Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2021-39632 State: PUBLISHED Published: 2022-01-14T19:11:06 Last Updated: 2024-08-04T02:13:37.330Z Vendors: n/a Products: Android Problem Types: Elevation of privilege Description: In inotify_cb of events.cpp, there is a possible out of bounds write due to an incorrect bounds check. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-11 Android-12Android ID: A-202159709 Additional Analyst Notes: - CVE Program Container: References: - https://source.android.com/security/bulletin/2022-01-01
CVE ID: CVE-2021-39633 State: PUBLISHED Published: 2022-01-14T19:11:07 Last Updated: 2024-08-04T02:13:37.423Z Vendors: n/a Products: Android Problem Types: Information disclosure Description: In gre_handle_offloads of ip_gre.c, there is a possible page fault due to an invalid memory access. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android kernelAndroid ID: A-150694665References: Upstream kernel Additional Analyst Notes: - CVE Program Container: References: - https://source.android.com/security/bulletin/2022-01-01
CVE ID: CVE-2021-39634 State: PUBLISHED Published: 2022-01-14T19:11:09 Last Updated: 2024-08-04T02:13:37.270Z Vendors: n/a Products: Android Problem Types: Elevation of privilege Description: In fs/eventpoll.c, there is a possible use after free. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android kernelAndroid ID: A-204450605References: Upstream kernel Additional Analyst Notes: - CVE Program Container: References: - https://source.android.com/security/bulletin/2022-01-01
CVE ID: CVE-2021-39635 State: PUBLISHED Published: 2022-02-11T17:40:46 Last Updated: 2024-08-04T02:13:37.663Z Vendors: n/a Products: Android Problem Types: Elevation of privilege Description: ims_ex is a vendor system service used to manage VoLTE in unisoc devices，But it does not verify the caller's permissions，so that normal apps (No phone permissions) can obtain some VoLTE sensitive information and manage VoLTE calls.Product: AndroidVersions: Android SoCAndroid ID: A-206492634 Additional Analyst Notes: - CVE Program Container: References: - https://source.android.com/security/bulletin/2022-02-01
CVE ID: CVE-2021-39636 State: PUBLISHED Published: 2021-12-15T18:05:53 Last Updated: 2024-08-04T02:13:37.313Z Vendors: n/a Products: Android Problem Types: Information disclosure Description: In do_ipt_get_ctl and do_ipt_set_ctl of ip_tables.c, there is a possible way to leak kernel information due to uninitialized data. This could lead to local information disclosure with system execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android kernelAndroid ID: A-120612905References: Upstream kernel Additional Analyst Notes: - CVE Program Container: References: - https://source.android.com/security/bulletin/pixel/2021-12-01
CVE ID: CVE-2021-39637 State: PUBLISHED Published: 2021-12-15T18:06:30 Last Updated: 2024-08-04T02:13:37.430Z Vendors: n/a Products: Android Problem Types: Information disclosure Description: In CreateDeviceInfo of trusty_remote_provisioning_context.cpp, there is a possible out of bounds read due to a missing bounds check. This could lead to local information disclosure with System execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android kernelAndroid ID: A-193579873References: N/A Additional Analyst Notes: - CVE Program Container: References: - https://source.android.com/security/bulletin/pixel/2021-12-01
CVE ID: CVE-2021-39638 State: PUBLISHED Published: 2021-12-15T18:06:43 Last Updated: 2024-08-04T02:13:37.350Z Vendors: n/a Products: Android Problem Types: Elevation of privilege Description: In periodic_io_work_func of lwis_periodic_io.c, there is a possible out of bounds write due to a use after free. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android kernelAndroid ID: A-195607566References: N/A Additional Analyst Notes: - CVE Program Container: References: - https://source.android.com/security/bulletin/pixel/2021-12-01
CVE ID: CVE-2021-39639 State: PUBLISHED Published: 2021-12-15T18:06:51 Last Updated: 2024-08-04T02:13:37.729Z Vendors: n/a Products: Android Problem Types: Elevation of privilege Description: In TBD of fvp.c, there is a possible way to glitch CPU behavior due to a missing permission check. This could lead to local escalation of privilege with physical access to device internals with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android kernelAndroid ID: A-198291476References: N/A Additional Analyst Notes: - CVE Program Container: References: - https://source.android.com/security/bulletin/pixel/2021-12-01
