deardaniel/secdata-raw huggingface dataset:
CVE: CVE-2016-10284
Published: 2017-05-12
Description: An elevation of privilege vulnerability in the Qualcomm video driver could enable a local malicious application to execute arbitrary code within the context of the kernel. This issue is rated as High because it first requires compromising a privileged process. Product: Android. Versions: Kernel-3.10, Kernel-3.18. Android ID: A-32402303. References: QC-CR#2000664.
CVSS Score: 7.0 (HIGH)
CWE: CWE-264
References: http://www.securityfocus.com/bid/98162; https://source.android.com/security/bulletin/2017-05-01; http://www.securityfocus.com/bid/98162
CVE: CVE-2016-10285
Published: 2017-05-12
Description: An elevation of privilege vulnerability in the Qualcomm video driver could enable a local malicious application to execute arbitrary code within the context of the kernel. This issue is rated as High because it first requires compromising a privileged process. Product: Android. Versions: Kernel-3.18. Android ID: A-33752702. References: QC-CR#1104899.
CVSS Score: 7.0 (HIGH)
CWE: CWE-264
References: http://www.securityfocus.com/bid/98163; https://source.android.com/security/bulletin/2017-05-01; http://www.securityfocus.com/bid/98163
CVE: CVE-2016-10286
Published: 2017-05-12
Description: An elevation of privilege vulnerability in the Qualcomm video driver could enable a local malicious application to execute arbitrary code within the context of the kernel. This issue is rated as High because it first requires compromising a privileged process. Product: Android. Versions: Kernel-3.18. Android ID: A-35400904. References: QC-CR#1090237.
CVSS Score: 7.0 (HIGH)
CWE: CWE-264
References: http://www.securityfocus.com/bid/98165; https://source.android.com/security/bulletin/2017-05-01; http://www.securityfocus.com/bid/98165
CVE: CVE-2016-10287
Published: 2017-05-12
Description: An elevation of privilege vulnerability in the Qualcomm sound driver could enable a local malicious application to execute arbitrary code within the context of the kernel. This issue is rated as High because it first requires compromising a privileged process. Product: Android. Versions: Kernel-3.10, Kernel-3.18. Android ID: A-33784446. References: QC-CR#1112751.
CVSS Score: 7.0 (HIGH)
CWE: CWE-264
References: http://www.securityfocus.com/bid/98167; https://source.android.com/security/bulletin/2017-05-01; http://www.securityfocus.com/bid/98167
CVE: CVE-2016-10288
Published: 2017-05-12
Description: An elevation of privilege vulnerability in the Qualcomm LED driver could enable a local malicious application to execute arbitrary code within the context of the kernel. This issue is rated as High because it first requires compromising a privileged process. Product: Android. Versions: Kernel-3.18. Android ID: A-33863909. References: QC-CR#1109763.
CVSS Score: 7.0 (HIGH)
CWE: CWE-264
References: https://source.android.com/security/bulletin/2017-05-01; https://source.android.com/security/bulletin/2017-05-01
CVE: CVE-2016-10289
Published: 2017-05-12
Description: An elevation of privilege vulnerability in the Qualcomm crypto driver could enable a local malicious application to execute arbitrary code within the context of the kernel. This issue is rated as High because it first requires compromising a privileged process. Product: Android. Versions: Kernel-3.10, Kernel-3.18. Android ID: A-33899710. References: QC-CR#1116295.
CVSS Score: 7.0 (HIGH)
CWE: CWE-264
References: https://source.android.com/security/bulletin/2017-05-01; https://source.android.com/security/bulletin/2017-05-01
CVE: CVE-2016-10290
Published: 2017-05-12
Description: An elevation of privilege vulnerability in the Qualcomm shared memory driver could enable a local malicious application to execute arbitrary code within the context of the kernel. This issue is rated as High because it first requires compromising a privileged process. Product: Android. Versions: Kernel-3.10, Kernel-3.18. Android ID: A-33898330. References: QC-CR#1109782.
