deardaniel/secdata-raw huggingface dataset:
CVE: CVE-2017-0476
Published: 2017-03-08
Description: A remote code execution vulnerability in AOSP Messaging could enable an attacker using a specially crafted file to cause memory corruption during media file and data processing. This issue is rated as High due to the possibility of remote code execution within the context of an unprivileged process. Product: Android. Versions: 6.0, 6.0.1, 7.0, 7.1.1. Android ID: A-33388925.
CVSS Score: 7.8 (HIGH)
CWE: CWE-119
References: http://www.securityfocus.com/bid/96756; http://www.securitytracker.com/id/1037968; https://source.android.com/security/bulletin/2017-03-01
CVE: CVE-2017-0477
Published: 2017-03-08
Description: A remote code execution vulnerability in libgdx could enable an attacker using a specially crafted file to execute arbitrary code within the context of an unprivileged process. This issue is rated as High due to the possibility of remote code execution in an application that uses this library. Product: Android. Versions: 7.1.1. Android ID: A-33621647.
CVSS Score: 7.8 (HIGH)
CWE: CWE-119
References: http://www.securityfocus.com/bid/96760; http://www.securitytracker.com/id/1037968; https://source.android.com/security/bulletin/2017-03-01
CVE: CVE-2017-0478
Published: 2017-03-08
Description: A remote code execution vulnerability in the Framesequence library could enable an attacker using a specially crafted file to execute arbitrary code in the context of an unprivileged process. This issue is rated as High due to the possibility of remote code execution in an application that uses the Framesequence library. Product: Android. Versions: 5.0.2, 5.1.1, 6.0, 6.0.1, 7.0, 7.1.1. Android ID: A-33718716.
CVSS Score: 7.8 (HIGH)
References: http://www.securityfocus.com/bid/96762; http://www.securitytracker.com/id/1037968; https://github.com/JiounDai/CVE-2017-0478
CVE: CVE-2017-0479
Published: 2017-03-08
Description: An elevation of privilege vulnerability in Audioserver could enable a local malicious application to execute arbitrary code within the context of a privileged process. This issue is rated as High because it could be used to gain local access to elevated capabilities, which are not normally accessible to a third-party application. Product: Android. Versions: 4.4.4, 5.0.2, 5.1.1, 6.0, 6.0.1, 7.0, 7.1.1. Android ID: A-32707507.
CVSS Score: 7.8 (HIGH)
References: http://www.securityfocus.com/bid/96958; http://www.securitytracker.com/id/1037968; https://source.android.com/security/bulletin/2017-03-01
CVE: CVE-2017-0480
Published: 2017-03-08
Description: An elevation of privilege vulnerability in Audioserver could enable a local malicious application to execute arbitrary code within the context of a privileged process. This issue is rated as High because it could be used to gain local access to elevated capabilities, which are not normally accessible to a third-party application. Product: Android. Versions: 4.4.4, 5.0.2, 5.1.1, 6.0, 6.0.1, 7.0, 7.1.1. Android ID: A-32705429.
CVSS Score: 7.8 (HIGH)
References: http://www.securityfocus.com/bid/96958; http://www.securitytracker.com/id/1037968; https://source.android.com/security/bulletin/2017-03-01
CVE: CVE-2017-0481
Published: 2017-03-08
Description: An elevation of privilege vulnerability in NFC could enable a proximate attacker to execute arbitrary code within the context of a privileged process. This issue is rated as High because it could be used to gain local access to elevated capabilities, which are not normally accessible to a third-party application. Product: Android. Versions: 4.4.4, 5.0.2, 5.1.1, 6.0, 6.0.1, 7.0, 7.1.1. Android ID: A-33434992.
