Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2019-2097 State: PUBLISHED Published: 2019-06-07T19:37:22 Last Updated: 2024-08-04T18:42:49.859Z Vendors: Android Products: Android Problem Types: Remote code execution Description: In HAliasAnalyzer.Query of hydrogen-alias-analysis.h, there is possible memory corruption due to type confusion. This could lead to remote code execution from a malicious proxy configuration, with no additional execution privileges needed. User interaction is not needed for exploitation. Product: Android. Versions: Android-7.0 Android-7.1.1 Android-7.1.2 Android-8.0 Android-8.1 Android-9. Android ID: A-117606285. Additional Analyst Notes: - CVE Program Container: References: - https://source.android.c
id-9. Android ID: A-117606285. Additional Analyst Notes: - CVE Program Container: References: - https://source.android.com/security/bulletin/2019-06-01
CVE ID: CVE-2019-2098 State: PUBLISHED Published: 2019-06-07T19:40:15 Last Updated: 2024-08-04T18:42:50.019Z Vendors: Android Products: Android Problem Types: Elevation of privilege Description: In areNotificationsEnabledForPackage of NotificationManagerService.java, there is a possible permissions bypass due to a missing permissions check. This could lead to local escalation of privilege, with no additional privileges needed. User interaction is not needed for exploitation. Product: Android. Versions: Android-7.0 Android-7.1.1 Android-7.1.2 Android-8.0 Android-8.1 Android-9. Android ID: A-128599467. Additional Analyst Notes: - CVE Program Container: References: - https://source.android.com/
9. Android ID: A-128599467. Additional Analyst Notes: - CVE Program Container: References: - https://source.android.com/security/bulletin/2019-06-01
CVE ID: CVE-2019-2099 State: PUBLISHED Published: 2019-06-07T19:41:09 Last Updated: 2024-08-04T18:42:49.683Z Vendors: Android Products: Android Problem Types: Elevation of privilege Description: In nfa_rw_store_ndef_rx_buf of nfa_rw_act.cc, there is a possible out-of-bound write due to a missing bounds check. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is needed for exploitation. Product: Android. Versions: Android-7.0 Android-7.1.1 Android-7.1.2 Android-8.0 Android-8.1 Android-9. Android ID: A-123583388. Additional Analyst Notes: - CVE Program Container: References: - https://source.android.com/security/bulletin/2019-06-0
Additional Analyst Notes: - CVE Program Container: References: - https://source.android.com/security/bulletin/2019-06-01
CVE ID: CVE-2019-2101 State: PUBLISHED Published: 2019-06-07T19:41:55 Last Updated: 2024-08-04T18:42:50.251Z Vendors: Android Products: Android Problem Types: Information disclosure Description: In uvc_parse_standard_control of uvc_driver.c, there is a possible out-of-bound read due to improper input validation. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation. Product: Android. Versions: Android kernel. Android ID: A-111760968. Additional Analyst Notes: - CVE Program Container: References: - https://source.android.com/security/bulletin/2019-06-01 - https://lists.debian.org/debian-lts-announce/2019
eferences: - https://source.android.com/security/bulletin/2019-06-01 - https://lists.debian.org/debian-lts-announce/2019/07/msg00022.html - https://usn.ubuntu.com/4094-1/ - http://packetstormsecurity.com/files/154245/Kernel-Live-Patch-Security-Notice-LSN-0054-1.html - https://usn.ubuntu.com/4118-1/
CVE ID: CVE-2019-2102 State: PUBLISHED Published: 2019-06-07T19:38:36 Last Updated: 2024-08-04T18:42:50.123Z Vendors: Android Products: Android Problem Types: Elevation of privilege Description: In the Bluetooth Low Energy (BLE) specification, there is a provided example Long Term Key (LTK). If a BLE device were to use this as a hardcoded LTK, it is theoretically possible for a proximate attacker to remotely inject keystrokes on a paired Android host due to improperly used crypto. User interaction is not needed for exploitation. Product: Android. Versions: Android-7.0 Android-7.1.1 Android-7.1.2 Android-8.0 Android-8.1 Android-9. Android ID: A-128843052. Additional Analyst Notes: - CVE Progr
