Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2019-25217 State: PUBLISHED Published: 2024-10-16T06:43:33.613Z Last Updated: 2024-10-16T18:05:28.431Z Severity: CRITICAL (CVSS 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H) Vendors: siteground Products: Speed Optimizer – The All-In-One Performance-Boosting Plugin Problem Types: CWE-862 Description: The SiteGround Optimizer plugin for WordPress is vulnerable to authorization bypass leading to Remote Code Execution and Local File Inclusion in versions up to, and including, 5.0.12 due to incorrect use of an access control attribute on the switch_php function called via the /switch-php REST API route. This allows attackers to include and execute arbitrary files on the server, al
alled via the /switch-php REST API route. This allows attackers to include and execute arbitrary files on the server, allowing the execution of any PHP code in those files. This can be used to bypass access controls, obtain sensitive data, or achieve code execution in cases where images and other “safe” file types can be uploaded and included. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.wordfence.com/threat-intel/vulnerabilities/id/657f3bd7-2cdc-4eb6-ba50-7c7fca468df0?source=cve - https://blog.sucuri.net/2019/03/vulnerability-disclosure-siteground-optimizer-caldera-forms.html
CVE ID: CVE-2019-25218 State: PUBLISHED Published: 2024-10-19T03:31:08.465Z Last Updated: 2024-10-21T16:59:44.972Z Severity: MEDIUM (CVSS 4.9 CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N) Vendors: nik00726 Products: Photo Gallery Slideshow & Masonry Tiled Gallery Problem Types: CWE-89 Description: The Photo Gallery Slideshow & Masonry Tiled Gallery plugin for WordPress is vulnerable to SQL Injection via the 'id' parameter in all versions up to, and including, 1.0.3 due to insufficient escaping on the user supplied parameter and lack of sufficient preparation on the existing SQL query. This makes it possible for authenticated attackers, with Administrator-level access and above, to append add
SQL query. This makes it possible for authenticated attackers, with Administrator-level access and above, to append additional SQL queries into already existing queries that can be used to extract sensitive information from the database. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.wordfence.com/threat-intel/vulnerabilities/id/05ff1b1e-f7ba-485d-9421-9bb38f6831ef?source=cve - https://wordpress.org/plugins/wp-responsive-photo-gallery/ - https://plugins.trac.wordpress.org/browser/wp-responsive-photo-gallery/tags/1.0.3/wp-responsive-photo-gallery.php#L1393 - https://plugins.trac.wordpress.org/browser/wp-responsive-photo-gallery/tags/1.0.4/wp-responsive-photo-gal
ry.php#L1393 - https://plugins.trac.wordpress.org/browser/wp-responsive-photo-gallery/tags/1.0.4/wp-responsive-photo-gallery.php#L1614
CVE ID: CVE-2019-25219 State: PUBLISHED Published: 2024-10-29T00:00:00 Last Updated: 2024-10-30T15:16:10.007Z Vendors: n/a Products: n/a Problem Types: n/a Description: Asio C++ Library before 1.13.0 lacks a fallback error code in the case of SSL_ERROR_SYSCALL with no associated error information from the SSL library being used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://github.com/chriskohlhoff/asio/commit/93337cba7b013150f5aa6194393e1d94be2853ec - https://github.com/chriskohlhoff/asio/compare/asio-1-12-2...asio-1-13-0 - https://think-async.com/Asio/
CVE ID: CVE-2019-25220 State: PUBLISHED Published: 2024-11-18T00:00:00 Last Updated: 2024-11-18T16:28:52.209Z Vendors: n/a Products: n/a Problem Types: n/a Description: Bitcoin Core before 24.0.1 allows remote attackers to cause a denial of service (daemon crash) via a flood of low-difficulty header chains (aka a "Chain Width Expansion" attack) because a node does not first verify that a presented chain has enough work before committing to store it. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://en.bitcoin.it/wiki/Common_Vulnerabilities_and_Exposures - https://bitcoincore.org/en/2024/09/18/disclose-headers-oom - https://lists.linuxfoundation.org/pipermail/bitcoin-de
