Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2020-0098 State: PUBLISHED Published: 2020-05-14T20:08:31 Last Updated: 2024-08-04T05:47:40.523Z Vendors: n/a Products: Android Problem Types: Elevation of privilege Description: In navigateUpToLocked of ActivityStack.java, there is a possible permission bypass due to a confused deputy. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-10 Android-8.0 Android-8.1 Android-9Android ID: A-144285917 Additional Analyst Notes: - CVE Program Container: References: - https://source.android.com/security/bulletin/2020-05-01
CVE ID: CVE-2020-0099 State: PUBLISHED Published: 2020-12-14T21:49:26 Last Updated: 2024-08-04T05:47:40.571Z Vendors: n/a Products: Android Problem Types: Elevation of privilege Description: In addWindow of WindowManagerService.java, there is a possible window overlay attack due to an insecure default value. This could lead to local escalation of privilege via tapjacking with no additional execution privileges needed. User interaction is needed for exploitation.Product: AndroidVersions: Android-8.0 Android-8.1 Android-9 Android-10Android ID: A-141745510 Additional Analyst Notes: - CVE Program Container: References: - https://source.android.com/security/bulletin/2020-12-01
CVE ID: CVE-2020-0100 State: PUBLISHED Published: 2020-05-14T20:12:37 Last Updated: 2024-08-04T05:47:40.559Z Vendors: n/a Products: Android Problem Types: Information disclosure Description: In onTransact of IHDCP.cpp, there is a possible out of bounds read due to incorrect error handling. This could lead to local information disclosure of data from a privileged process with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-8.1 Android-8.0Android ID: A-150156584 Additional Analyst Notes: - CVE Program Container: References: - https://source.android.com/security/bulletin/2020-05-01
CVE ID: CVE-2020-0101 State: PUBLISHED Published: 2020-05-14T20:08:43 Last Updated: 2024-08-04T05:47:40.782Z Vendors: n/a Products: Android Problem Types: Information disclosure Description: In BnCrypto::onTransact of ICrypto.cpp, there is a possible information disclosure due to uninitialized data. This could lead to local information disclosure with System execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-8.0 Android-8.1 Android-9 Android-10Android ID: A-144767096 Additional Analyst Notes: - CVE Program Container: References: - https://source.android.com/security/bulletin/2020-05-01
CVE ID: CVE-2020-0102 State: PUBLISHED Published: 2020-05-14T20:08:17 Last Updated: 2024-08-04T05:47:40.855Z Vendors: n/a Products: Android Problem Types: Elevation of privilege Description: In GattServer::SendResponse of gatt_server.cc, there is a possible out of bounds write due to an incorrect bounds check. This could lead to local escalation of privilege with User execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-8.0 Android-8.1 Android-9 Android-10Android ID: A-143231677 Additional Analyst Notes: - CVE Program Container: References: - https://source.android.com/security/bulletin/2020-05-01
CVE ID: CVE-2020-0103 State: PUBLISHED Published: 2020-05-14T20:10:14 Last Updated: 2024-08-04T05:47:40.689Z Vendors: n/a Products: Android Problem Types: Remote code execution Description: In a2dp_aac_decoder_cleanup of a2dp_aac_decoder.cc, there is a possible invalid free due to memory corruption. This could lead to remote code execution with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-10 Android-9Android ID: A-148107188 Additional Analyst Notes: - CVE Program Container: References: - https://source.android.com/security/bulletin/2020-05-01
CVE ID: CVE-2020-0104 State: PUBLISHED Published: 2020-05-14T20:08:37 Last Updated: 2024-08-04T05:47:40.864Z Vendors: n/a Products: Android Problem Types: Information disclosure Description: In onShowingStateChanged of KeyguardStateMonitor.java, there is a possible inappropriate read due to a logic error. This could lead to local information disclosure of keyguard-protected data with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-9 Android-10Android ID: A-144430870 Additional Analyst Notes: - CVE Program Container: References: - https://source.android.com/security/bulletin/2020-05-01