CVE ID: CVE-2021-39640 State: PUBLISHED Published: 2021-12-15T18:05:54 Last Updated: 2024-08-04T02:13:37.422Z Vendors: n/a Products: Android Problem Types: Elevation of privilege Description: In __dwc3_gadget_ep0_queue of ep0.c, there is a possible out of bounds write due to improper locking. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android kernelAndroid ID: A-157294279References: N/A Additional Analyst Notes: - CVE Program Container: References: - https://source.android.com/security/bulletin/pixel/2021-12-01
CVE ID: CVE-2021-39641 State: PUBLISHED Published: 2021-12-15T18:05:54 Last Updated: 2024-08-04T02:13:37.328Z Vendors: n/a Products: Android Problem Types: Elevation of privilege Description: Product: AndroidVersions: Android kernelAndroid ID: A-126949257References: N/A Additional Analyst Notes: - CVE Program Container: References: - https://source.android.com/security/bulletin/pixel/2021-12-01
CVE ID: CVE-2021-39642 State: PUBLISHED Published: 2021-12-15T18:06:45 Last Updated: 2024-08-04T02:13:37.410Z Vendors: n/a Products: Android Problem Types: Elevation of privilege Description: In synchronous_process_io_entries of lwis_ioctl.c, there is a possible out of bounds write due to a race condition. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android kernelAndroid ID: A-195731663References: N/A Additional Analyst Notes: - CVE Program Container: References: - https://source.android.com/security/bulletin/pixel/2021-12-01
CVE ID: CVE-2021-39643 State: PUBLISHED Published: 2021-12-15T18:06:43 Last Updated: 2024-08-04T02:13:37.329Z Vendors: n/a Products: Android Problem Types: Elevation of privilege Description: In ic_startRetrieveEntryValue of acropora/app/identity/ic.c, there is a possible bypass of defense-in-depth due to missing validation of the return value. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android kernelAndroid ID: A-195573629References: N/A Additional Analyst Notes: - CVE Program Container: References: - https://source.android.com/security/bulletin/pixel/2021-12-01
CVE ID: CVE-2021-39644 State: PUBLISHED Published: 2021-12-15T18:06:54 Last Updated: 2024-08-04T02:13:37.347Z Vendors: n/a Products: Android Problem Types: Elevation of privilege Description: Product: AndroidVersions: Android kernelAndroid ID: A-199809304References: N/A Additional Analyst Notes: - CVE Program Container: References: - https://source.android.com/security/bulletin/pixel/2021-12-01
CVE ID: CVE-2021-39645 State: PUBLISHED Published: 2021-12-15T18:06:53 Last Updated: 2024-08-04T02:13:37.771Z Vendors: n/a Products: Android Problem Types: Elevation of privilege Description: Product: AndroidVersions: Android kernelAndroid ID: A-199805112References: N/A Additional Analyst Notes: - CVE Program Container: References: - https://source.android.com/security/bulletin/pixel/2021-12-01
CVE ID: CVE-2021-39646 State: PUBLISHED Published: 2021-12-15T18:06:55 Last Updated: 2024-08-04T02:13:37.663Z Vendors: n/a Products: Android Problem Types: Information disclosure Description: Product: AndroidVersions: Android kernelAndroid ID: A-201537251References: N/A Additional Analyst Notes: - CVE Program Container: References: - https://source.android.com/security/bulletin/pixel/2021-12-01
CVE ID: CVE-2021-39647 State: PUBLISHED Published: 2021-12-15T18:06:52 Last Updated: 2024-08-04T02:13:37.381Z Vendors: n/a Products: Android Problem Types: Information disclosure Description: In mon_smc_load_sp of gs101-sc/plat/samsung/exynos/soc/exynos9845/smc_booting.S, there is a possible reinitialization of TEE due to improper locking. This could lead to local information disclosure with System execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android kernelAndroid ID: A-198713939References: N/A Additional Analyst Notes: - CVE Program Container: References: - https://source.android.com/security/bulletin/pixel/2021-12-01