es - https://bitcoincore.org/en/2024/09/18/disclose-headers-oom - https://lists.linuxfoundation.org/pipermail/bitcoin-dev/2019-October/017354.html
CVE ID: CVE-2019-25221 State: PUBLISHED Published: 2024-12-13T03:24:35.481Z Last Updated: 2024-12-16T20:08:32.759Z Severity: MEDIUM (CVSS 6.5 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N) Vendors: nik00726 Products: Responsive Filterable Portfolio Problem Types: CWE-89 Description: The Responsive Filterable Portfolio plugin for WordPress is vulnerable to SQL Injection via the 'id' parameter in all versions up to, and including, 1.0.8 due to insufficient escaping on the user supplied parameter and lack of sufficient preparation on the existing SQL query. This makes it possible for unauthenticated attackers to append additional SQL queries into already existing queries that can be used to extr
le for unauthenticated attackers to append additional SQL queries into already existing queries that can be used to extract sensitive information from the database. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.wordfence.com/threat-intel/vulnerabilities/id/97827e26-d418-4c96-b0d0-10b92a4513bd?source=cve - https://wordpress.org/plugins/responsive-filterable-portfolio/ - https://plugins.trac.wordpress.org/changeset?old_path=/responsive-filterable-portfolio/tags/1.0.8&new_path=/responsive-filterable-portfolio/tags/1.0.9&sfp_email=&sfph_mail=
CVE ID: CVE-2019-25222 State: PUBLISHED Published: 2025-03-15T06:40:02.532Z Last Updated: 2025-03-17T21:27:50.864Z Severity: MEDIUM (CVSS 4.9 CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N) Vendors: nik00726 Products: Thumbnail carousel slider Problem Types: CWE-89 Description: The Thumbnail carousel slider plugin for WordPress is vulnerable to SQL Injection via the 'id' parameter in all versions up to, and including, 1.0.4 due to insufficient escaping on the user supplied parameter and lack of sufficient preparation on the existing SQL query. This makes it possible for unauthenticated attackers to append additional SQL queries into already existing queries that can be used to extract sensitiv
henticated attackers to append additional SQL queries into already existing queries that can be used to extract sensitive information from the database. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.wordfence.com/threat-intel/vulnerabilities/id/f6023483-3fa5-4b85-9422-7d395abcfbd8?source=cve - https://wordpress.org/plugins/wp-responsive-thumbnail-slider - https://plugins.trac.wordpress.org/browser/wp-responsive-thumbnail-slider/tags/1.0.4/wp-responsive-images-thumbnail-slider.php#L1326 - https://plugins.trac.wordpress.org/browser/wp-responsive-thumbnail-slider/tags/1.0.5/wp-responsive-images-thumbnail-slider.php
CVE ID: CVE-2019-25223 State: PUBLISHED Published: 2025-04-08T07:01:03.026Z Last Updated: 2025-04-08T15:58:55.221Z Severity: MEDIUM (CVSS 4.9 CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N) Vendors: nik00726 Products: Team Circle Image Slider With Lightbox Problem Types: CWE-89 Description: The Team Circle Image Slider With Lightbox plugin for WordPress is vulnerable to SQL Injection via the 'id' parameter in all versions up to, and including, 1.0.4 due to insufficient escaping on the user supplied parameter and lack of sufficient preparation on the existing SQL query. This makes it possible for authenticated attackers, with Administrator-level access and above, to append additional SQL querie