CVSS Score: 7.8 (HIGH)
CWE: CWE-120
References: http://www.securityfocus.com/bid/96765; http://www.securityfocus.com/bid/96953; http://www.securitytracker.com/id/1037968
CVE: CVE-2017-0482
Published: 2017-03-08
Description: A denial of service vulnerability in Mediaserver could enable an attacker to use a specially crafted file to cause a device hang or reboot. This issue is rated as High severity due to the possibility of remote denial of service. Product: Android. Versions: 6.0, 6.0.1, 7.0, 7.1.1. Android ID: A-33090864.
CVSS Score: 5.5 (MEDIUM)
References: http://www.securityfocus.com/bid/96733; http://www.securitytracker.com/id/1037968; https://source.android.com/security/bulletin/2017-03-01
CVE: CVE-2017-0483
Published: 2017-03-08
Description: A denial of service vulnerability in Mediaserver could enable an attacker to use a specially crafted file to cause a device hang or reboot. This issue is rated as High severity due to the possibility of remote denial of service. Product: Android. Versions: 5.0.2, 5.1.1, 6.0, 6.0.1, 7.0, 7.1.1. Android ID: A-33137046.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-20
References: http://www.securityfocus.com/bid/96733; http://www.securitytracker.com/id/1037968; https://source.android.com/security/bulletin/2017-03-01
CVE: CVE-2017-0484
Published: 2017-03-08
Description: A denial of service vulnerability in Mediaserver could enable an attacker to use a specially crafted file to cause a device hang or reboot. This issue is rated as High severity due to the possibility of remote denial of service. Product: Android. Versions: 6.0, 6.0.1, 7.0, 7.1.1. Android ID: A-33298089.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-20
References: http://www.securityfocus.com/bid/96733; http://www.securitytracker.com/id/1037968; https://source.android.com/security/bulletin/2017-03-01
CVE: CVE-2017-0485
Published: 2017-03-08
Description: A denial of service vulnerability in Mediaserver could enable an attacker to use a specially crafted file to cause a device hang or reboot. This issue is rated as High severity due to the possibility of remote denial of service. Product: Android. Versions: 6.0, 6.0.1, 7.0, 7.1.1. Android ID: A-33387820.
CVSS Score: 5.5 (MEDIUM)
References: http://www.securityfocus.com/bid/96733; http://www.securitytracker.com/id/1037968; https://source.android.com/security/bulletin/2017-03-01
CVE: CVE-2017-0486
Published: 2017-03-08
Description: A denial of service vulnerability in Mediaserver could enable an attacker to use a specially crafted file to cause a device hang or reboot. This issue is rated as High severity due to the possibility of remote denial of service. Product: Android. Versions: 6.0, 6.0.1, 7.0, 7.1.1. Android ID: A-33621215.
CVSS Score: 5.5 (MEDIUM)
References: http://www.securityfocus.com/bid/96733; http://www.securitytracker.com/id/1037968; https://source.android.com/security/bulletin/2017-03-01
CVE: CVE-2017-0487
Published: 2017-03-08
Description: A denial of service vulnerability in Mediaserver could enable an attacker to use a specially crafted file to cause a device hang or reboot. This issue is rated as High severity due to the possibility of remote denial of service. Product: Android. Versions: 6.0, 6.0.1, 7.0, 7.1.1. Android ID: A-33751193.
CVSS Score: 5.5 (MEDIUM)
References: http://www.securityfocus.com/bid/96733; http://www.securitytracker.com/id/1037968; https://source.android.com/security/bulletin/2017-03-01
CVE: CVE-2017-0488
Published: 2017-03-08
Description: A denial of service vulnerability in Mediaserver could enable an attacker to use a specially crafted file to cause a device hang or reboot. This issue is rated as High severity due to the possibility of remote denial of service. Product: Android. Versions: 6.0, 6.0.1, 7.0, 7.1.1. Android ID: A-34097213.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-20
References: http://www.securityfocus.com/bid/96733; http://www.securitytracker.com/id/1037968; https://source.android.com/security/bulletin/2017-03-01
CVE: CVE-2017-0489
Published: 2017-03-08
Description: An elevation of privilege vulnerability in Location Manager could enable a local malicious application to bypass operating system protections for location data. This issue is rated as Moderate because it could be used to generate inaccurate data. Product: Android. Versions: 4.4.4, 5.0.2, 5.1.1, 6.0, 6.0.1, 7.0, 7.1.1. Android ID: A-33091107.