CVE ID: CVE-2021-39648 State: PUBLISHED Published: 2021-12-15T18:05:55 Last Updated: 2024-08-04T02:13:37.668Z Vendors: n/a Products: Android Problem Types: Information disclosure Description: In gadget_dev_desc_UDC_show of configfs.c, there is a possible disclosure of kernel heap memory due to a race condition. This could lead to local information disclosure with System execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android kernelAndroid ID: A-160822094References: Upstream kernel Additional Analyst Notes: - CVE Program Container: References: - https://source.android.com/security/bulletin/pixel/2021-12-01
CVE ID: CVE-2021-39649 State: PUBLISHED Published: 2021-12-15T18:05:57 Last Updated: 2024-08-04T02:13:37.373Z Vendors: n/a Products: Android Problem Types: Elevation of privilege Description: In regmap_exit of regmap.c, there is a possible use-after-free due to improper locking. This could lead to local escalation of privilege in the kernel with System execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android kernelAndroid ID: A-174049006References: N/A Additional Analyst Notes: - CVE Program Container: References: - https://source.android.com/security/bulletin/pixel/2021-12-01
CVE ID: CVE-2021-39650 State: PUBLISHED Published: 2021-12-15T18:05:57 Last Updated: 2024-08-04T02:13:37.328Z Vendors: n/a Products: Android Problem Types: Elevation of privilege Description: In (TBD) of (TBD), there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android kernelAndroid ID: A-169763055References: N/A Additional Analyst Notes: - CVE Program Container: References: - https://source.android.com/security/bulletin/pixel/2021-12-01
CVE ID: CVE-2021-39651 State: PUBLISHED Published: 2021-12-15T18:06:27 Last Updated: 2024-08-04T02:13:37.373Z Vendors: n/a Products: Android Problem Types: Elevation of privilege Description: In TBD of TBD, there is a possible way to access PIN protected settings bypassing PIN confirmation due to a missing permission check. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android kernelAndroid ID: A-193438173References: N/A Additional Analyst Notes: - CVE Program Container: References: - https://source.android.com/security/bulletin/pixel/2021-12-01
CVE ID: CVE-2021-39652 State: PUBLISHED Published: 2021-12-15T18:06:35 Last Updated: 2024-08-04T02:13:37.965Z Vendors: n/a Products: Android Problem Types: Elevation of privilege Description: In sec_ts_parsing_cmds of (TBD), there is a possible out of bounds write due to an incorrect bounds check. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android kernelAndroid ID: A-194499021References: N/A Additional Analyst Notes: - CVE Program Container: References: - https://source.android.com/security/bulletin/pixel/2021-12-01
CVE ID: CVE-2021-39653 State: PUBLISHED Published: 2021-12-15T18:06:30 Last Updated: 2024-08-04T02:13:37.340Z Vendors: n/a Products: Android Problem Types: Elevation of privilege Description: In (TBD) of (TBD), there is a possible way to boot with a hidden debug policy due to a missing warning to the user. This could lead to local escalation of privilege after preparing the device, hiding the warning, and passing the phone to a new user, with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android kernelAndroid ID: A-193443223References: N/A Additional Analyst Notes: - CVE Program Container: References: - https://source.and
droid ID: A-193443223References: N/A Additional Analyst Notes: - CVE Program Container: References: - https://source.android.com/security/bulletin/pixel/2022-06-01
CVE ID: CVE-2021-39655 State: PUBLISHED Published: 2021-12-15T18:06:25 Last Updated: 2024-08-04T02:13:37.438Z Vendors: n/a Products: Android Problem Types: Elevation of privilege Description: Product: AndroidVersions: Android kernelAndroid ID: A-192641593References: N/A Additional Analyst Notes: - CVE Program Container: References: - https://source.android.com/security/bulletin/pixel/2021-12-01
CVE ID: CVE-2021-39656 State: PUBLISHED Published: 2021-12-15T18:05:58 Last Updated: 2024-08-04T02:13:37.837Z Vendors: n/a Products: Android Problem Types: Elevation of privilege Description: In __configfs_open_file of file.c, there is a possible use-after-free due to improper locking. This could lead to local escalation of privilege in the kernel with System execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android kernelAndroid ID: A-174049066References: Upstream kernel Additional Analyst Notes: - CVE Program Container: References: - https://source.android.com/security/bulletin/pixel/2021-12-01