id-7.1.1 Android-7.1.2 Android-8.0 Android-8.1 Android-9. Android ID: A-128843052. Additional Analyst Notes: - CVE Program Container: References: - https://support.apple.com/kb/HT210120 - https://support.apple.com/kb/HT210118 - https://support.apple.com/kb/HT210119 - https://source.android.com/security/bulletin/2019-06-01
CVE ID: CVE-2019-2103 State: PUBLISHED Published: 2019-09-05T21:35:11 Last Updated: 2024-08-04T18:42:50.148Z Vendors: n/a Products: Android Problem Types: Information disclosure Description: In Google Assistant in Android 9, there is a possible permissions bypass that allows the Assistant to take a screenshot of apps with FLAG_SECURE. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation. Additional Analyst Notes: - CVE Program Container: References: - https://source.android.com/security/bulletin/2019-09-01
CVE ID: CVE-2019-2104 State: PUBLISHED Published: 2019-07-08T17:34:14 Last Updated: 2024-08-04T18:42:49.887Z Vendors: n/a Products: Android Problem Types: Information disclosure Description: In HIDL, safe_union, and other C++ structs/unions being sent to application processes, there are uninitialized fields. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation. Product: Android. Versions: Android-8.0 Android-8.1 Android-9. Android ID: A-131356202 Additional Analyst Notes: - CVE Program Container: References: - https://source.android.com/security/bulletin/2019-07-01
CVE ID: CVE-2019-2105 State: PUBLISHED Published: 2019-07-08T17:34:48 Last Updated: 2024-08-04T18:42:50.233Z Vendors: n/a Products: Android Problem Types: Remote code execution Description: In FileInputStream::Read of file_input_stream.cc, there is a possible memory corruption due to uninitialized data. This could lead to remote code execution in an unprivileged process with no additional execution privileges needed. User interaction is needed for exploitation. Product: Android. Versions: Android-7.0 Android-7.1.1 Android-7.1.2 Android-8.0 Android-8.1 Android-9. Android ID: A-116114182. Additional Analyst Notes: - CVE Program Container: References: - https://source.android.com/security/bulle
A-116114182. Additional Analyst Notes: - CVE Program Container: References: - https://source.android.com/security/bulletin/2019-07-01
CVE ID: CVE-2019-2106 State: PUBLISHED Published: 2019-07-08T17:35:31 Last Updated: 2024-08-04T18:42:50.157Z Vendors: n/a Products: Android Problem Types: Remote code execution Description: In ihevcd_sao_shift_ctb of ihevcd_sao.c, there is a possible out of bounds write due to a missing bounds check. This could lead to remote code execution with no additional execution privileges needed. User interaction is needed for exploitation. Product: Android. Versions: Android-7.0 Android-7.1.1 Android-7.1.2 Android-8.0 Android-8.1 Android-9. Android ID: A-130023983. Additional Analyst Notes: - CVE Program Container: References: - https://source.android.com/security/bulletin/2019-07-01
CVE ID: CVE-2019-2107 State: PUBLISHED Published: 2019-07-08T17:36:03 Last Updated: 2024-08-04T18:42:50.026Z Vendors: n/a Products: Android Problem Types: Remote code execution Description: In ihevcd_parse_pps of ihevcd_parse_headers.c, there is a possible out of bounds write due to a missing bounds check. This could lead to remote code execution with no additional execution privileges needed. User interaction is needed for exploitation. Product: Android. Versions: Android-7.0 Android-7.1.1 Android-7.1.2 Android-8.0 Android-8.1 Android-9. Android ID: A-130024844. Additional Analyst Notes: - CVE Program Container: References: - https://source.android.com/security/bulletin/2019-07-01 - http://