CVE ID: CVE-2020-0105 State: PUBLISHED Published: 2020-05-14T20:08:24 Last Updated: 2024-08-04T05:47:40.864Z Vendors: n/a Products: Android Problem Types: Elevation of privilege Description: In onKeyguardVisibilityChanged of key_store_service.cpp, there is a missing permission check. This could lead to local escalation of privilege, allowing apps to use keyguard-bound keys when the screen is locked, with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-9 Android-10Android ID: A-144285084 Additional Analyst Notes: - CVE Program Container: References: - https://source.android.com/security/bulletin/2020-05-01
CVE ID: CVE-2020-0106 State: PUBLISHED Published: 2020-05-14T20:10:32 Last Updated: 2024-08-04T05:47:40.841Z Vendors: n/a Products: Android Problem Types: Information disclosure Description: In getCellLocation of PhoneInterfaceManager.java, there is a possible permission bypass due to a missing SDK version check. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-10Android ID: A-148414207 Additional Analyst Notes: - CVE Program Container: References: - https://source.android.com/security/bulletin/2020-05-01
CVE ID: CVE-2020-0107 State: PUBLISHED Published: 2020-07-17T20:08:17 Last Updated: 2024-08-04T05:47:40.861Z Vendors: n/a Products: Android Problem Types: Information disclosure Description: In getUiccCardsInfo of PhoneInterfaceManager.java, there is a possible permissions bypass due to improper input validation. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-10Android ID: A-146570216 Additional Analyst Notes: - CVE Program Container: References: - https://source.android.com/security/bulletin/2020-07-01
CVE ID: CVE-2020-0108 State: PUBLISHED Published: 2020-08-11T19:25:49 Last Updated: 2024-08-04T05:47:40.679Z Vendors: n/a Products: Android Problem Types: Elevation of privilege Description: In postNotification of ServiceRecord.java, there is a possible bypass of foreground process restrictions due to an uncaught exception. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-10 Android-8.1 Android-9Android ID: A-140108616 Additional Analyst Notes: - CVE Program Container: References: - https://source.android.com/security/bulletin/2020-08-01
CVE ID: CVE-2020-0109 State: PUBLISHED Published: 2020-05-14T20:10:08 Last Updated: 2024-08-04T05:47:40.782Z Vendors: n/a Products: Android Problem Types: Elevation of privilege Description: In simulatePackageSuspendBroadcast of NotificationManagerService.java, there is a missing permission check. This could lead to local escalation of privilege by creating fake system notifications with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-9 Android-10Android ID: A-148059175 Additional Analyst Notes: - CVE Program Container: References: - https://source.android.com/security/bulletin/2020-05-01
CVE ID: CVE-2020-0110 State: PUBLISHED Published: 2020-05-14T20:10:20 Last Updated: 2024-08-04T05:47:40.797Z Vendors: n/a Products: Android Problem Types: Elevation of privilege Description: In psi_write of psi.c, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android kernelAndroid ID: A-148159562References: Upstream kernel Additional Analyst Notes: - CVE Program Container: References: - https://source.android.com/security/bulletin/2020-05-01 - https://www.intel.com/content/www/us/en/security-center/
es: - https://source.android.com/security/bulletin/2020-05-01 - https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00533.html
CVE ID: CVE-2020-0113 State: PUBLISHED Published: 2020-06-10T17:12:05 Last Updated: 2024-08-04T05:47:40.782Z Vendors: n/a Products: Android Problem Types: Information disclosure Description: In sendCaptureResult of Camera3OutputUtils.cpp, there is a possible out of bounds read due to a use after free. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-10 Android-9Android ID: A-150944913 Additional Analyst Notes: - CVE Program Container: References: - https://source.android.com/security/bulletin/2020-06-01
CVE ID: CVE-2020-0114 State: PUBLISHED Published: 2020-06-10T17:10:57 Last Updated: 2024-08-04T05:47:40.682Z Vendors: n/a Products: Android Problem Types: Elevation of privilege Description: In onCreateSliceProvider of KeyguardSliceProvider.java, there is a possible confused deputy due to a PendingIntent error. This could lead to local escalation of privilege that allows actions performed as the System UI, with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-10Android ID: A-147606347 Additional Analyst Notes: - CVE Program Container: References: - https://source.android.com/security/bulletin/2020-06-01