CVSS Score: 7.0 (HIGH)
CWE: CWE-264
References: http://www.securityfocus.com/bid/98182; https://source.android.com/security/bulletin/2017-05-01; http://www.securityfocus.com/bid/98182
CVE: CVE-2016-10291
Published: 2017-05-12
Description: An elevation of privilege vulnerability in the Qualcomm Slimbus driver could enable a local malicious application to execute arbitrary code within the context of the kernel. This issue is rated as High because it first requires compromising a privileged process. Product: Android. Versions: Kernel-3.10. Android ID: A-34030871. References: QC-CR#986837.
CVSS Score: 7.0 (HIGH)
CWE: CWE-264
References: http://www.securityfocus.com/bid/98183; https://source.android.com/security/bulletin/2017-05-01; http://www.securityfocus.com/bid/98183
CVE: CVE-2016-10292
Published: 2017-05-12
Description: A denial of service vulnerability in the Qualcomm Wi-Fi driver could enable a proximate attacker to cause a denial of service in the Wi-Fi subsystem. This issue is rated as High due to the possibility of remote denial of service. Product: Android. Versions: Kernel-3.10, Kernel-3.18. Android ID: A-34514463. References: QC-CR#1065466.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-399
References: http://www.securityfocus.com/bid/98204; https://source.android.com/security/bulletin/2017-05-01; http://www.securityfocus.com/bid/98204
CVE: CVE-2016-10293
Published: 2017-05-12
Description: An information disclosure vulnerability in the Qualcomm video driver could enable a local malicious application to access data outside of its permission levels. This issue is rated as Moderate because it first requires compromising a privileged process. Product: Android. Versions: Kernel-3.10. Android ID: A-33352393. References: QC-CR#1101943.
CVSS Score: 4.7 (MEDIUM)
CWE: CWE-200
References: http://www.securityfocus.com/bid/98206; https://source.android.com/security/bulletin/2017-05-01; http://www.securityfocus.com/bid/98206
CVE: CVE-2016-10294
Published: 2017-05-12
Description: An information disclosure vulnerability in the Qualcomm power driver could enable a local malicious application to access data outside of its permission levels. This issue is rated as Moderate because it first requires compromising a privileged process. Product: Android. Versions: Kernel-3.10, Kernel-3.18. Android ID: A-33621829. References: QC-CR#1105481.
CVSS Score: 4.7 (MEDIUM)
CWE: CWE-200
References: https://source.android.com/security/bulletin/2017-05-01; https://source.android.com/security/bulletin/2017-05-01
CVE: CVE-2016-10295
Published: 2017-05-12
Description: An information disclosure vulnerability in the Qualcomm LED driver could enable a local malicious application to access data outside of its permission levels. This issue is rated as Moderate because it first requires compromising a privileged process. Product: Android. Versions: Kernel-3.18. Android ID: A-33781694. References: QC-CR#1109326.
CVSS Score: 4.7 (MEDIUM)
CWE: CWE-200
References: https://source.android.com/security/bulletin/2017-05-01; https://www.codeaurora.org/possible-kernel-information-leak-qpnp-flash-led-driver-debugfs-function-cve-2016-10295; https://source.android.com/security/bulletin/2017-05-01
CVE: CVE-2016-10296
Published: 2017-05-12
Description: An information disclosure vulnerability in the Qualcomm shared memory driver could enable a local malicious application to access data outside of its permission levels. This issue is rated as Moderate because it first requires compromising a privileged process. Product: Android. Versions: Kernel-3.10, Kernel-3.18. Android ID: A-33845464. References: QC-CR#1109782.
CVSS Score: 4.7 (MEDIUM)
CWE: CWE-200
References: https://source.android.com/security/bulletin/2017-05-01; https://source.android.com/security/bulletin/2017-05-01
CVE: CVE-2017-0465
Published: 2017-05-12
Description: An elevation of privilege vulnerability in the Qualcomm ADSPRPC driver could enable a local malicious application to execute arbitrary code within the context of the kernel. This issue is rated as High because it first requires compromising a privileged process. Product: Android. Versions: Kernel-3.10, Kernel-3.18. Android ID: A-34112914. References: QC-CR#1110747.
