Updated: 2024-12-04T21:32:04.643Z Vendors: n/a Products: Android Problem Types: Information disclosure Description: In installKey of KeyUtil.cpp, there is a possible failure of file encryption due to a race condition. This could lead to local information disclosure with System execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-13Android ID: A-140762419 Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://source.android.com/security/bulletin/pixel/2023-06-01
CVE ID: CVE-2023-21179 State: PUBLISHED Published: 2023-06-28T00:00:00 Last Updated: 2024-12-04T21:32:15.724Z Vendors: n/a Products: Android Problem Types: Elevation of privilege Description: In parseSecurityParamsFromXml of XmlUtil.java, there is a possible bypass of user specified wifi encryption protocol due to improperly used crypto. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-13Android ID: A-272755865 Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://source.android.com/security/bulletin/pixel/2023-06-01
CVE ID: CVE-2023-21180 State: PUBLISHED Published: 2023-06-28T00:00:00 Last Updated: 2024-12-04T21:32:25.617Z Vendors: n/a Products: Android Problem Types: Information disclosure Description: In xmlParseTryOrFinish of parser.c, there is a possible out of bounds read due to a heap buffer overflow. This could lead to remote information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-13Android ID: A-261365944 Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://source.android.com/security/bulletin/pixel/2023-06-01
CVE ID: CVE-2023-21181 State: PUBLISHED Published: 2023-06-28T00:00:00 Last Updated: 2024-12-04T21:32:37.264Z Vendors: n/a Products: Android Problem Types: Information disclosure Description: In btm_ble_update_inq_result of btm_ble_gap.cc, there is a possible out of bounds read due to a heap buffer overflow. This could lead to local information disclosure with System execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-13Android ID: A-264880969 Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://source.android.com/security/bulletin/pixel/2023-06-01
CVE ID: CVE-2023-21182 State: PUBLISHED Published: 2023-06-28T00:00:00 Last Updated: 2024-12-04T21:32:46.592Z Vendors: n/a Products: Android Problem Types: Information disclosure Description: In Exynos_parsing_user_data_registered_itu_t_t35 of VendorVideoAPI.cpp, there is a possible out of bounds read due to a missing bounds check. This could lead to local information disclosure with System execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-13Android ID: A-252764175 Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://source.android.com/security/bulletin/pixel/2023-06-01
CVE ID: CVE-2023-21183 State: PUBLISHED Published: 2023-06-28T00:00:00 Last Updated: 2024-12-04T21:34:47.842Z Vendors: n/a Products: Android Problem Types: Elevation of privilege Description: In ForegroundUtils of ForegroundUtils.java, there is a possible way to read NFC tag data while the app is still in the background due to a logic error in the code. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-13Android ID: A-235863754 Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://source.android.com/security/bulletin/pixe
Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://source.android.com/security/bulletin/pixel/2023-06-01
CVE ID: CVE-2023-21184 State: PUBLISHED Published: 2023-06-28T00:00:00 Last Updated: 2024-12-04T21:34:59.509Z Vendors: n/a Products: Android Problem Types: Elevation of privilege Description: In getCurrentPrivilegedPackagesForAllUsers of CarrierPrivilegesTracker.java, there is a possible permission bypass due to a logic error in the code. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-13Android ID: A-267809568 Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://source.android.com/security/bulletin/pixel/2023-06-01
CVE ID: CVE-2023-21185 State: PUBLISHED Published: 2023-06-28T00:00:00 Last Updated: 2024-12-04T21:35:16.171Z Vendors: n/a Products: Android Problem Types: Elevation of privilege Description: In multiple functions of WifiNetworkFactory.java, there is a missing permission check. This could lead to local escalation of privilege from the guest user with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-13Android ID: A-266700762 Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://source.android.com/security/bulletin/pixel/2023-06-01
CVE ID: CVE-2023-21186 State: PUBLISHED Published: 2023-06-28T00:00:00 Last Updated: 2024-12-04T21:35:30.573Z Vendors: n/a Products: Android Problem Types: Denial of service Description: In LogResponse of Dns.cpp, there is a possible out of bounds read due to a missing bounds check. This could lead to remote denial of service with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-13Android ID: A-261079188 Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://source.android.com/security/bulletin/pixel/2023-06-01
CVE ID: CVE-2023-21187 State: PUBLISHED Published: 2023-06-28T00:00:00 Last Updated: 2024-12-05T15:35:42.049Z Vendors: n/a Products: Android Problem Types: Elevation of privilege Description: In onCreate of UsbAccessoryUriActivity.java, there is a possible way to escape the Setup Wizard due to a logic error in the code. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-13Android ID: A-246542917 Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://source.android.com/security/bulletin/pixel/2023-06-01
CVE ID: CVE-2023-21188 State: PUBLISHED Published: 2023-06-28T00:00:00 Last Updated: 2024-12-04T21:35:44.029Z Vendors: n/a Products: Android Problem Types: Information disclosure Description: In btm_ble_update_inq_result of btm_ble_gap.cc, there is a possible out of bounds read due to a heap buffer overflow. This could lead to local information disclosure with System execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-13Android ID: A-264624283 Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://source.android.com/security/bulletin/pixel/2023-06-01
