Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2022-20224 State: PUBLISHED Published: 2022-07-13T18:22:56 Last Updated: 2024-08-03T02:02:31.055Z Vendors: n/a Products: Android Problem Types: Information disclosure Description: In AT_SKIP_REST of bta_hf_client_at.cc, there is a possible out of bounds read due to an incorrect bounds check. This could lead to remote information disclosure in the Bluetooth stack with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-10 Android-11 Android-12 Android-12LAndroid ID: A-220732646 Additional Analyst Notes: - CVE Program Container: References: - https://source.android.com/security/bulletin/2022-07-01
CVE ID: CVE-2022-20225 State: PUBLISHED Published: 2022-07-13T18:23:02 Last Updated: 2024-08-03T02:02:31.002Z Vendors: n/a Products: Android Problem Types: Information disclosure Description: In getSubscriptionProperty of SubscriptionController.java, there is a possible read of a sensitive identifier due to a missing permission check. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-10 Android-11 Android-12 Android-12LAndroid ID: A-213457638 Additional Analyst Notes: - CVE Program Container: References: - https://source.android.com/security/bulletin/2022-07-01
CVE ID: CVE-2022-20226 State: PUBLISHED Published: 2022-07-13T18:23:07 Last Updated: 2024-08-03T02:02:31.028Z Vendors: n/a Products: Android Problem Types: Elevation of privilege Description: In finishDrawingWindow of WindowManagerService.java, there is a possible tapjacking due to improper input validation. This could lead to local escalation of privilege with User execution privileges needed. User interaction is needed for exploitation.Product: AndroidVersions: Android-12 Android-12LAndroid ID: A-213644870 Additional Analyst Notes: - CVE Program Container: References: - https://source.android.com/security/bulletin/2022-07-01
CVE ID: CVE-2022-20227 State: PUBLISHED Published: 2022-07-13T18:23:13 Last Updated: 2024-08-03T02:02:31.052Z Vendors: n/a Products: Android Problem Types: Information disclosure Description: In USB driver, there is a possible out of bounds read due to a heap buffer overflow. This could lead to local information disclosure with User execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android kernelAndroid ID: A-216825460References: Upstream kernel Additional Analyst Notes: - CVE Program Container: References: - https://source.android.com/security/bulletin/2022-07-01
CVE ID: CVE-2022-20228 State: PUBLISHED Published: 2022-07-13T18:23:20 Last Updated: 2024-08-03T02:02:31.097Z Vendors: n/a Products: Android Problem Types: Information disclosure Description: In various functions of C2DmaBufAllocator.cpp, there is a possible memory corruption due to a use after free. This could lead to remote information disclosure with no additional execution privileges needed. User interaction is needed for exploitation.Product: AndroidVersions: Android-12 Android-12LAndroid ID: A-213850092 Additional Analyst Notes: - CVE Program Container: References: - https://source.android.com/security/bulletin/2022-07-01
CVE ID: CVE-2022-20229 State: PUBLISHED Published: 2022-07-13T18:23:25 Last Updated: 2024-08-03T02:02:31.095Z Vendors: n/a Products: Android Problem Types: Remote code execution Description: In bta_hf_client_handle_cind_list_item of bta_hf_client_at.cc, there is a possible out of bounds write due to a missing bounds check. This could lead to remote code execution with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-10 Android-11 Android-12 Android-12LAndroid ID: A-224536184 Additional Analyst Notes: - CVE Program Container: References: - https://source.android.com/security/bulletin/2022-07-01
CVE ID: CVE-2022-20230 State: PUBLISHED Published: 2022-07-13T18:23:31 Last Updated: 2024-08-03T02:02:31.005Z Vendors: n/a Products: Android Problem Types: Information disclosure Description: In choosePrivateKeyAlias of KeyChain.java, there is a possible access to the user's certificate due to improper input validation. This could lead to local information disclosure with no additional execution privileges needed. User interaction is needed for exploitation.Product: AndroidVersions: Android-10 Android-11 Android-12 Android-12LAndroid ID: A-221859869 Additional Analyst Notes: - CVE Program Container: References: - https://source.android.com/security/bulletin/2022-07-01
