deardaniel/secdata-raw huggingface dataset:
CVE: CVE-2023-20966
Published: 2023-03-24
Description: In inflate of inflate.c, there is a possible out of bounds write due to a heap buffer overflow. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-11 Android-12 Android-12L Android-13Android ID: A-242299736
CVSS Score: 7.8 (HIGH)
CWE: CWE-787, CWE-787
References: https://source.android.com/security/bulletin/2023-03-01; https://source.android.com/security/bulletin/2023-03-01
CVE: CVE-2023-20968
Published: 2023-03-24
Description: In multiple functions of p2p_iface.cpp, there is a possible out of bounds read due to a missing bounds check. This could lead to local information disclosure with System execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-13Android ID: A-262235935
CVSS Score: 4.4 (MEDIUM)
CWE: CWE-125, CWE-125
References: https://source.android.com/security/bulletin/pixel/2023-06-01; https://source.android.com/security/bulletin/pixel/2023-06-01
CVE: CVE-2023-20969
Published: 2023-03-24
Description: In multiple locations of p2p_iface.cpp, there is a possible out of bounds read due to a missing bounds check. This could lead to local information disclosure with System execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-13Android ID: A-262236313
CVSS Score: 4.4 (MEDIUM)
CWE: CWE-125, CWE-125
References: https://source.android.com/security/bulletin/pixel/2023-03-01; https://source.android.com/security/bulletin/pixel/2023-03-01
CVE: CVE-2023-20970
Published: 2023-03-24
Description: In multiple locations of p2p_iface.cpp, there is a possible out of bounds read due to a missing bounds check. This could lead to local information disclosure with System execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-13Android ID: A-262236005
CVSS Score: 4.4 (MEDIUM)
CWE: CWE-125, CWE-125
References: https://source.android.com/security/bulletin/pixel/2023-03-01; https://source.android.com/security/bulletin/pixel/2023-03-01
CVE: CVE-2023-20971
Published: 2023-03-24
Description: In removePermission of PermissionManagerServiceImpl.java, there is a possible way to obtain dangerous permissions without user consent due to a logic error in the code. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.
CVSS Score: 7.8 (HIGH)
CWE: CWE-863
References: https://android.googlesource.com/platform/frameworks/base/+/6c22d6c1e69676c5c68d21928aa5486bfd1bd131; https://source.android.com/security/bulletin/2024-08-01; https://source.android.com/security/bulletin/pixel/2023-06-01
CVE: CVE-2023-20972
Published: 2023-03-24
Description: In btm_vendor_specific_evt of btm_devctl.cc, there is a possible out of bounds read due to a missing bounds check. This could lead to local information disclosure with System execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-13Android ID: A-255304665
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-119, CWE-119
References: https://source.android.com/security/bulletin/pixel/2023-06-01; https://source.android.com/security/bulletin/pixel/2023-06-01
CVE: CVE-2023-20973
Published: 2023-03-24
Description: In btm_create_conn_cancel_complete of btm_sec.cc, there is a possible out of bounds read due to a missing bounds check. This could lead to local information disclosure with System execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-13Android ID: A-260568245
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-125, CWE-125
References: https://source.android.com/security/bulletin/pixel/2023-06-01; https://source.android.com/security/bulletin/pixel/2023-06-01
CVE: CVE-2023-20974
Published: 2023-03-24
Description: In btm_ble_add_resolving_list_entry_complete of btm_ble_privacy.cc, there is a possible out of bounds read due to a missing bounds check. This could lead to local information disclosure with System execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-13Android ID: A-260078907
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-125, CWE-125
References: https://source.android.com/security/bulletin/pixel/2023-06-01; https://source.android.com/security/bulletin/pixel/2023-06-01
CVE: CVE-2023-20975
Published: 2023-03-24
Description: In getAvailabilityStatus of EnableContentCapturePreferenceController.java, there is a possible way to bypass DISALLOW_CONTENT_CAPTURE due to a permissions bypass. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-13Android ID: A-250573776
CVSS Score: 7.8 (HIGH)
CWE: CWE-863
References: https://source.android.com/security/bulletin/pixel/2023-06-01; https://source.android.com/security/bulletin/pixel/2023-06-01
CVE: CVE-2023-20976
Published: 2023-03-24
Description: In getConfirmationMessage of DefaultAutofillPicker.java, there is a possible way to mislead the user to select default autofill application due to improper input validation. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is needed for exploitation.Product: AndroidVersions: Android-13Android ID: A-216117246
CVSS Score: 7.3 (HIGH)
CWE: CWE-20, CWE-20
References: https://source.android.com/security/bulletin/pixel/2023-06-01; https://source.android.com/security/bulletin/pixel/2023-06-01
CVE: CVE-2023-20977
Published: 2023-03-24