CVSS Score: 7.0 (HIGH)
CWE: CWE-120
References: http://www.securityfocus.com/bid/98184; https://source.android.com/security/bulletin/2017-05-01; http://www.securityfocus.com/bid/98184
CVE: CVE-2017-0493
Published: 2017-05-12
Description: An information disclosure vulnerability in File-Based Encryption could enable a local malicious attacker to bypass operating system protections for the lock screen. This issue is rated as Moderate due to the possibility of bypassing the lock screen. Product: Android. Versions: 7.0, 7.1.1. Android ID: A-32793550.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-922
References: http://www.securityfocus.com/bid/98140; https://source.android.com/security/bulletin/2017-05-01; http://www.securityfocus.com/bid/98140
CVE: CVE-2017-0587
Published: 2017-05-12
Description: A remote code execution vulnerability in libmpeg2 in Mediaserver could enable an attacker using a specially crafted file to cause memory corruption during media file and data processing. This issue is rated as Critical due to the possibility of remote code execution within the context of the Mediaserver process. Product: Android. Versions: 6.0, 6.0.1, 7.0, 7.1.1, 7.1.2. Android ID: A-35219737.
CVSS Score: 7.8 (HIGH)
CWE: CWE-119
References: http://www.securityfocus.com/bid/98119; https://android.googlesource.com/platform/external/libmpeg2/+/a86eb798d077b9b25c8f8c77e3c02c2f287c1ce7; https://source.android.com/security/bulletin/2017-05-01
CVE: CVE-2017-0588
Published: 2017-05-12
Description: A remote code execution vulnerability in id3/ID3.cpp in libstagefright in Mediaserver could enable an attacker using a specially crafted file to cause memory corruption during media file and data processing. This issue is rated as Critical due to the possibility of remote code execution within the context of the Mediaserver process. Product: Android. Versions: 4.4.4, 5.0.2, 5.1.1, 6.0, 6.0.1, 7.0, 7.1.1, 7.1.2. Android ID: A-34618607.
CVSS Score: 7.8 (HIGH)
CWE: CWE-119
References: http://www.securityfocus.com/bid/98120; https://android.googlesource.com/platform/frameworks/av/+/6f1d990ce0f116a205f467d9eb2082795e33872b; https://source.android.com/security/bulletin/2017-05-01
CVE: CVE-2017-0589
Published: 2017-05-12
Description: A remote code execution vulnerability in libhevc in Mediaserver could enable an attacker using a specially crafted file to cause memory corruption during media file and data processing. This issue is rated as Critical due to the possibility of remote code execution within the context of the Mediaserver process. Product: Android. Versions: 5.0.2, 5.1.1, 6.0, 6.0.1, 7.0, 7.1.1, 7.1.2. Android ID: A-34897036.
CVSS Score: 7.8 (HIGH)
CWE: CWE-119
References: http://www.securityfocus.com/bid/98122; https://android.googlesource.com/platform/external/libhevc/+/bcfc7124f6ef9f1ec128fb2e90de774a5b33d199; https://source.android.com/security/bulletin/2017-05-01
CVE: CVE-2017-0590
Published: 2017-05-12
Description: A remote code execution vulnerability in libhevc in Mediaserver could enable an attacker using a specially crafted file to cause memory corruption during media file and data processing. This issue is rated as Critical due to the possibility of remote code execution within the context of the Mediaserver process. Product: Android. Versions: 5.0.2, 5.1.1, 6.0, 6.0.1, 7.0, 7.1.1, 7.1.2. Android ID: A-35039946.
CVSS Score: 7.8 (HIGH)
CWE: CWE-119
References: http://www.securityfocus.com/bid/98123; https://android.googlesource.com/platform/external/libhevc/+/45c97f878bee15cd97262fe7f57ecea71990fed7; https://source.android.com/security/bulletin/2017-05-01
CVE: CVE-2017-0591
Published: 2017-05-12
Description: A remote code execution vulnerability in libavc in Mediaserver could enable an attacker using a specially crafted file to cause memory corruption during media file and data processing. This issue is rated as Critical due to the possibility of remote code execution within the context of the Mediaserver process. Product: Android. Versions: 6.0, 6.0.1, 7.0, 7.1.1, 7.1.2. Android ID: A-34097672.