CVSS Score: 5.5 (MEDIUM)
References: http://www.securityfocus.com/bid/96792; http://www.securitytracker.com/id/1037968; https://source.android.com/security/bulletin/2017-03-01
CVE: CVE-2017-0490
Published: 2017-03-08
Description: An elevation of privilege vulnerability in Wi-Fi could enable a local malicious application to delete user data. This issue is rated as Moderate because it is a local bypass of user interaction requirements that would normally require either user initiation or user permission. Product: Android. Versions: 6.0, 6.0.1, 7.0, 7.1.1. Android ID: A-33178389.
CVSS Score: 5.5 (MEDIUM)
References: http://www.securityfocus.com/bid/96790; http://www.securitytracker.com/id/1037968; https://source.android.com/security/bulletin/2017-03-01
CVE: CVE-2017-0491
Published: 2017-03-08
Description: An elevation of privilege vulnerability in Package Manager could enable a local malicious application to prevent users from uninstalling applications or removing permissions from applications. This issue is rated as Moderate because it is a local bypass of user interaction requirements. Product: Android. Versions: 4.4.4, 5.0.2, 5.1.1, 6.0, 6.0.1, 7.0, 7.1.1. Android ID: A-32553261.
CVSS Score: 5.5 (MEDIUM)
References: http://www.securityfocus.com/bid/96791; http://www.securitytracker.com/id/1037968; https://source.android.com/security/bulletin/2017-03-01
CVE: CVE-2017-0492
Published: 2017-03-08
Description: An elevation of privilege vulnerability in the System UI could enable a local malicious application to create a UI overlay covering the entire screen. This issue is rated as Moderate because it is a local bypass of user interaction requirements that would normally require either user initiation or user permission. Product: Android. Versions: 7.1.1. Android ID: A-30150688.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-1021
References: http://www.securityfocus.com/bid/96794; http://www.securitytracker.com/id/1037968; https://source.android.com/security/bulletin/2017-03-01
CVE: CVE-2017-0494
Published: 2017-03-08
Description: An information disclosure vulnerability in AOSP Messaging could enable a remote attacker using a special crafted file to access data outside of its permission levels. This issue is rated as Moderate because it could be used to access sensitive data without permission. Product: Android. Versions: 6.0, 6.0.1, 7.0, 7.1.1. Android ID: A-32764144.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-200
References: http://www.securityfocus.com/bid/96789; http://www.securitytracker.com/id/1037968; https://source.android.com/security/bulletin/2017-03-01
CVE: CVE-2017-0495
Published: 2017-03-08
Description: An information disclosure vulnerability in Mediaserver could enable a local malicious application to access data outside of its permission levels. This issue is rated as Moderate because it could be used to access sensitive data without permission. Product: Android. Versions: 6.0, 6.0.1, 7.0, 7.1.1. Android ID: A-33552073.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-200
References: http://www.securityfocus.com/bid/96796; http://www.securitytracker.com/id/1037968; https://source.android.com/security/bulletin/2017-03-01
CVE: CVE-2017-0496
Published: 2017-03-08
Description: A denial of service vulnerability in Setup Wizard could allow a local malicious application to temporarily block access to an affected device. This issue is rated as Moderate because it may require a factory reset to repair the device. Product: Android. Versions: 5.0.2, 5.1.1, 6.0, 6.0.1. Android ID: A-31554152.