CVE ID: CVE-2023-21189 State: PUBLISHED Published: 2023-06-28T00:00:00 Last Updated: 2024-12-04T21:36:01.244Z Vendors: n/a Products: Android Problem Types: Elevation of privilege Description: In startLockTaskMode of LockTaskController.java, there is a possible bypass of lock task mode due to a logic error in the code. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is needed for exploitation.Product: AndroidVersions: Android-13Android ID: A-213942596 Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://source.android.com/security/bulletin/pixel/2023-06-01
CVE ID: CVE-2023-21190 State: PUBLISHED Published: 2023-06-28T00:00:00 Last Updated: 2024-12-04T21:36:47.660Z Vendors: n/a Products: Android Problem Types: Information disclosure Description: In btm_acl_encrypt_change of btm_acl.cc, there is a possible way for a remote device to turn off encryption without resulting in a terminated connection due to an unusual root cause. This could lead to local information disclosure with no additional execution privileges needed. User interaction is needed for exploitation.Product: AndroidVersions: Android-13Android ID: A-251436534 Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://source.android.com/security
ional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://source.android.com/security/bulletin/pixel/2023-06-01
CVE ID: CVE-2023-21191 State: PUBLISHED Published: 2023-06-28T00:00:00 Last Updated: 2024-12-04T21:37:18.310Z Vendors: n/a Products: Android Problem Types: Elevation of privilege Description: In fixNotification of NotificationManagerService.java, there is a possible bypass of notification hide preference due to a logic error in the code. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-13Android ID: A-269738057 Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://source.android.com/security/bulletin/pixel/2023-06-01
CVE ID: CVE-2023-21192 State: PUBLISHED Published: 2023-06-28T00:00:00 Last Updated: 2024-12-04T21:37:42.965Z Vendors: n/a Products: Android Problem Types: Elevation of privilege Description: In setInputMethodWithSubtypeIdLocked of InputMethodManagerService.java, there is a possible way to setup input methods that are not enabled due to improper input validation. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-13Android ID: A-227207653 Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://source.android.com/security/bul
l Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://source.android.com/security/bulletin/pixel/2023-06-01
CVE ID: CVE-2023-21193 State: PUBLISHED Published: 2023-06-28T00:00:00 Last Updated: 2024-12-04T21:37:53.956Z Vendors: n/a Products: Android Problem Types: Information disclosure Description: In VideoFrame of VideoFrame.h, there is a possible abort due to an integer overflow. This could lead to remote information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-13Android ID: A-233006499 Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://source.android.com/security/bulletin/pixel/2023-06-01
CVE ID: CVE-2023-21194 State: PUBLISHED Published: 2023-06-28T00:00:00 Last Updated: 2024-12-04T21:38:03.447Z Vendors: n/a Products: Android Problem Types: Information disclosure Description: In gatt_dbg_op_name of gatt_utils.cc, there is a possible out of bounds read due to a missing bounds check. This could lead to local information disclosure in the Bluetooth server with System execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-13Android ID: A-260079141 Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://source.android.com/security/bulletin/pixel/2023-06-01
CVE ID: CVE-2023-21195 State: PUBLISHED Published: 2023-06-28T00:00:00 Last Updated: 2024-08-02T09:28:26.047Z Vendors: n/a Products: Android Problem Types: Information disclosure Description: In btm_ble_periodic_adv_sync_tx_rcvd of btm_ble_gap.cc, there is a possible out of bounds read due to an incorrect bounds check. This could lead to local information disclosure over Bluetooth, if the firmware were compromised with System execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-13Android ID: A-233879420 Additional Analyst Notes: - CVE Program Container: References: - https://source.android.com/security/bulletin/pixel/2023-06-01
CVE ID: CVE-2023-21196 State: PUBLISHED Published: 2023-06-28T00:00:00 Last Updated: 2024-08-02T09:28:25.932Z Vendors: n/a Products: Android Problem Types: Information disclosure Description: In btm_ble_batchscan_filter_track_adv_vse_cback of btm_ble_batchscan.cc, there is a possible out of bounds read due to a missing bounds check. This could lead to local information disclosure in the Bluetooth server with System execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-13Android ID: A-261857395 Additional Analyst Notes: - CVE Program Container: References: - https://source.android.com/security/bulletin/pixel/2023-06-01
CVE ID: CVE-2023-21197 State: PUBLISHED Published: 2023-06-28T00:00:00 Last Updated: 2024-12-04T21:38:16.686Z Vendors: n/a Products: Android Problem Types: Information disclosure Description: In btm_acl_process_sca_cmpl_pkt of btm_acl.cc, there is a possible out of bounds read due to an incorrect bounds check. This could lead to remote information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-13Android ID: A-251427561 Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://source.android.com/security/bulletin/pixel/2023-06-01
CVE ID: CVE-2023-21198 State: PUBLISHED Published: 2023-06-28T00:00:00 Last Updated: 2024-12-04T21:43:46.259Z Vendors: n/a Products: Android Problem Types: Information disclosure Description: In remove_sdp_record of btif_sdp_server.cc, there is a possible out of bounds read due to a missing bounds check. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-13Android ID: A-245517503 Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://source.android.com/security/bulletin/pixel/2023-06-01