Analyst Notes: - CVE Program Container: References: - https://source.android.com/security/bulletin/2019-07-01 - http://packetstormsecurity.com/files/153628/Android-VideoPlayer-ihevcd_parse_pps-Out-Of-Bounds-Write.html - http://seclists.org/fulldisclosure/2019/Jul/18
CVE ID: CVE-2019-2108 State: PUBLISHED Published: 2019-09-05T21:42:37 Last Updated: 2024-08-04T18:42:49.993Z Vendors: n/a Products: Android Problem Types: Remote code execution Description: In ihevcd_ref_list of ihevcd_ref_list.c in Android 10, there is a possible out of bounds write due to a missing bounds check. This could lead to remote code execution with no additional execution privileges needed. User interaction is needed for exploitation. Additional Analyst Notes: - CVE Program Container: References: - https://source.android.com/security/bulletin/2019-09-01
CVE ID: CVE-2019-2109 State: PUBLISHED Published: 2019-07-08T17:36:43 Last Updated: 2024-08-04T18:42:50.418Z Vendors: n/a Products: Android Problem Types: Remote code execution Description: In MakeMPEG4VideoCodecSpecificData of AVIExtractor.cpp, there is a possible out of bounds write due to an incorrect bounds check. This could lead to remote code execution with no additional execution privileges needed. User interaction is needed for exploitation. Product: Android. Versions: Android-7.0 Android-7.1.1 Android-7.1.2 Android-8.0 Android-8.1. Android ID: A-130651570. Additional Analyst Notes: - CVE Program Container: References: - https://source.android.com/security/bulletin/2019-07-01
CVE ID: CVE-2019-2110 State: PUBLISHED Published: 2019-10-11T18:15:40 Last Updated: 2024-08-04T18:42:50.002Z Vendors: n/a Products: Android Problem Types: Information disclosure Description: In ScreenRotationAnimation of ScreenRotationAnimation.java, there is a possible capture of a secure screen due to a missing permission check. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-9Android ID: A-69703445 Additional Analyst Notes: - CVE Program Container: References: - https://source.android.com/security/bulletin/2019-10-01
CVE ID: CVE-2019-2111 State: PUBLISHED Published: 2019-07-08T17:37:18 Last Updated: 2024-08-04T18:42:49.889Z Vendors: n/a Products: Android Problem Types: Remote code execution Description: In loop of DnsTlsSocket.cpp, there is a possible heap memory corruption due to a use after free. This could lead to remote code execution in the netd server with no additional execution privileges needed. User interaction is not needed for exploitation. Product: Android. Versions: Android-9. Android ID: A-122856181. Additional Analyst Notes: - CVE Program Container: References: - https://source.android.com/security/bulletin/2019-07-01
CVE ID: CVE-2019-2112 State: PUBLISHED Published: 2019-07-08T17:37:58 Last Updated: 2024-08-04T18:42:50.299Z Vendors: n/a Products: Android Problem Types: Elevation of privilege Description: In several functions of alarm.cc, there is possible memory corruption due to a use after free. This could lead to local code execution with no additional execution privileges needed. User interaction is not needed for exploitation. Product: Android. Versions: Android-8.0 Android-8.1 Android-9. Android ID: A-117997080. Additional Analyst Notes: - CVE Program Container: References: - https://source.android.com/security/bulletin/2019-07-01
CVE ID: CVE-2019-2113 State: PUBLISHED Published: 2019-07-08T17:39:13 Last Updated: 2024-08-04T18:42:50.699Z Vendors: n/a Products: Android Problem Types: Elevation of privilege Description: In setup wizard there is a bypass of some checks when wifi connection is skipped. This could lead to factory reset protection bypass with no additional privileges needed. User interaction is not needed for exploitation. Product: Android. Versions: Android-9. Android ID: A-122597079. Additional Analyst Notes: - CVE Program Container: References: - https://source.android.com/security/bulletin/2019-07-01