CVE ID: CVE-2020-0115 State: PUBLISHED Published: 2020-06-10T17:11:32 Last Updated: 2024-08-04T05:47:40.821Z Vendors: n/a Products: Android Problem Types: Elevation of privilege Description: In verifyIntentFiltersIfNeeded of PackageManagerService.java, there is a possible settings bypass allowing an app to become the default handler for arbitrary domains. This could lead to local escalation of privilege with User execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-8.1 Android-9 Android-10 Android-8.0Android ID: A-150038428 Additional Analyst Notes: - CVE Program Container: References: - https://source.android.com/security/bulletin/20
0038428 Additional Analyst Notes: - CVE Program Container: References: - https://source.android.com/security/bulletin/2020-06-01
CVE ID: CVE-2020-0116 State: PUBLISHED Published: 2020-06-10T17:12:22 Last Updated: 2024-08-04T05:47:40.742Z Vendors: n/a Products: Android Problem Types: Information disclosure Description: In checkSystemLocationAccess of LocationAccessPolicy.java, there is a possible bypass of user profile isolation due to a permissions bypass. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-10Android ID: A-151330809 Additional Analyst Notes: - CVE Program Container: References: - https://source.android.com/security/bulletin/2020-06-01
CVE ID: CVE-2020-0117 State: PUBLISHED Published: 2020-06-10T17:12:15 Last Updated: 2024-08-04T05:47:40.743Z Vendors: n/a Products: Android Problem Types: Remote code execution Description: In aes_cmac of aes_cmac.cc, there is a possible out of bounds write due to an integer overflow. This could lead to remote code execution in the bluetooth server with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-8.1 Android-9 Android-10 Android-8.0Android ID: A-151155194 Additional Analyst Notes: - CVE Program Container: References: - https://source.android.com/security/bulletin/2020-06-01
CVE ID: CVE-2020-0118 State: PUBLISHED Published: 2020-06-10T17:11:49 Last Updated: 2024-08-04T05:47:40.819Z Vendors: n/a Products: Android Problem Types: Elevation of privilege Description: In addListener of RegionSamplingThread.cpp, there is a possible out of bounds write due to improper input validation. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is needed for exploitation.Product: AndroidVersions: Android-10Android ID: A-150904694 Additional Analyst Notes: - CVE Program Container: References: - https://source.android.com/security/bulletin/2020-06-01
CVE ID: CVE-2020-0119 State: PUBLISHED Published: 2020-06-10T17:11:42 Last Updated: 2024-08-04T05:47:40.878Z Vendors: n/a Products: Android Problem Types: Information disclosure Description: In addOrUpdateNetworkInternal and related functions of WifiConfigManager.java, there is a possible man in the middle attack due to improper certificate validation. This could lead to remote information disclosure with no additional execution privileges needed. User interaction is needed for exploitation.Product: AndroidVersions: Android-10Android ID: A-150500247 Additional Analyst Notes: - CVE Program Container: References: - https://source.android.com/security/bulletin/2020-06-01
CVE ID: CVE-2020-0120 State: PUBLISHED Published: 2020-07-17T19:51:53 Last Updated: 2024-08-04T05:47:40.857Z Vendors: n/a Products: Android Problem Types: Elevation of privilege Description: In notifyErrorForPendingRequests of QCamera3HWI.cpp, there is a possible out of bounds write due to a heap buffer overflow. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-10Android ID: A-149995442 Additional Analyst Notes: - CVE Program Container: References: - https://source.android.com/security/bulletin/pixel/2020-06-01
CVE ID: CVE-2020-0121 State: PUBLISHED Published: 2020-06-10T17:11:24 Last Updated: 2024-08-04T05:47:40.794Z Vendors: n/a Products: Android Problem Types: Information disclosure Description: In updateUidProcState of AppOpsService.java, there is a possible permission bypass due to a logic error. This could lead to local information disclosure of location data with User execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-10Android ID: A-148180766 Additional Analyst Notes: - CVE Program Container: References: - https://source.android.com/security/bulletin/2020-06-01