CVE ID: CVE-2022-20231 State: PUBLISHED Published: 2022-09-14T00:00:00 Last Updated: 2024-08-03T02:02:31.033Z Vendors: n/a Products: Android Problem Types: Elevation of privilege Description: In smc_intc_request_fiq of arm_gic.c, there is a possible out of bounds write due to improper input validation. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android kernelAndroid ID: A-211485702References: N/A Additional Analyst Notes: - CVE Program Container: References: - https://source.android.com/security/bulletin/pixel/2022-10-01
CVE ID: CVE-2022-20233 State: PUBLISHED Published: 2022-06-15T13:24:47 Last Updated: 2024-08-03T02:02:31.046Z Vendors: n/a Products: Android Problem Types: Elevation of privilege Description: In param_find_digests_internal and related functions of the Titan-M source, there is a possible out of bounds write due to an incorrect bounds check. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android kernelAndroid ID: A-222472803References: N/A Additional Analyst Notes: - CVE Program Container: References: - https://source.android.com/security/bulletin/pixel/2022-06-01
CVE ID: CVE-2022-20234 State: PUBLISHED Published: 2022-07-13T18:27:24 Last Updated: 2024-08-03T02:02:31.029Z Vendors: n/a Products: Android Problem Types: Information disclosure Description: In Car Settings app, the NotificationAccessConfirmationActivity is exported. In NotificationAccessConfirmationActivity, it gets both 'mComponentName' and 'pkgTitle' from user.An unprivileged app can use a malicous mComponentName with a benign pkgTitle (e.g. Settings app) to make users enable notification access permission for the malicious app. That is, users believe they enable the notification access permission for the Settings app, but actually they enable the notification access permission for the m
tification access permission for the Settings app, but actually they enable the notification access permission for the malicious app.Once the malicious app gets the notification access permission, it can read all notifications, including users' personal information.Product: AndroidVersions: Android-12LAndroid ID: A-225189301 Additional Analyst Notes: - CVE Program Container: References: - https://source.android.com/security/bulletin/aaos/2022-07-01
CVE ID: CVE-2022-20235 State: PUBLISHED Published: 2023-01-24T00:00:00.000Z Last Updated: 2025-04-02T15:05:52.864Z Vendors: n/a Products: Android Problem Types: Elevation of privilege Description: The PowerVR GPU kernel driver maintains an "Information Page" used by its cache subsystem. This page can only be written by the GPU driver itself, but prior to DDK 1.18 however, a user-space program could write arbitrary data to the page, leading to memory corruption issues.Product: AndroidVersions: Android SoCAndroid ID: A-259967780 Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://source.android.com/security/bulletin/2023-01-01
CVE ID: CVE-2022-20236 State: PUBLISHED Published: 2022-07-13T18:23:37 Last Updated: 2024-08-03T02:02:31.096Z Vendors: n/a Products: Android Problem Types: Elevation of privilege Description: A drm driver have oob problem, could cause the system crash or EOPProduct: AndroidVersions: Android SoCAndroid ID: A-233124709 Additional Analyst Notes: - CVE Program Container: References: - https://source.android.com/security/bulletin/2022-07-01
CVE ID: CVE-2022-20237 State: PUBLISHED Published: 2022-08-11T14:58:45 Last Updated: 2024-08-03T02:02:31.080Z Vendors: n/a Products: Android Problem Types: Remote code execution Description: In BuildDevIDResponse of miscdatabuilder.cpp, there is a possible out of bounds write due to a missing bounds check. This could lead to remote code execution with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android kernelAndroid ID: A-229621649References: N/A Additional Analyst Notes: - CVE Program Container: References: - https://source.android.com/security/bulletin/pixel/2022-08-01