CVE ID: CVE-2019-2114 State: PUBLISHED Published: 2019-10-11T18:16:04 Last Updated: 2024-08-04T18:42:50.521Z Vendors: n/a Products: Android Problem Types: Elevation of privilege Description: In the default privileges of NFC, there is a possible local bypass of user interaction requirements on package installation due to a default permission. This could lead to local escalation of privilege by installing an application with no additional execution privileges needed. User interaction is needed for exploitation.Product: AndroidVersions: Android-8.0 Android-8.1 Android-9Android ID: A-123700348 Additional Analyst Notes: - CVE Program Container: References: - https://source.android.com/security/bu
ID: A-123700348 Additional Analyst Notes: - CVE Program Container: References: - https://source.android.com/security/bulletin/2019-10-01 - https://wwws.nightwatchcybersecurity.com/2019/10/24/nfc-beaming-bypasses-security-controls-in-android-cve-2019-2114/
CVE ID: CVE-2019-2115 State: PUBLISHED Published: 2019-09-05T21:38:11 Last Updated: 2024-08-04T18:42:50.413Z Vendors: n/a Products: Android Problem Types: Elevation of privilege Description: In GateKeeper::MintAuthToken of gatekeeper.cpp in Android 7.1.1, 7.1.2, 8.0, 8.1 and 9, there is possible memory corruption due to a double free. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Additional Analyst Notes: - CVE Program Container: References: - https://source.android.com/security/bulletin/2019-09-01
CVE ID: CVE-2019-2116 State: PUBLISHED Published: 2019-07-08T17:39:51 Last Updated: 2024-08-04T18:42:50.251Z Vendors: n/a Products: Android Problem Types: Information disclosure Description: In save_attr_seq of sdp_discovery.cc, there is a possible out-of-bound read due to a missing bounds check. This could lead to remote information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation. Product: Android. Versions: Android-7.0 Android-7.1.1 Android-7.1.2 Android-8.0 Android-8.1 Android-9. Android ID: A-117105007. Additional Analyst Notes: - CVE Program Container: References: - https://source.android.com/security/bulletin/2019-07-01
CVE ID: CVE-2019-2117 State: PUBLISHED Published: 2019-07-08T17:40:37 Last Updated: 2024-08-04T18:42:50.039Z Vendors: n/a Products: Android Problem Types: Information disclosure Description: In checkQueryPermission of TelephonyProvider.java, there is a possible disclosure of secure data due to a missing permission check. This could lead to local information disclosure about carrier systems with no additional execution privileges needed. User interaction is not needed for exploitation. Product: Android. Versions: Android-7.0 Android-7.1.1 Android-7.1.2 Android-8.0 Android-8.1 Android-9. Android ID: A-124107808. Additional Analyst Notes: - CVE Program Container: References: - https://source.an
1 Android-9. Android ID: A-124107808. Additional Analyst Notes: - CVE Program Container: References: - https://source.android.com/security/bulletin/2019-07-01
CVE ID: CVE-2019-2118 State: PUBLISHED Published: 2019-07-08T17:41:14 Last Updated: 2024-08-04T18:42:50.156Z Vendors: n/a Products: Android Problem Types: Information disclosure Description: In various functions of Parcel.cpp, there are uninitialized or partially initialized stack variables. These could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation. Product: Android. Versions: Android-8.0 Android-8.1 Android-9. Android ID: A-130161842. Additional Analyst Notes: - CVE Program Container: References: - https://source.android.com/security/bulletin/2019-07-01