akes it possible for authenticated attackers, with Administrator-level access and above, to append additional SQL queries into already existing queries that can be used to extract sensitive information from the database. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.wordfence.com/threat-intel/vulnerabilities/id/bd3e30ea-8f58-4895-b78c-fb18c94d5253?source=cve - https://wordpress.org/plugins/circle-image-slider-with-lightbox/ - https://plugins.trac.wordpress.org/changeset?sfp_email=&sfph_mail=&reponame=&old=2061993%40circle-image-slider-with-lightbox&new=2061993%40circle-image-slider-with-lightbox&sfp_email=&sfph_mail=
CVE ID: CVE-2019-25224 State: PUBLISHED Published: 2025-07-25T02:23:58.569Z Last Updated: 2025-07-25T17:12:05.066Z Severity: CRITICAL (CVSS 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H) Vendors: databasebackup Products: WP Database Backup – Unlimited Database & Files Backup by Backup for WP Problem Types: CWE-78 Description: The WP Database Backup plugin for WordPress is vulnerable to OS Command Injection in versions before 5.2 via the mysqldump function. This vulnerability allows unauthenticated attackers to execute arbitrary commands on the host operating system. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.wordfence.com/threat-intel/vulnerabilities/id/d
tional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.wordfence.com/threat-intel/vulnerabilities/id/d21cf285-9d75-43a2-9e81-67116f0bf896?source=cve - https://www.wordfence.com/blog/2019/05/os-command-injection-vulnerability-patched-in-wp-database-backup-plugin/ - https://plugins.trac.wordpress.org/changeset/2078035/wp-database-backup - https://blog.sucuri.net/2019/06/os-command-injection-in-wp-database-backup.html - https://packetstormsecurity.com/files/153781/ - https://raw.githubusercontent.com/rapid7/metasploit-framework/master/modules/exploits/multi/http/wp_db_backup_rce.rb
CVE ID: CVE-2019-25225 State: PUBLISHED Published: 2025-09-08T10:02:42.945Z Last Updated: 2025-09-08T15:18:19.841Z Severity: MEDIUM (CVSS 6.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N) Problem Types: CWE-79 Description: `sanitize-html` prior to version 2.0.0-beta is vulnerable to Cross-site Scripting (XSS). The `sanitizeHtml()` function in `index.js` does not sanitize content when using the custom `transformTags` option, which is intended to convert attribute values into text. As a result, malicious input can be transformed into executable code. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://github.com/apostrophecms/sanitize-html/issues/293 - https://github.com/a
- CISA ADP Vulnrichment: References: - https://github.com/apostrophecms/sanitize-html/issues/293 - https://github.com/apostrophecms/sanitize-html/pull/156 - https://github.com/apostrophecms/sanitize-html/commit/712cb6895825c8bb6ede71a16b42bade42abcaf3 - https://github.com/Checkmarx/Vulnerabilities-Proofs-of-Concept/tree/main/2019/CVE-2019-25225
CVE ID: CVE-2019-2000 State: PUBLISHED Published: 2019-02-28T17:00:00Z Last Updated: 2024-09-16T22:01:39.066Z Vendors: Android Products: Android Problem Types: Elevation of privilege Description: In several functions of binder.c, there is possible memory corruption due to a use after free. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation. Product: Android. Versions: Android kernel. Android ID: A-120025789. Additional Analyst Notes: - CVE Program Container: References: - https://www.exploit-db.com/exploits/46356/ - http://www.securityfocus.com/bid/106851 - https://source.android.com/security/bullet
ww.exploit-db.com/exploits/46356/ - http://www.securityfocus.com/bid/106851 - https://source.android.com/security/bulletin/2019-02-01