CVE ID: CVE-2022-20238 State: PUBLISHED Published: 2022-07-13T18:23:46 Last Updated: 2024-08-03T02:02:31.007Z Vendors: n/a Products: Android Problem Types: Elevation of privilege Description: 'remap_pfn_range' here may map out of size kernel memory (for example, may map the kernel area), and because the 'vma->vm_page_prot' can also be controlled by userspace, so userspace may map the kernel area to be writable, which is easy to be exploitedProduct: AndroidVersions: Android SoCAndroid ID: A-233154555 Additional Analyst Notes: - CVE Program Container: References: - https://source.android.com/security/bulletin/2022-07-01
CVE ID: CVE-2022-20239 State: PUBLISHED Published: 2022-08-09T20:20:38.000Z Last Updated: 2025-10-20T17:53:05.224Z Vendors: n/a Products: Android Problem Types: Elevation of privilege Description: remap_pfn_range' here may map out of size kernel memory (for example, may map the kernel area), and because the 'vma->vm_page_prot' can also be controlled by userspace, so userspace may map the kernel area to be writable, which is easy to be exploitedProduct: AndroidVersions: Android SoCAndroid ID: A-233972091 Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://source.android.com/security/bulletin/2022-08-01
CVE ID: CVE-2022-20240 State: PUBLISHED Published: 2022-12-13T00:00:00.000Z Last Updated: 2025-04-22T19:53:49.503Z Vendors: n/a Products: Android Problem Types: Elevation of privilege Description: In sOpAllowSystemRestrictionBypass of AppOpsManager.java, there is a possible leak of location information due to a missing permission check. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-12 Android-12LAndroid ID: A-231496105 Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://source.android.com/security/bulletin/2022-12-01
CVE ID: CVE-2022-20241 State: PUBLISHED Published: 2022-08-11T15:07:00 Last Updated: 2024-08-03T02:02:31.002Z Vendors: n/a Products: Android Problem Types: Information disclosure Description: In Messaging, there is a possible way to attach a private file to an SMS message due to improper input validation. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-13Android ID: A-217185011 Additional Analyst Notes: - CVE Program Container: References: - https://source.android.com/security/bulletin/android-13
CVE ID: CVE-2022-20242 State: PUBLISHED Published: 2022-08-11T15:07:16 Last Updated: 2024-08-03T02:02:31.006Z Vendors: n/a Products: Android Problem Types: Information disclosure Description: In Telephony, there is a possible way to determine whether an app is installed, without query permissions, due to side channel information disclosure. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-13Android ID: A-231986212 Additional Analyst Notes: - CVE Program Container: References: - https://source.android.com/security/bulletin/android-13
CVE ID: CVE-2022-20243 State: PUBLISHED Published: 2022-08-11T15:07:32 Last Updated: 2024-08-03T02:02:31.052Z Vendors: n/a Products: Android Problem Types: Information disclosure Description: In Core Utilities, there is a possible log information disclosure. This could lead to local information disclosure of sensitive browsing data with System execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-13Android ID: A-190199986 Additional Analyst Notes: - CVE Program Container: References: - https://source.android.com/security/bulletin/android-13
CVE ID: CVE-2022-20244 State: PUBLISHED Published: 2022-08-11T15:07:47 Last Updated: 2024-08-03T02:02:31.034Z Vendors: n/a Products: Android Problem Types: Elevation of privilege Description: In Bluetooth, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege if more than 100 bluetooth devices have been connected with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-13Android ID: A-201083240 Additional Analyst Notes: - CVE Program Container: References: - https://source.android.com/security/bulletin/android-13
CVE ID: CVE-2022-20245 State: PUBLISHED Published: 2022-08-11T15:07:59 Last Updated: 2024-08-03T02:02:31.044Z Vendors: n/a Products: Android Problem Types: Information disclosure Description: In WindowManager, there is a possible method to create a recording of the lock screen due to an insecure default value. This could lead to local information disclosure with no additional execution privileges needed. User interaction is needed for exploitation.Product: AndroidVersions: Android-13Android ID: A-215005011 Additional Analyst Notes: - CVE Program Container: References: - https://source.android.com/security/bulletin/android-13