CVE ID: CVE-2020-0122 State: PUBLISHED Published: 2020-07-17T20:09:18 Last Updated: 2024-08-04T05:47:40.986Z Vendors: n/a Products: Android Problem Types: Elevation of privilege Description: In the permission declaration for com.google.android.providers.gsf.permission.WRITE_GSERVICES in AndroidManifest.xml, there is a possible permissions bypass. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-8.0 Android-8.1 Android-9 Android-10Android ID: A-147247775 Additional Analyst Notes: - CVE Program Container: References: - https://source.android.com/security/bulletin/2020-07-0
Additional Analyst Notes: - CVE Program Container: References: - https://source.android.com/security/bulletin/2020-07-01
CVE ID: CVE-2020-0123 State: PUBLISHED Published: 2020-09-17T15:23:08 Last Updated: 2024-08-04T05:47:40.794Z Vendors: n/a Products: Android Problem Types: Elevation of privilege Description: There is a possible out of bounds write due to an incorrect bounds check.Product: AndroidVersions: Android SoCAndroid ID: A-149871374 Additional Analyst Notes: - CVE Program Container: References: - https://source.android.com/security/bulletin/2020-09-01
CVE ID: CVE-2020-0124 State: PUBLISHED Published: 2020-06-11T14:13:27 Last Updated: 2024-08-04T05:47:40.825Z Vendors: n/a Products: Android Problem Types: Elevation of privilege Description: In markBootComplete of InstalldNativeService.cpp, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-10Android ID: A-140237592 Additional Analyst Notes: - CVE Program Container: References: - https://source.android.com/security/bulletin/pixel/2020-06-01
CVE ID: CVE-2020-0125 State: PUBLISHED Published: 2020-09-17T20:54:00 Last Updated: 2024-08-04T05:47:40.755Z Vendors: n/a Products: Android Problem Types: Information disclosure Description: In mediadrm, there is a possible out of bounds read due to a missing bounds check. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-11Android ID: A-137282168 Additional Analyst Notes: - CVE Program Container: References: - https://source.android.com/security/bulletin/android-11
CVE ID: CVE-2020-0126 State: PUBLISHED Published: 2020-06-11T14:43:47 Last Updated: 2024-08-04T05:47:40.884Z Vendors: n/a Products: Android Problem Types: Elevation of privilege Description: In multiple functions in DrmPlugin.cpp, there is a possible use after free due to a race condition. This could lead to local code execution with System execution privileges required. User interaction is not needed for exploitation.Product: AndroidVersions: Android-10Android ID: A-137878930 Additional Analyst Notes: - CVE Program Container: References: - https://source.android.com/security/bulletin/pixel/2020-06-01
CVE ID: CVE-2020-0127 State: PUBLISHED Published: 2020-06-11T14:43:47 Last Updated: 2024-08-04T05:47:40.725Z Vendors: n/a Products: Android Problem Types: Information disclosure Description: In AudioStream::decode of AudioGroup.cpp, there is a possible out of bounds read due to a missing bounds check. This could lead to remote information disclosure in the phone process with no additional execution privileges needed. User interaction is needed for exploitation.Product: AndroidVersions: Android-10Android ID: A-140054506 Additional Analyst Notes: - CVE Program Container: References: - https://source.android.com/security/bulletin/pixel/2020-06-01
CVE ID: CVE-2020-0128 State: PUBLISHED Published: 2020-06-11T14:43:47 Last Updated: 2024-08-04T05:47:40.927Z Vendors: n/a Products: Android Problem Types: Information disclosure Description: In addPacket of AMPEG4ElementaryAssembler, there is an out of bounds read due to an integer overflow. This could lead to remote information disclosure with no additional execution privileges required. User interaction is not needed for exploitation.Product: AndroidVersions: Android-10Android ID: A-123940919 Additional Analyst Notes: - CVE Program Container: References: - https://source.android.com/security/bulletin/pixel/2020-06-01