CVE ID: CVE-2021-39657 State: PUBLISHED Published: 2021-12-15T18:06:37 Last Updated: 2024-08-04T02:13:37.755Z Vendors: n/a Products: Android Problem Types: Information disclosure Description: In ufshcd_eh_device_reset_handler of ufshcd.c, there is a possible out of bounds read due to a missing bounds check. This could lead to local information disclosure with System execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android kernelAndroid ID: A-194696049References: Upstream kernel Additional Analyst Notes: - CVE Program Container: References: - https://source.android.com/security/bulletin/pixel/2021-12-01
CVE ID: CVE-2021-39658 State: PUBLISHED Published: 2022-02-11T17:40:47 Last Updated: 2024-08-04T02:13:37.704Z Vendors: n/a Products: Android Problem Types: Elevation of privilege Description: ismsEx service is a vendor service in unisoc equipment。ismsEx service is an extension of sms system service，but it does not check the permissions of the caller，resulting in permission leaks。Third-party apps can use this service to arbitrarily modify and set system properties。Product: AndroidVersions: Android SoCAndroid ID: A-207479207 Additional Analyst Notes: - CVE Program Container: References: - https://source.android.com/security/bulletin/2022-02-01
CVE ID: CVE-2021-39659 State: PUBLISHED Published: 2022-01-14T19:11:11 Last Updated: 2024-08-04T02:13:37.814Z Vendors: n/a Products: Android Problem Types: Denial of service Description: In sortSimPhoneAccountsForEmergency of CreateConnectionProcessor.java, there is a possible prevention of access to emergency calling due to an unhandled exception. In rare instances, this could lead to local denial of service with User execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-10 Android-11 Android-12Android ID: A-208267659 Additional Analyst Notes: - CVE Program Container: References: - https://source.android.com/security/bulletin/2022-01-
9 Additional Analyst Notes: - CVE Program Container: References: - https://source.android.com/security/bulletin/2022-01-01
CVE ID: CVE-2021-39660 State: PUBLISHED Published: 2022-12-13T00:00:00.000Z Last Updated: 2025-04-22T19:54:43.278Z Vendors: n/a Products: Android Problem Types: Elevation of privilege Description: In TBD of TBD, there is a possible way to archive arbitrary code execution in kernel due to a race condition. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android SoCAndroid ID: A-254742984 Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://source.android.com/security/bulletin/2022-12-01
CVE ID: CVE-2021-39661 State: PUBLISHED Published: 2022-11-08T00:00:00.000Z Last Updated: 2025-05-01T15:34:31.528Z Vendors: n/a Products: Android Problem Types: Elevation of privilege Description: In _PMRLogicalOffsetToPhysicalOffset of the PowerVR kernel driver, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android SoCAndroid ID: A-246824784 Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://source.android.com/security/bulletin/2022-11-01
CVE ID: CVE-2021-39662 State: PUBLISHED Published: 2022-02-11T17:40:48 Last Updated: 2024-08-04T02:13:37.757Z Vendors: n/a Products: Android Problem Types: Elevation of privilege Description: In checkUriPermission of MediaProvider.java , there is a possible way to gain access to the content of media provider collections due to a missing permission check. This could lead to local escalation of privilege with User execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-11 Android-12Android ID: A-197302116 Additional Analyst Notes: - CVE Program Container: References: - https://source.android.com/security/bulletin/2022-05-01
CVE ID: CVE-2021-39663 State: PUBLISHED Published: 2022-02-11T17:40:49 Last Updated: 2024-08-04T02:13:37.623Z Vendors: n/a Products: Android Problem Types: Elevation of privilege Description: In openFileAndEnforcePathPermissionsHelper of MediaProvider.java, there is a possible bypass of a permissions check due to a confused deputy. This could lead to local escalation of privilege with User execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-10Android ID: A-200682135 Additional Analyst Notes: - CVE Program Container: References: - https://source.android.com/security/bulletin/2022-02-01