CVE ID: CVE-2019-2001 State: PUBLISHED Published: 2019-02-28T17:00:00Z Last Updated: 2024-09-16T19:09:52.134Z Vendors: Android Products: Android Problem Types: Information disclosure Description: The permissions on /proc/iomem were world-readable. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation. Product: Android. Versions: Android kernel. Android ID: A-117422211. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/106851 - https://source.android.com/security/bulletin/2019-02-01
CVE ID: CVE-2019-2003 State: PUBLISHED Published: 2019-06-19T20:05:09 Last Updated: 2024-08-04T18:35:52.444Z Vendors: n/a Products: Android Problem Types: Elevation of privilege Description: In addLinks of Linkify.java, there is a possible phishing vector due to an unusual root cause. This could lead to remote code execution or misdirection of clicks with no additional execution privileges needed. User interaction is needed for exploitation.Product: AndroidVersions: Android-7.0 Android-7.1.1 Android-7.1.2 Android-8.0 Android-8.1 Android-9Android ID: A-116321860 Additional Analyst Notes: - CVE Program Container: References: - https://source.android.com/security/bulletin/2019-03-01
CVE ID: CVE-2019-2004 State: PUBLISHED Published: 2019-06-19T19:51:16 Last Updated: 2024-08-04T18:35:52.376Z Vendors: n/a Products: Android Problem Types: Information disclosure Description: In publishKeyEvent, publishMotionEvent and sendUnchainedFinishedSignal of InputTransport.cpp, there are uninitialized data leading to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-7.0 Android-7.1.1 Android-7.1.2 Android-8.0 Android-8.1 Android-9Android ID: A-115739809 Additional Analyst Notes: - CVE Program Container: References: - https://source.android.com/security/bulletin/2019-03-01
CVE ID: CVE-2019-2005 State: PUBLISHED Published: 2019-06-19T19:51:42 Last Updated: 2024-08-04T18:35:52.461Z Vendors: n/a Products: Android Problem Types: Elevation of privilege Description: In onPermissionGrantResult of GrantPermissionsActivity.java, there is a possible incorrectly granted permission due to a missing permission check. This could lead to local escalation of privilege on a locked device with no additional execution privileges needed. User interaction is needed for exploitation.Product: AndroidVersions: Android-8.0 Android-8.1 Android-9Android ID: A-68777217 Additional Analyst Notes: - CVE Program Container: References: - https://source.android.com/security/bulletin/2019-03-01
CVE ID: CVE-2019-2006 State: PUBLISHED Published: 2019-06-19T19:53:20 Last Updated: 2024-08-04T18:35:52.422Z Vendors: n/a Products: Android Problem Types: Elevation of privilege Description: In serviceDied of HalDeathHandlerHidl.cpp, there is a possible memory corruption due to a use after free. This could lead to local escalation of privilege in the audio server with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-9Android ID: A-116665972 Additional Analyst Notes: - CVE Program Container: References: - https://source.android.com/security/bulletin/2019-03-01
CVE ID: CVE-2019-2007 State: PUBLISHED Published: 2019-06-19T19:54:03 Last Updated: 2024-08-04T18:35:52.463Z Vendors: n/a Products: Android Problem Types: Elevation of privilege Description: In getReadIndex and getWriteIndex of FifoControllerBase.cpp, there is a possible out-of-bounds write due to an integer overflow. This could lead to local escalation of privilege in the audio server with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-8.1 Android-9Android ID: A-120789744 Additional Analyst Notes: - CVE Program Container: References: - https://source.android.com/security/bulletin/2019-03-01
CVE ID: CVE-2019-2008 State: PUBLISHED Published: 2019-06-19T19:56:32 Last Updated: 2024-08-04T18:35:52.391Z Vendors: n/a Products: Android Problem Types: Elevation of privilege Description: In createEffect of AudioFlinger.cpp, there is a possible memory corruption due to a race condition. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is needed for exploitation.Product: AndroidVersions: Android-8.0 Android-8.1 Android-9Android ID: A-122309228 Additional Analyst Notes: - CVE Program Container: References: - https://source.android.com/security/bulletin/2019-03-01