CVE ID: CVE-2022-20246 State: PUBLISHED Published: 2022-08-11T15:08:14 Last Updated: 2024-08-03T02:02:31.045Z Vendors: n/a Products: Android Problem Types: Elevation of privilege Description: In WindowManager, there is a possible bypass of the restrictions for starting activities from the background due to an incorrect UID/permission check. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-13Android ID: A-230493191 Additional Analyst Notes: - CVE Program Container: References: - https://source.android.com/security/bulletin/android-13
CVE ID: CVE-2022-20247 State: PUBLISHED Published: 2022-08-11T15:08:29 Last Updated: 2024-08-03T02:02:31.053Z Vendors: n/a Products: Android Problem Types: Information disclosure Description: In Media, there is a possible out of bounds read due to a heap buffer overflow. This could lead to remote information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-13Android ID: A-229858836 Additional Analyst Notes: - CVE Program Container: References: - https://source.android.com/security/bulletin/android-13
CVE ID: CVE-2022-20248 State: PUBLISHED Published: 2022-08-11T15:08:44 Last Updated: 2024-08-03T02:02:31.094Z Vendors: n/a Products: Android Problem Types: Elevation of privilege Description: In Settings, there is a possible way to connect to an open network bypassing DISALLOW_CONFIG_WIFI restriction due to a logic error in the code. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-13Android ID: A-227619193 Additional Analyst Notes: - CVE Program Container: References: - https://source.android.com/security/bulletin/android-13
CVE ID: CVE-2022-20249 State: PUBLISHED Published: 2022-08-11T15:09:01 Last Updated: 2024-08-03T02:02:31.068Z Vendors: n/a Products: Android Problem Types: Information disclosure Description: In LocaleManager, there is a possible way to determine whether an app is installed, without query permissions, due to side channel information disclosure. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-13Android ID: A-226900861 Additional Analyst Notes: - CVE Program Container: References: - https://source.android.com/security/bulletin/android-13
CVE ID: CVE-2022-20250 State: PUBLISHED Published: 2022-08-11T15:09:15 Last Updated: 2024-08-03T02:02:31.127Z Vendors: n/a Products: Android Problem Types: Elevation of privilege Description: In Messaging, there is a possible way to attach files to a message without proper access checks due to improper input validation. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is needed for exploitation.Product: AndroidVersions: Android-13Android ID: A-226134095 Additional Analyst Notes: - CVE Program Container: References: - https://source.android.com/security/bulletin/android-13
CVE ID: CVE-2022-20251 State: PUBLISHED Published: 2022-08-11T15:09:30 Last Updated: 2024-08-03T02:02:31.056Z Vendors: n/a Products: Android Problem Types: Information disclosure Description: In LocaleManager, there is a possible way to determine whether an app is installed, without query permissions, due to side channel information disclosure. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-13Android ID: A-225881167 Additional Analyst Notes: - CVE Program Container: References: - https://source.android.com/security/bulletin/android-13
CVE ID: CVE-2022-20252 State: PUBLISHED Published: 2022-08-11T15:09:46 Last Updated: 2024-08-03T02:02:31.081Z Vendors: n/a Products: Android Problem Types: Information disclosure Description: In PackageManager, there is a possible way to determine whether an app is installed, without query permissions, due to side channel information disclosure. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-13Android ID: A-224547584 Additional Analyst Notes: - CVE Program Container: References: - https://source.android.com/security/bulletin/android-13
CVE ID: CVE-2022-20253 State: PUBLISHED Published: 2022-08-11T15:10:03 Last Updated: 2024-08-03T02:02:31.053Z Vendors: n/a Products: Android Problem Types: Denial of service Description: In Bluetooth, there is a possible cleanup failure due to an uncaught exception. This could lead to remote denial of service in Bluetooth with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-13Android ID: A-224545125 Additional Analyst Notes: - CVE Program Container: References: - https://source.android.com/security/bulletin/android-13