CVE ID: CVE-2020-0129 State: PUBLISHED Published: 2020-06-11T14:43:48 Last Updated: 2024-08-04T05:47:40.862Z Vendors: n/a Products: Android Problem Types: Elevation of privilege Description: In SetData of btm_ble_multi_adv.cc, there is a possible out-of-bound write due to an incorrect bounds check. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-10Android ID: A-123292010 Additional Analyst Notes: - CVE Program Container: References: - https://source.android.com/security/bulletin/pixel/2020-06-01
CVE ID: CVE-2020-0130 State: PUBLISHED Published: 2020-09-17T20:46:29 Last Updated: 2024-08-04T05:47:40.789Z Vendors: n/a Products: Android Problem Types: Elevation of privilege Description: In screencap, there is a possible command injection due to improper input validation. This could lead to local escalation of privilege in a system process with User execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-11Android ID: A-123230379 Additional Analyst Notes: - CVE Program Container: References: - https://source.android.com/security/bulletin/android-11
CVE ID: CVE-2020-0131 State: PUBLISHED Published: 2020-06-11T14:43:47 Last Updated: 2024-08-04T05:47:40.781Z Vendors: n/a Products: Android Problem Types: Remote code execution Description: In parseChunk of MPEG4Extractor.cpp, there is a possible out of bounds write due to incompletely initialized data. This could lead to remote code execution with no additional execution privileges needed. User interaction is needed for exploitation.Product: AndroidVersions: Android-10Android ID: A-151159638 Additional Analyst Notes: - CVE Program Container: References: - https://source.android.com/security/bulletin/pixel/2020-06-01
CVE ID: CVE-2020-0132 State: PUBLISHED Published: 2020-06-11T14:43:47 Last Updated: 2024-08-04T05:47:40.882Z Vendors: n/a Products: Android Problem Types: Information disclosure Description: In BnAAudioService::onTransact of IAAudioService.cpp, there is a possible out of bounds read due to unsafe deserialization. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-10Android ID: A-139473816 Additional Analyst Notes: - CVE Program Container: References: - https://source.android.com/security/bulletin/pixel/2020-06-01
CVE ID: CVE-2020-0133 State: PUBLISHED Published: 2020-06-11T14:43:48 Last Updated: 2024-08-04T05:47:40.796Z Vendors: n/a Products: Android Problem Types: Elevation of privilege Description: In MockLocationAppPreferenceController.java, it is possible to mock the GPS location of the device due to a permissions bypass. This could lead to local escalation of privilege with User execution privileges needed. User interaction is needed for exploitation.Product: AndroidVersions: Android-10Android ID: A-145136060 Additional Analyst Notes: - CVE Program Container: References: - https://source.android.com/security/bulletin/pixel/2020-06-01
CVE ID: CVE-2020-0134 State: PUBLISHED Published: 2020-06-11T14:43:47 Last Updated: 2024-08-04T05:47:40.867Z Vendors: n/a Products: Android Problem Types: Information disclosure Description: In BnDrm::onTransact of IDrm.cpp, there is a possible information disclosure due to uninitialized data. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-10Android ID: A-146052771 Additional Analyst Notes: - CVE Program Container: References: - https://source.android.com/security/bulletin/pixel/2020-06-01
CVE ID: CVE-2020-0135 State: PUBLISHED Published: 2020-06-11T14:43:47 Last Updated: 2024-08-04T05:47:40.854Z Vendors: n/a Products: Android Problem Types: Information disclosure Description: In dump of RollbackManagerServiceImpl.java, there is a possible backup metadata exposure due to a missing permission check. This could lead to local information disclosure with System execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-10Android ID: A-150949837 Additional Analyst Notes: - CVE Program Container: References: - https://source.android.com/security/bulletin/pixel/2020-06-01
CVE ID: CVE-2020-0136 State: PUBLISHED Published: 2020-06-11T14:43:48 Last Updated: 2024-08-04T05:47:40.750Z Vendors: n/a Products: Android Problem Types: Elevation of privilege Description: In multiple locations of Parcel.cpp, there is a possible out-of-bounds write due to an integer overflow. This could lead to local escalation of privilege in the system server with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-10Android ID: A-120078455 Additional Analyst Notes: - CVE Program Container: References: - https://source.android.com/security/bulletin/pixel/2020-06-01