CVE ID: CVE-2019-2119 State: PUBLISHED Published: 2019-07-08T17:41:52 Last Updated: 2024-08-04T18:42:50.645Z Vendors: n/a Products: Android Problem Types: Information disclosure Description: In multiple functions of key_store_service.cpp, there is a possible Information Disclosure due to improper locking. This could lead to local information disclosure of protected data with no additional execution privileges needed. User interaction is not needed for exploitation. Product: Android. Versions: Android-8.0 Android-8.1 Android-9. Android ID: A-131622568. Additional Analyst Notes: - CVE Program Container: References: - https://source.android.com/security/bulletin/2019-07-01
CVE ID: CVE-2019-2120 State: PUBLISHED Published: 2019-08-20T19:46:02 Last Updated: 2024-08-04T18:42:49.994Z Vendors: n/a Products: Android Problem Types: Elevation of privilege Description: In OatFileAssistant::GenerateOatFile of oat_file_assistant.cc, there is a possible file corruption issue due to an insecure default value. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation. Product: Android. Versions: Android-7.0 Android-7.1.1 Android-7.1.2 Android-8.0 Android-8.1 Android-9. Android ID: A-130821293. Additional Analyst Notes: - CVE Program Container: References: - https://source.android.com/secu
ndroid ID: A-130821293. Additional Analyst Notes: - CVE Program Container: References: - https://source.android.com/security/bulletin/2019-08-01
CVE ID: CVE-2019-2121 State: PUBLISHED Published: 2019-08-20T19:46:59 Last Updated: 2024-08-04T18:42:49.967Z Vendors: n/a Products: Android Problem Types: Elevation of privilege Description: In ActivityManagerService.attachApplication of ActivityManagerService, there is a possible race condition. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation. Product: Android. Versions: Android-9. Android ID: A-131105245. Additional Analyst Notes: - CVE Program Container: References: - https://source.android.com/security/bulletin/2019-08-01
CVE ID: CVE-2019-2122 State: PUBLISHED Published: 2019-08-20T19:47:55 Last Updated: 2024-08-04T18:42:50.585Z Vendors: n/a Products: Android Problem Types: Elevation of privilege Description: In LockTaskController.lockKeyguardIfNeeded of the LockTaskController.java, there was a difference in the handling of the default case between the WindowManager and the Settings. This could lead to a local escalation of privilege with no additional execution privileges needed. User interaction is needed for exploitation. Product: Android. Versions: Android-7.0 Android-7.1.1 Android-7.1.2 Android-8.0 Android-8.1 Android-9. Android ID: A-127605586. Additional Analyst Notes: - CVE Program Container: Referenc
Android-8.0 Android-8.1 Android-9. Android ID: A-127605586. Additional Analyst Notes: - CVE Program Container: References: - https://source.android.com/security/bulletin/2019-08-01
CVE ID: CVE-2019-2123 State: PUBLISHED Published: 2019-09-05T21:31:25 Last Updated: 2024-08-04T18:42:50.429Z Vendors: n/a Products: Android Problem Types: Elevation of privilege Description: In execTransact of Binder.java in Android 7.1.1, 7.1.2, 8.0, 8.1, and 9, there is a possible local execution of arbitrary code in a privileged process due to a memory overwrite. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation. Additional Analyst Notes: - CVE Program Container: References: - https://source.android.com/security/bulletin/2019-09-01
CVE ID: CVE-2019-2124 State: PUBLISHED Published: 2019-09-05T21:41:22 Last Updated: 2024-08-04T18:42:50.281Z Vendors: n/a Products: Android Problem Types: Information disclosure Description: In ComposeActivityEmailExternal of ComposeActivityEmailExternal.java in Android 7.1.1, 7.1.2, 8.0, 8.1 and 9, there is a possible way to silently attach files to an email due to a confused deputy. This could lead to local information disclosure. Additional Analyst Notes: - CVE Program Container: References: - https://source.android.com/security/bulletin/2019-09-01