CVE ID: CVE-2021-39664 State: PUBLISHED Published: 2022-02-11T17:40:49 Last Updated: 2024-08-04T02:13:37.614Z Vendors: n/a Products: Android Problem Types: Information disclosure Description: In LoadedPackage::Load of LoadedArsc.cpp, there is a possible out of bounds read due to a missing bounds check. This could lead to local information disclosure when parsing an APK file with no additional execution privileges needed. User interaction is needed for exploitation.Product: AndroidVersions: Android-12Android ID: A-203938029 Additional Analyst Notes: - CVE Program Container: References: - https://source.android.com/security/bulletin/2022-02-01
CVE ID: CVE-2021-39665 State: PUBLISHED Published: 2022-02-11T17:40:50 Last Updated: 2024-08-04T02:13:37.593Z Vendors: n/a Products: Android Problem Types: Information disclosure Description: In checkSpsUpdated of AAVCAssembler.cpp, there is a possible out of bounds read due to a heap buffer overflow. This could lead to remote information disclosure with no additional execution privileges needed. User interaction is needed for exploitation.Product: AndroidVersions: Android-12Android ID: A-204077881 Additional Analyst Notes: - CVE Program Container: References: - https://source.android.com/security/bulletin/2022-02-01
CVE ID: CVE-2021-39666 State: PUBLISHED Published: 2022-02-11T17:40:51 Last Updated: 2024-08-04T02:13:37.779Z Vendors: n/a Products: Android Problem Types: Information disclosure Description: In extract of MediaMetricsItem.h, there is a possible out of bounds read due to improper input validation. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-11 Android-12Android ID: A-204445255 Additional Analyst Notes: - CVE Program Container: References: - https://source.android.com/security/bulletin/2022-02-01
CVE ID: CVE-2021-39667 State: PUBLISHED Published: 2022-03-16T14:04:06 Last Updated: 2024-08-04T02:13:37.716Z Vendors: n/a Products: Android Problem Types: Information disclosure Description: In ih264d_parse_decode_slice of ih264d_parse_slice.c, there is a possible out of bounds write due to a heap buffer overflow. This could lead to remote information disclosure with no additional execution privileges needed. User interaction is needed for exploitation.Product: AndroidVersions: Android-10 Android-11 Android-12Android ID: A-205702093 Additional Analyst Notes: - CVE Program Container: References: - https://source.android.com/security/bulletin/2022-03-01
CVE ID: CVE-2021-39668 State: PUBLISHED Published: 2022-02-11T17:40:52 Last Updated: 2024-08-04T02:13:37.768Z Vendors: n/a Products: Android Problem Types: Elevation of privilege Description: In onActivityViewReady of DetailDialog.kt, there is a possible Intent Redirect due to a confused deputy. This could lead to local escalation of privilege that allows actions performed as the System UI, with no additional execution privileges needed. User interaction is needed for exploitation.Product: AndroidVersions: Android-11 Android-12Android ID: A-193445603 Additional Analyst Notes: - CVE Program Container: References: - https://source.android.com/security/bulletin/2022-02-01
CVE ID: CVE-2021-39669 State: PUBLISHED Published: 2022-02-11T17:40:53 Last Updated: 2024-08-04T02:13:37.985Z Vendors: n/a Products: Android Problem Types: Elevation of privilege Description: In onCreate of InstallCaCertificateWarning.java, there is a possible way to mislead an user about CA installation circumstances due to a tapjacking/overlay attack. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is needed for exploitation.Product: AndroidVersions: Android-11 Android-12Android ID: A-196969991 Additional Analyst Notes: - CVE Program Container: References: - https://source.android.com/security/bulletin/2022-02-01
CVE ID: CVE-2021-39670 State: PUBLISHED Published: 2022-05-10T19:54:37 Last Updated: 2024-08-04T02:13:37.673Z Vendors: n/a Products: Android Problem Types: Denial of service Description: In setStream of WallpaperManager.java, there is a possible way to cause a permanent DoS due to improper input validation. This could lead to local denial of service with User execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-12 Android-12LAndroid ID: A-204087139 Additional Analyst Notes: - CVE Program Container: References: - https://source.android.com/security/bulletin/2022-05-01