CVSS Score: 5.5 (MEDIUM)
References: http://www.securityfocus.com/bid/96788; http://www.securitytracker.com/id/1037968; https://source.android.com/security/bulletin/2017-03-01
CVE: CVE-2017-0497
Published: 2017-03-08
Description: A denial of service vulnerability in Mediaserver could enable an attacker to use a specially crafted file to cause a device hang or reboot. This issue is rated as Moderate because it requires an uncommon device configuration. Product: Android. Versions: 7.0, 7.1.1. Android ID: A-33300701.
CVSS Score: 4.7 (MEDIUM)
References: http://www.securityfocus.com/bid/96795; http://www.securitytracker.com/id/1037968; https://source.android.com/security/bulletin/2017-03-01
CVE: CVE-2017-0498
Published: 2017-03-08
Description: A denial of service vulnerability in Setup Wizard could allow a local attacker to require Google account sign-in after a factory reset. This issue is rated as Moderate because it may require a factory reset to repair the device. Product: Android. Versions: 5.1.1, 6.0, 6.0.1, 7.0, 7.1.1. Android ID: A-30352311.
CVSS Score: 5.5 (MEDIUM)
References: http://www.securityfocus.com/bid/96793; http://www.securitytracker.com/id/1037968; https://source.android.com/security/bulletin/2017-03-01
CVE: CVE-2017-0499
Published: 2017-03-08
Description: A denial of service vulnerability in Audioserver could enable a local malicious application to cause a device hang or reboot. This issue is rated as Low due to the possibility of a temporary denial of service. Product: Android. Versions: 5.1.1, 6.0, 6.0.1, 7.0, 7.1.1. Android ID: A-32095713.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-20
References: http://www.securityfocus.com/bid/96806; http://www.securitytracker.com/id/1037968; https://source.android.com/security/bulletin/2017-03-01
CVE: CVE-2017-0500
Published: 2017-03-08
Description: An elevation of privilege vulnerability in MediaTek components, including the M4U driver, sound driver, touchscreen driver, GPU driver, and Command Queue driver, could enable a local malicious application to execute arbitrary code within the context of the kernel. This issue is rated as Critical due to the possibility of a local permanent device compromise, which may require reflashing the operating system to repair the device. Product: Android. Versions: N/A. Android ID: A-28429685. References: M-ALPS02710006.
CVSS Score: 7.8 (HIGH)
References: http://www.securityfocus.com/bid/96726; http://www.securitytracker.com/id/1037968; https://source.android.com/security/bulletin/2017-03-01
CVE: CVE-2017-0501
Published: 2017-03-08
Description: An elevation of privilege vulnerability in MediaTek components, including the M4U driver, sound driver, touchscreen driver, GPU driver, and Command Queue driver, could enable a local malicious application to execute arbitrary code within the context of the kernel. This issue is rated as Critical due to the possibility of a local permanent device compromise, which may require reflashing the operating system to repair the device. Product: Android. Versions: N/A. Android ID: A-28430015. References: M-ALPS02708983.
CVSS Score: 7.8 (HIGH)
References: http://www.securityfocus.com/bid/96726; http://www.securitytracker.com/id/1037968; https://source.android.com/security/bulletin/2017-03-01
CVE: CVE-2017-0502
Published: 2017-03-08
Description: An elevation of privilege vulnerability in MediaTek components, including the M4U driver, sound driver, touchscreen driver, GPU driver, and Command Queue driver, could enable a local malicious application to execute arbitrary code within the context of the kernel. This issue is rated as Critical due to the possibility of a local permanent device compromise, which may require reflashing the operating system to repair the device. Product: Android. Versions: N/A. Android ID: A-28430164. References: M-ALPS02710027.
CVSS Score: 7.8 (HIGH)
References: http://www.securityfocus.com/bid/96726; http://www.securitytracker.com/id/1037968; https://source.android.com/security/bulletin/2017-03-01
CVE: CVE-2017-0503
Published: 2017-03-08
Description: An elevation of privilege vulnerability in MediaTek components, including the M4U driver, sound driver, touchscreen driver, GPU driver, and Command Queue driver, could enable a local malicious application to execute arbitrary code within the context of the kernel. This issue is rated as Critical due to the possibility of a local permanent device compromise, which may require reflashing the operating system to repair the device. Product: Android. Versions: N/A. Android ID: A-28449045. References: M-ALPS02710075.