CVSS Score: 7.8 (HIGH)
CWE: CWE-119
References: http://www.securityfocus.com/bid/98124; https://android.googlesource.com/platform/external/libavc/+/5c3fd5d93a268abb20ff22f26009535b40db3c7d; https://source.android.com/security/bulletin/2017-05-01
CVE: CVE-2017-0592
Published: 2017-05-12
Description: A remote code execution vulnerability in FLACExtractor.cpp in libstagefright in Mediaserver could enable an attacker using a specially crafted file to cause memory corruption during media file and data processing. This issue is rated as Critical due to the possibility of remote code execution within the context of the Mediaserver process. Product: Android. Versions: 4.4.4, 5.0.2, 5.1.1, 6.0, 6.0.1, 7.0, 7.1.1, 7.1.2. Android ID: A-34970788.
CVSS Score: 7.8 (HIGH)
CWE: CWE-119
References: http://www.securityfocus.com/bid/98125; https://android.googlesource.com/platform/frameworks/av/+/acc[PII_REDACTED]3ca674acf117e4f74a88436922; https://source.android.com/security/bulletin/2017-05-01
CVE: CVE-2017-0593
Published: 2017-05-12
Description: An elevation of privilege vulnerability in the Framework APIs could enable a local malicious application to obtain access to custom permissions. This issue is rated as High because it is a general bypass for operating system protections that isolate application data from other applications. Product: Android. Versions: 6.0, 6.0.1, 7.0, 7.1.1, 7.1.2. Android ID: A-34114230.
CVSS Score: 7.8 (HIGH)
CWE: CWE-732
References: http://www.securityfocus.com/bid/98126; https://source.android.com/security/bulletin/2017-05-01; http://www.securityfocus.com/bid/98126
CVE: CVE-2017-0594
Published: 2017-05-12
Description: An elevation of privilege vulnerability in codecs/aacenc/SoftAACEncoder2.cpp in libstagefright in Mediaserver could enable a local malicious application to execute arbitrary code within the context of a privileged process. This issue is rated as High because it could be used to gain local access to elevated capabilities, which are not normally accessible to a third-party application. Product: Android. Versions: 4.4.4, 5.0.2, 5.1.1, 6.0, 6.0.1, 7.0, 7.1.1, 7.1.2. Android ID: A-34617444.
CVSS Score: 7.8 (HIGH)
CWE: CWE-120
References: http://www.securityfocus.com/bid/98128; https://android.googlesource.com/platform/frameworks/av/+/594bf[PII_REDACTED]18d2b6ce0bcda1f60144cb3eb; https://source.android.com/security/bulletin/2017-05-01
CVE: CVE-2017-0595
Published: 2017-05-12
Description: An elevation of privilege vulnerability in libstagefright in Mediaserver could enable a local malicious application to execute arbitrary code within the context of a privileged process. This issue is rated as High because it could be used to gain local access to elevated capabilities, which are not normally accessible to a third-party application. Product: Android. Versions: 4.4.4, 5.0.2, 5.1.1, 6.0, 6.0.1, 7.0, 7.1.1. Android ID: A-34705519.
CVSS Score: 7.8 (HIGH)
References: http://www.securityfocus.com/bid/98129; https://android.googlesource.com/platform/frameworks/av/+/5443b57cc54f2e46b35246637be26a69e9f493e1; https://source.android.com/security/bulletin/2017-05-01
CVE: CVE-2017-0596
Published: 2017-05-12
Description: An elevation of privilege vulnerability in libstagefright in Mediaserver could enable a local malicious application to execute arbitrary code within the context of a privileged process. This issue is rated as High because it could be used to gain local access to elevated capabilities, which are not normally accessible to a third-party application. Product: Android. Versions: 4.4.4, 5.0.2, 5.1.1, 6.0, 6.0.1, 7.0, 7.1.1. Android ID: A-34749392.