CVE ID: CVE-2022-20254 State: PUBLISHED Published: 2022-08-11T15:10:19 Last Updated: 2024-08-03T02:02:31.047Z Vendors: n/a Products: Android Problem Types: Elevation of privilege Description: In Wi-Fi, there is a permissions bypass. This could lead to local escalation of privilege from the guest user with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-13Android ID: A-223377547 Additional Analyst Notes: - CVE Program Container: References: - https://source.android.com/security/bulletin/android-13
CVE ID: CVE-2022-20255 State: PUBLISHED Published: 2022-08-11T15:10:35 Last Updated: 2024-08-03T02:02:31.060Z Vendors: n/a Products: Android Problem Types: Elevation of privilege Description: In SettingsProvider, there is a possible way to read or change the default ringtone due to a missing permission check. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-13Android ID: A-222687217 Additional Analyst Notes: - CVE Program Container: References: - https://source.android.com/security/bulletin/android-13
CVE ID: CVE-2022-20256 State: PUBLISHED Published: 2022-08-11T15:10:51 Last Updated: 2024-08-03T02:02:31.059Z Vendors: n/a Products: Android Problem Types: Elevation of privilege Description: In the Audio HAL, there is a possible out of bounds write due to a race condition. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-13Android ID: A-222572821 Additional Analyst Notes: - CVE Program Container: References: - https://source.android.com/security/bulletin/android-13
CVE ID: CVE-2022-20257 State: PUBLISHED Published: 2022-08-11T15:11:04 Last Updated: 2024-08-03T02:02:31.074Z Vendors: n/a Products: Android Problem Types: Elevation of privilege Description: In Bluetooth, there is a possible way to pair a display only device without PIN confirmation due to a logic error in the code. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-13Android ID: A-222289114 Additional Analyst Notes: - CVE Program Container: References: - https://source.android.com/security/bulletin/android-13
CVE ID: CVE-2022-20258 State: PUBLISHED Published: 2022-08-11T15:11:20 Last Updated: 2024-08-03T02:02:31.067Z Vendors: n/a Products: Android Problem Types: Elevation of privilege Description: In Bluetooth, there is a possible way to bypass compiler exploit mitigations due to a configuration error. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-13Android ID: A-221893030 Additional Analyst Notes: - CVE Program Container: References: - https://source.android.com/security/bulletin/android-13
CVE ID: CVE-2022-20259 State: PUBLISHED Published: 2022-08-11T15:11:35 Last Updated: 2024-08-03T02:02:31.026Z Vendors: n/a Products: Android Problem Types: Information disclosure Description: In Telephony, there is a possible leak of ICCID and EID due to a missing permission check. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-13Android ID: A-221431393 Additional Analyst Notes: - CVE Program Container: References: - https://source.android.com/security/bulletin/android-13
CVE ID: CVE-2022-20260 State: PUBLISHED Published: 2022-08-11T15:11:47 Last Updated: 2024-08-03T02:02:31.042Z Vendors: n/a Products: Android Problem Types: Denial of service Description: In the Phone app, there is a possible crash loop due to resource exhaustion. This could lead to local persistent denial of service in the Phone app with User execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-13Android ID: A-220865698 Additional Analyst Notes: - CVE Program Container: References: - https://source.android.com/security/bulletin/android-13
CVE ID: CVE-2022-20261 State: PUBLISHED Published: 2022-08-11T15:12:00 Last Updated: 2024-08-03T02:02:31.034Z Vendors: n/a Products: Android Problem Types: Information disclosure Description: In LocationManager, there is a possible way to get location information due to a missing permission check. This could lead to local information disclosure with System execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-13Android ID: A-219835125 Additional Analyst Notes: - CVE Program Container: References: - https://source.android.com/security/bulletin/android-13