CVSS Score: 7.8 (HIGH)
References: http://www.securityfocus.com/bid/96726; http://www.securitytracker.com/id/1037968; https://source.android.com/security/bulletin/2017-03-01
CVE: CVE-2017-0504
Published: 2017-03-08
Description: An elevation of privilege vulnerability in MediaTek components, including the M4U driver, sound driver, touchscreen driver, GPU driver, and Command Queue driver, could enable a local malicious application to execute arbitrary code within the context of the kernel. This issue is rated as Critical due to the possibility of a local permanent device compromise, which may require reflashing the operating system to repair the device. Product: Android. Versions: N/A. Android ID: A-30074628. References: M-ALPS02829371.
CVSS Score: 7.8 (HIGH)
References: http://www.securityfocus.com/bid/96726; http://www.securitytracker.com/id/1037968; https://source.android.com/security/bulletin/2017-03-01
CVE: CVE-2017-0505
Published: 2017-03-08
Description: An elevation of privilege vulnerability in MediaTek components, including the M4U driver, sound driver, touchscreen driver, GPU driver, and Command Queue driver, could enable a local malicious application to execute arbitrary code within the context of the kernel. This issue is rated as Critical due to the possibility of a local permanent device compromise, which may require reflashing the operating system to repair the device. Product: Android. Versions: N/A. Android ID: A-31822282. References: M-ALPS02992041.
CVSS Score: 7.8 (HIGH)
References: http://www.securityfocus.com/bid/96726; http://www.securitytracker.com/id/1037968; https://source.android.com/security/bulletin/2017-03-01
CVE: CVE-2017-0506
Published: 2017-03-08
Description: An elevation of privilege vulnerability in MediaTek components, including the M4U driver, sound driver, touchscreen driver, GPU driver, and Command Queue driver, could enable a local malicious application to execute arbitrary code within the context of the kernel. This issue is rated as Critical due to the possibility of a local permanent device compromise, which may require reflashing the operating system to repair the device. Product: Android. Versions: N/A. Android ID: A-32276718. References: M-ALPS03006904.
CVSS Score: 7.8 (HIGH)
References: http://www.securityfocus.com/bid/96726; http://www.securitytracker.com/id/1037968; https://source.android.com/security/bulletin/2017-03-01
CVE: CVE-2017-0507
Published: 2017-03-08
Description: An elevation of privilege vulnerability in the kernel ION subsystem could enable a local malicious application to execute arbitrary code within the context of the kernel. This issue is rated as Critical due to the possibility of a local permanent device compromise, which may require reflashing the operating system to repair the device. Product: Android. Versions: Kernel-3.10, Kernel-3.18. Android ID: A-31992382.
CVSS Score: 7.8 (HIGH)
References: http://www.securityfocus.com/bid/96952; http://www.securitytracker.com/id/1037968; https://source.android.com/security/bulletin/2017-03-01
CVE: CVE-2017-0508
Published: 2017-03-08
Description: An elevation of privilege vulnerability in the kernel ION subsystem could enable a local malicious application to execute arbitrary code within the context of the kernel. This issue is rated as Critical due to the possibility of a local permanent device compromise, which may require reflashing the operating system to repair the device. Product: Android. Versions: Kernel-3.18. Android ID: A-33940449.
CVSS Score: 7.8 (HIGH)
References: http://www.securityfocus.com/bid/96952; http://www.securitytracker.com/id/1037968; https://source.android.com/security/bulletin/2017-03-01
CVE: CVE-2017-0509
Published: 2017-03-08
Description: An elevation of privilege vulnerability in the Broadcom Wi-Fi driver could enable a local malicious application to execute arbitrary code within the context of the kernel. This issue is rated as Critical due to the possibility of a local permanent device compromise, which may require reflashing the operating system to repair the device. Product: Android. Versions: N/A. Android ID: A-32124445. References: B-RB#110688.