CVSS Score: 7.8 (HIGH)
References: http://www.securityfocus.com/bid/98130; https://android.googlesource.com/platform/frameworks/av/+/5443b57cc54f2e46b35246637be26a69e9f493e1; https://source.android.com/security/bulletin/2017-05-01
CVE: CVE-2017-0597
Published: 2017-05-12
Description: An elevation of privilege vulnerability in Audioserver could enable a local malicious application to execute arbitrary code within the context of a privileged process. This issue is rated as High because it could be used to gain local access to elevated capabilities, which are not normally accessible to a third-party application. Product: Android. Versions: 4.4.4, 5.0.2, 5.1.1, 6.0, 6.0.1, 7.0, 7.1.1, 7.1.2. Android ID: A-34749571.
CVSS Score: 7.8 (HIGH)
CWE: CWE-190
References: http://www.securityfocus.com/bid/98131; https://source.android.com/security/bulletin/2017-05-01; http://www.securityfocus.com/bid/98131
CVE: CVE-2017-0598
Published: 2017-05-12
Description: An information disclosure vulnerability in the Framework APIs could enable a local malicious application to bypass operating system protections that isolate application data from other applications. This issue is rated as High because it could be used to gain access to data that the application does not have access to. Product: Android. Versions: 4.4.4, 5.0.2, 5.1.1, 6.0, 6.0.1, 7.0, 7.1.1, 7.1.2. Android ID: A-34128677.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-200
References: http://www.securityfocus.com/bid/98133; https://source.android.com/security/bulletin/2017-05-01; http://www.securityfocus.com/bid/98133
CVE: CVE-2017-0599
Published: 2017-05-12
Description: A remote denial of service vulnerability in libhevc in Mediaserver could enable an attacker to use a specially crafted file to cause a device hang or reboot. This issue is rated as High severity due to the possibility of remote denial of service. Product: Android. Versions: 6.0, 6.0.1, 7.0, 7.1.1, 7.1.2. Android ID: A-34672748.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-252
References: http://www.securityfocus.com/bid/98134; https://android.googlesource.com/platform/external/libhevc/+/a1424724a00d62ac5efa0e27953eed66850d662f; https://source.android.com/security/bulletin/2017-05-01
CVE: CVE-2017-0600
Published: 2017-05-12
Description: A remote denial of service vulnerability in libstagefright in Mediaserver could enable an attacker to use a specially crafted file to cause a device hang or reboot. This issue is rated as High severity due to the possibility of remote denial of service. Product: Android. Versions: 4.4.4, 5.0.2, 5.1.1, 6.0, 6.0.1, 7.0, 7.1.1, 7.1.2. Android ID: A-35269635.
CVSS Score: 5.5 (MEDIUM)
References: https://android.googlesource.com/platform/frameworks/av/+/961e5ac5788b52304e64b9a509781beaf5201fb0; https://source.android.com/security/bulletin/2017-05-01; https://android.googlesource.com/platform/frameworks/av/+/961e5ac5788b52304e64b9a509781beaf5201fb0
CVE: CVE-2017-0601
Published: 2017-05-12
Description: An Elevation of Privilege vulnerability in Bluetooth could potentially enable a local malicious application to accept harmful files shared via bluetooth without user permission. This issue is rated as Moderate due to local bypass of user interaction requirements. Product: Android. Versions: 7.0, 7.1.1, 7.1.2. Android ID: A-35258579.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-732
References: http://www.securityfocus.com/bid/98137; https://source.android.com/security/bulletin/2017-05-01; http://www.securityfocus.com/bid/98137
CVE: CVE-2017-0602
Published: 2017-05-12
Description: An information disclosure vulnerability in Bluetooth could allow a local malicious application to bypass operating system protections that isolate application data from other applications. This issue is rated as Moderate due to details specific to the vulnerability. Product: Android. Versions: 4.4.4, 5.0.2, 5.1.1, 6.0, 6.0.1, 7.0, 7.1.1, 7.1.2. Android ID: A-34946955.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-200
References: http://www.securityfocus.com/bid/98141; https://source.android.com/security/bulletin/2017-05-01; http://www.securityfocus.com/bid/98141
CVE: CVE-2017-0603
Published: 2017-05-12
Description: A denial of service vulnerability in libstagefright in Mediaserver could enable an attacker to use a specially crafted file to cause a device hang or reboot. This issue is rated as Moderate because it requires an uncommon device configuration. Product: Android. Versions: 4.4.4, 5.0.2, 5.1.1, 6.0, 6.0.1, 7.0, 7.1.1, 7.1.2. Android ID: A-35763994.