CVE ID: CVE-2019-2009 State: PUBLISHED Published: 2019-06-19T19:57:01 Last Updated: 2024-08-04T18:35:52.444Z Vendors: n/a Products: Android Problem Types: Remote code execution Description: In l2c_lcc_proc_pdu of l2c_fcr.cc, there is a possible out of bounds write due to a missing bounds check. This could lead to remote code execution over Bluetooth with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-7.0 Android-7.1.1 Android-7.1.2 Android-8.0 Android-8.1 Android-9Android ID: A-120665616 Additional Analyst Notes: - CVE Program Container: References: - https://source.android.com/security/bulletin/2019-03-01
CVE ID: CVE-2019-2010 State: PUBLISHED Published: 2019-06-19T19:57:42 Last Updated: 2024-08-04T18:35:52.411Z Vendors: n/a Products: Android Problem Types: Elevation of privilege Description: In phNxpNciHal_process_ext_rsp of phNxpNciHal_ext.cc, there is a possible out-of-bound write due to a missing bounds check. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-7.0 Android-7.1.1 Android-7.1.2 Android-8.0 Android-8.1 Android-9Android ID: A-118152591 Additional Analyst Notes: - CVE Program Container: References: - https://source.android.com/security/bulletin/2019-03
91 Additional Analyst Notes: - CVE Program Container: References: - https://source.android.com/security/bulletin/2019-03-01
CVE ID: CVE-2019-2011 State: PUBLISHED Published: 2019-06-19T19:58:06 Last Updated: 2024-08-04T18:35:52.630Z Vendors: n/a Products: Android Problem Types: Elevation of privilege Description: In readNullableNativeHandleNoDup of Parcel.cpp, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-8.0 Android-8.1 Android-9Android ID: A-120084106 Additional Analyst Notes: - CVE Program Container: References: - https://source.android.com/security/bulletin/2019-03-01
CVE ID: CVE-2019-2012 State: PUBLISHED Published: 2019-06-19T19:58:49 Last Updated: 2024-08-04T18:35:52.445Z Vendors: n/a Products: Android Problem Types: Elevation of privilege Description: In rw_t3t_act_handle_fmt_rsp of rw_t3t.cc, there is a possible out-of-bound write due to a missing bounds check. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is needed for exploitation.Product: AndroidVersions: Android-7.0 Android-7.1.1 Android-7.1.2 Android-8.0 Android-8.1 Android-9Android ID: A-120497437 Additional Analyst Notes: - CVE Program Container: References: - https://source.android.com/security/bulletin/2019-03-01
CVE ID: CVE-2019-2013 State: PUBLISHED Published: 2019-06-19T19:59:17 Last Updated: 2024-08-04T18:35:52.413Z Vendors: n/a Products: Android Problem Types: Elevation of privilege Description: In rw_t3t_act_handle_sro_rsp of rw_t3t.cc, there is a possible out-of-bound write due to a missing bounds check. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is needed for exploitation.Product: AndroidVersions: Android-7.0 Android-7.1.1 Android-7.1.2 Android-8.0 Android-8.1 Android-9Android ID: A-120497583 Additional Analyst Notes: - CVE Program Container: References: - https://source.android.com/security/bulletin/2019-03-01
CVE ID: CVE-2019-2014 State: PUBLISHED Published: 2019-06-19T19:59:45 Last Updated: 2024-08-04T18:35:52.429Z Vendors: n/a Products: Android Problem Types: Elevation of privilege Description: In rw_t3t_handle_get_sc_poll_rsp of rw_t3t.cc, there is a possible out-of-bound write due to a missing bounds check. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is needed for exploitation.Product: AndroidVersions: Android-7.0 Android-7.1.1 Android-7.1.2 Android-8.0 Android-8.1 Android-9Android ID: A-120499324 Additional Analyst Notes: - CVE Program Container: References: - https://source.android.com/security/bulletin/2019-03-01