CVE ID: CVE-2019-2125 State: PUBLISHED Published: 2019-08-20T19:48:29 Last Updated: 2024-08-04T18:42:49.913Z Vendors: n/a Products: Android Problem Types: Elevation of privilege Description: In ChangeDefaultDialerDialog.java, there is a possible escalation of privilege due to an overlay attack. This could lead to local escalation of privilege, granting privileges to a local app without the user's informed consent, with no additional privileges needed. User interaction is needed for exploitation. Product: Android. Versions: Android-7.0 Android-7.1.1 Android-7.1.2 Android-8.0 Android-8.1 Android-9. Android ID: A-132275252. Additional Analyst Notes: - CVE Program Container: References: - https:
Android-8.1 Android-9. Android ID: A-132275252. Additional Analyst Notes: - CVE Program Container: References: - https://source.android.com/security/bulletin/2019-08-01
CVE ID: CVE-2019-2126 State: PUBLISHED Published: 2019-08-20T19:49:04 Last Updated: 2024-08-04T18:42:50.421Z Vendors: n/a Products: Android Problem Types: Remote code execution Description: In ParseContentEncodingEntry of mkvparser.cc, there is a possible double free due to a missing reset of a freed pointer. This could lead to remote code execution with no additional execution privileges needed. User interaction is needed for exploitation. Product: Android. Versions: Android-7.0 Android-7.1.1 Android-7.1.2 Android-8.0 Android-8.1 Android-9. Android ID: A-127702368. Additional Analyst Notes: - CVE Program Container: References: - https://source.android.com/security/bulletin/2019-08-01 - http
nal Analyst Notes: - CVE Program Container: References: - https://source.android.com/security/bulletin/2019-08-01 - https://usn.ubuntu.com/4199-1/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/U2IIA3RSYABBUCFIHXIRVUT5CTJVWWZ6/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/DQSTK442ATWJOR4TU3MR6C3N5A6NDFFN/ - http://lists.opensuse.org/opensuse-security-announce/2020-01/msg00049.html
CVE ID: CVE-2019-2127 State: PUBLISHED Published: 2019-08-20T19:55:15 Last Updated: 2024-08-04T18:42:50.139Z Vendors: n/a Products: Android Problem Types: Elevation of privilege Description: In AudioInputDescriptor::setClientActive of AudioInputDescriptor.cpp, there is possible memory corruption due to a use after free. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation. Product: Android. Versions: Android-7.0 Android-7.1.1 Android-7.1.2 Android-8.0 Android-8.1 Android-9. Android ID: A-124899895. Additional Analyst Notes: - CVE Program Container: References: - https://source.android.com/security/bul
D: A-124899895. Additional Analyst Notes: - CVE Program Container: References: - https://source.android.com/security/bulletin/2019-08-01
CVE ID: CVE-2019-2128 State: PUBLISHED Published: 2019-08-20T19:49:36 Last Updated: 2024-08-04T18:42:50.056Z Vendors: n/a Products: Android Problem Types: Elevation of privilege Description: In ACELP_4t64_fx of c4t64fx.c, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation. Product: Android. Versions: Android-7.0 Android-7.1.1 Android-7.1.2 Android-8.0 Android-8.1 Android-9. Android ID: A-132647222. Additional Analyst Notes: - CVE Program Container: References: - https://source.android.com/security/bulletin/2019-08-01
CVE ID: CVE-2019-2129 State: PUBLISHED Published: 2019-08-20T19:50:07 Last Updated: 2024-08-04T18:42:49.984Z Vendors: n/a Products: Android Problem Types: Information disclosure Description: In extract3GPPGlobalDescriptions of TextDescriptions.cpp, there is a possible out of bounds read due to a missing bounds check. This could lead to remote information disclosure with no additional execution privileges needed. User interaction is needed for exploitation. Product: Android. Versions: Android-7.0 Android-7.1.1 Android-7.1.2 Android-8.0 Android-8.1 Android-9. Android ID: A-124781927. Additional Analyst Notes: - CVE Program Container: References: - https://source.android.com/security/bulletin/2