CVSS Score: 7.8 (HIGH)
References: http://www.securityfocus.com/bid/94943; http://www.securityfocus.com/bid/96797; http://www.securitytracker.com/id/1037968
CVE: CVE-2017-0510
Published: 2017-03-08
Description: An elevation of privilege vulnerability in the kernel FIQ debugger could enable a local malicious application to execute arbitrary code within the context of the kernel. This issue is rated as Critical due to the possibility of a local permanent device compromise, which may require reflashing the operating system to repair the device. Product: Android. Versions: Kernel-3.10. Android ID: A-32402555.
CVSS Score: 7.8 (HIGH)
References: http://www.securityfocus.com/bid/96800; http://www.securitytracker.com/id/1037968; https://alephsecurity.com/2017/03/08/nexus9-fiq-debugger/
CVE: CVE-2017-0516
Published: 2017-03-08
Description: An elevation of privilege vulnerability in the Qualcomm input hardware driver could enable a local malicious application to execute arbitrary code within the context of the kernel. This issue is rated as High because it first requires compromising a privileged process. Product: Android. Versions: Kernel-3.10, Kernel-3.18. Android ID: A-32341680. References: QC-CR#1096301.
CVSS Score: 7.0 (HIGH)
References: http://www.securityfocus.com/bid/96802; http://www.securitytracker.com/id/1037968; https://source.android.com/security/bulletin/2017-03-01
CVE: CVE-2017-0517
Published: 2017-03-08
Description: An elevation of privilege vulnerability in the MediaTek hardware sensor driver could enable a local malicious application to execute arbitrary code within the context of the kernel. This issue is rated as High because it first requires compromising a privileged process. Product: Android. Versions: N/A. Android ID: A-32372051. References: M-ALPS02973195.
CVSS Score: 7.0 (HIGH)
References: http://www.securityfocus.com/bid/96799; http://www.securitytracker.com/id/1037968; https://source.android.com/security/bulletin/2017-03-01
CVE: CVE-2017-0518
Published: 2017-03-08
Description: An elevation of privilege vulnerability in the Qualcomm fingerprint sensor driver could enable a local malicious application to execute arbitrary code within the context of the kernel. This issue is rated as High because it first requires compromising a privileged process. Product: Android. Versions: Kernel-3.18. Android ID: A-32370896. References: QC-CR#1086530.
CVSS Score: 7.0 (HIGH)
References: http://www.securityfocus.com/bid/96950; http://www.securitytracker.com/id/1037968; https://source.android.com/security/bulletin/2017-03-01
CVE: CVE-2017-0519
Published: 2017-03-08
Description: An elevation of privilege vulnerability in the Qualcomm fingerprint sensor driver could enable a local malicious application to execute arbitrary code within the context of the kernel. This issue is rated as High because it first requires compromising a privileged process. Product: Android. Versions: Kernel-3.18. Android ID: A-32372915. References: QC-CR#1086530.
CVSS Score: 7.0 (HIGH)
References: http://www.securityfocus.com/bid/96950; http://www.securitytracker.com/id/1037968; https://source.android.com/security/bulletin/2017-03-01
CVE: CVE-2017-0520
Published: 2017-03-08
Description: An elevation of privilege vulnerability in the Qualcomm crypto engine driver could enable a local malicious application to execute arbitrary code within the context of the kernel. This issue is rated as High because it first requires compromising a privileged process. Product: Android. Versions: Kernel-3.10, Kernel-3.18. Android ID: A-31750232. References: QC-CR#1082636.
CVSS Score: 7.0 (HIGH)
CWE: CWE-120
References: http://www.securityfocus.com/bid/96804; http://www.securitytracker.com/id/1037968; https://source.android.com/security/bulletin/2017-03-01