CVE ID: CVE-2019-2015 State: PUBLISHED Published: 2019-06-19T20:00:12 Last Updated: 2024-08-04T18:35:52.481Z Vendors: n/a Products: Android Problem Types: Elevation of privilege Description: In rw_t3t_act_handle_check_rsp of rw_t3t.cc, there is a possible out-of-bound write due to a missing bounds check. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is needed for exploitation.Product: AndroidVersions: Android-7.0 Android-7.1.1 Android-7.1.2 Android-8.0 Android-8.1 Android-9Android ID: A-120503926 Additional Analyst Notes: - CVE Program Container: References: - https://source.android.com/security/bulletin/2019-03-01
CVE ID: CVE-2019-2016 State: PUBLISHED Published: 2019-06-19T20:00:39 Last Updated: 2024-08-04T18:35:52.563Z Vendors: n/a Products: Android Problem Types: Elevation of privilege Description: In NFA_SendRawFrame of nfa_dm_api.cc, there is a possible out-of-bound write due to improper input validation. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is needed for exploitation.Product: AndroidVersions: Android-7.0 Android-7.1.1 Android-7.1.2 Android-8.0 Android-8.1 Android-9Android ID: A-120664978 Additional Analyst Notes: - CVE Program Container: References: - https://source.android.com/security/bulletin/2019-03-01
CVE ID: CVE-2019-2017 State: PUBLISHED Published: 2019-06-19T20:01:07 Last Updated: 2024-08-04T18:35:52.485Z Vendors: n/a Products: Android Problem Types: Elevation of privilege Description: In rw_t2t_handle_tlv_detect_rsp of rw_t2t_ndef.cc, there is a possible out-of-bound write due to a missing bounds check. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is needed for exploitation.Product: AndroidVersions: Android-7.0 Android-7.1.1 Android-7.1.2 Android-8.0 Android-8.1 Android-9Android ID: A-121035711 Additional Analyst Notes: - CVE Program Container: References: - https://source.android.com/security/bulletin/2019-03-01
CVE ID: CVE-2019-2018 State: PUBLISHED Published: 2019-06-19T20:01:31 Last Updated: 2024-08-04T18:35:52.454Z Vendors: n/a Products: Android Problem Types: Elevation of privilege Description: In resetPasswordInternal of DevicePolicyManagerService.java, there is a possible bypass of password reset protection due to an unusual root cause. Remote user interaction is needed for exploitation.Product: AndroidVersions: Android-8.1 Android-9Android ID: A-110172241 Additional Analyst Notes: - CVE Program Container: References: - https://source.android.com/security/bulletin/2019-03-01
CVE ID: CVE-2019-2019 State: PUBLISHED Published: 2019-06-19T20:03:20 Last Updated: 2024-08-04T18:35:52.471Z Vendors: n/a Products: Android Problem Types: Information disclosure Description: In ce_t4t_data_cback of ce_t4t.cc, there is a possible out-of-bound read due to a missing bounds check. This could lead to local information disclosure with no additional execution privileges needed. User interaction is needed for exploitation.Product: AndroidVersions: Android-7.0 Android-7.1.1 Android-7.1.2 Android-8.0 Android-8.1 Android-9Android ID: A-115635871 Additional Analyst Notes: - CVE Program Container: References: - https://source.android.com/security/bulletin/2019-03-01
CVE ID: CVE-2019-2020 State: PUBLISHED Published: 2019-06-19T20:03:44 Last Updated: 2024-08-04T18:35:52.396Z Vendors: n/a Products: Android Problem Types: Information disclosure Description: In llcp_dlc_proc_rr_rnr_pdu of llcp_dlc.cc, there is a possible out-of-bound read due to a missing bounds check. This could lead to local information disclosure with no additional execution privileges needed. User interaction needed for exploitation.Product: AndroidVersions: Android-7.0 Android-7.1.1 Android-7.1.2 Android-8.0 Android-8.1 Android-9Android ID: A-116788646 Additional Analyst Notes: - CVE Program Container: References: - https://source.android.com/security/bulletin/2019-03-01