CVSS Score: 4.7 (MEDIUM)
CWE: CWE-190, CWE-369
References: http://www.securityfocus.com/bid/98143; https://android.googlesource.com/platform/frameworks/av/+/36b04932bb93cc[PII_REDACTED]686b439a17a89920; https://source.android.com/security/bulletin/2017-05-01
CVE: CVE-2017-0604
Published: 2017-05-12
Description: An elevation of privilege vulnerability in the kernel Qualcomm power driver could enable a local malicious application to execute arbitrary code within the context of the kernel. This issue is rated as Critical due to the possibility of a local permanent device compromise, which may require reflashing the operating system to repair the device. Product: Android. Versions: N/A. Android ID: A-35392981. References: QC-CR#826589.
CVSS Score: 7.8 (HIGH)
CWE: CWE-670
References: http://www.securityfocus.com/bid/98151; https://source.android.com/security/bulletin/2017-05-01; http://www.securityfocus.com/bid/98151
CVE: CVE-2017-0605
Published: 2017-05-12
Description: Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: none.  Reason: This candidate was withdrawn by its CNA.  Further investigation showed that it was not a security issue.  Notes: none
CVE: CVE-2017-0606
Published: 2017-05-12
Description: An elevation of privilege vulnerability in the Qualcomm sound driver could enable a local malicious application to execute arbitrary code within the context of the kernel. This issue is rated as High because it first requires compromising a privileged process. Product: Android. Versions: Kernel-3.10, Kernel-3.18. Android ID: A-34088848. References: QC-CR#1116015.
CVSS Score: 7.0 (HIGH)
References: http://www.securityfocus.com/bid/98168; https://source.android.com/security/bulletin/2017-05-01; http://www.securityfocus.com/bid/98168
CVE: CVE-2017-0607
Published: 2017-05-12
Description: An elevation of privilege vulnerability in the Qualcomm sound driver could enable a local malicious application to execute arbitrary code within the context of the kernel. This issue is rated as High because it first requires compromising a privileged process. Product: Android. Versions: Kernel-3.18. Android ID: A-35400551. References: QC-CR#1085928.
CVSS Score: 7.0 (HIGH)
CWE: CWE-704
References: http://www.securityfocus.com/bid/98171; https://source.android.com/security/bulletin/2017-05-01; http://www.securityfocus.com/bid/98171
CVE: CVE-2017-0608
Published: 2017-05-12
Description: An elevation of privilege vulnerability in the Qualcomm sound driver could enable a local malicious application to execute arbitrary code within the context of the kernel. This issue is rated as High because it first requires compromising a privileged process. Product: Android. Versions: Kernel-3.10, Kernel-3.18. Android ID: A-35400458. References: QC-CR#1098363.
CVSS Score: 7.0 (HIGH)
CWE: CWE-787
References: http://www.securityfocus.com/bid/98172; https://source.android.com/security/bulletin/2017-05-01; http://www.securityfocus.com/bid/98172
CVE: CVE-2017-0609
Published: 2017-05-12
Description: An elevation of privilege vulnerability in the Qualcomm sound driver could enable a local malicious application to execute arbitrary code within the context of the kernel. This issue is rated as High because it first requires compromising a privileged process. Product: Android. Versions: Kernel-3.10, Kernel-3.18. Android ID: A-35399801. References: QC-CR#1090482.
CVSS Score: 7.0 (HIGH)
References: http://www.securityfocus.com/bid/98174; https://source.android.com/security/bulletin/2017-05-01; http://www.securityfocus.com/bid/98174