Description: In btm_ble_read_remote_features_complete of btm_ble_gap.cc, there is a possible out of bounds read due to improper input validation. This could lead to local information disclosure if the firmware were compromised with System execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-13Android ID: A-254445952
CVSS Score: 4.4 (MEDIUM)
CWE: CWE-125, CWE-125
References: https://source.android.com/security/bulletin/pixel/2023-06-01; https://source.android.com/security/bulletin/pixel/2023-06-01
CVE: CVE-2023-20979
Published: 2023-03-24
Description: In GetNextSourceDataPacket of bta_av_co.cc, there is a possible out of bounds read due to a missing bounds check. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-13Android ID: A-259939364
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-125, CWE-125
References: https://source.android.com/security/bulletin/pixel/2023-06-01; https://source.android.com/security/bulletin/pixel/2023-06-01
CVE: CVE-2023-20980
Published: 2023-03-24
Description: In btu_ble_ll_conn_param_upd_evt of btu_hcif.cc, there is a possible out of bounds read due to a missing bounds check. This could lead to local information disclosure in the Bluetooth server with System execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-13Android ID: A-260230274
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-125
References: https://source.android.com/security/bulletin/pixel/2023-06-01; https://source.android.com/security/bulletin/pixel/2023-06-01
CVE: CVE-2023-20981
Published: 2023-03-24
Description: In btu_ble_rc_param_req_evt of btu_hcif.cc, there is a possible out of bounds read due to a missing bounds check. This could lead to local information disclosure with System execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-13Android ID: A-256165737
CVSS Score: 4.4 (MEDIUM)
CWE: CWE-125
References: https://source.android.com/security/bulletin/pixel/2023-06-01; https://source.android.com/security/bulletin/pixel/2023-06-01
CVE: CVE-2023-20982
Published: 2023-03-24
Description: In btm_read_tx_power_complete of btm_acl.cc, there is a possible out of bounds read due to a missing bounds check. This could lead to local information disclosure in the Bluetooth server with System execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-13Android ID: A-260568083
CVSS Score: 4.4 (MEDIUM)
CWE: CWE-125
References: https://source.android.com/security/bulletin/pixel/2023-06-01; https://source.android.com/security/bulletin/pixel/2023-06-01
CVE: CVE-2023-20983
Published: 2023-03-24
Description: In btm_ble_rand_enc_complete of btm_ble.cc, there is a possible out of bounds read due to a missing bounds check. This could lead to local information disclosure with System execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-13Android ID: A-260569449
CVSS Score: 4.4 (MEDIUM)
CWE: CWE-125
References: https://source.android.com/security/bulletin/pixel/2023-06-01; https://source.android.com/security/bulletin/pixel/2023-06-01
CVE: CVE-2023-20984
Published: 2023-03-24
Description: In ParseBqrLinkQualityEvt of btif_bqr.cc, there is a possible out of bounds read due to a missing bounds check. This could lead to local information disclosure with System execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-13Android ID: A-242993878
CVSS Score: 4.4 (MEDIUM)
CWE: CWE-125
References: https://source.android.com/security/bulletin/pixel/2023-06-01; https://source.android.com/security/bulletin/pixel/2023-06-01
CVE: CVE-2023-20985
Published: 2023-03-24
Description: In BTA_GATTS_HandleValueIndication of bta_gatts_api.cc, there is a possible out of bounds write due to improper input validation. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-13Android ID: A-245915315
CVSS Score: 7.8 (HIGH)
CWE: CWE-787
References: https://source.android.com/security/bulletin/pixel/2023-06-01; https://source.android.com/security/bulletin/pixel/2023-06-01
CVE: CVE-2023-20986
Published: 2023-03-24
Description: In btm_ble_clear_resolving_list_completecomplete of btm_ble_privacy.cc, there is a possible out of bounds read due to a missing bounds check. This could lead to local information disclosure with System execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-13Android ID: A-255304475
CVSS Score: 4.4 (MEDIUM)
CWE: CWE-125
References: https://source.android.com/security/bulletin/pixel/2023-06-01; https://source.android.com/security/bulletin/pixel/2023-06-01
CVE: CVE-2023-20987
Published: 2023-03-24
Description: In btm_read_link_quality_complete of btm_acl.cc, there is a possible out of bounds read due to a missing bounds check. This could lead to local information disclosure over Bluetooth with System execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-13Android ID: A-260569414
CVSS Score: 4.5 (MEDIUM)
CWE: CWE-125
References: https://source.android.com/security/bulletin/pixel/2023-06-01; https://source.android.com/security/bulletin/pixel/2023-06-01
CVE: CVE-2023-20988
Published: 2023-03-24
Description: In btm_read_rssi_complete of btm_acl.cc, there is a possible out of bounds read due to a missing bounds check. This could lead to local information disclosure in the Bluetooth server with System execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-13Android ID: A-260569232
CVSS Score: 4.5 (MEDIUM)
CWE: CWE-125, CWE-125
References: https://source.android.com/security/bulletin/pixel/2023-06-01; https://source.android.com/security/bulletin/pixel/2023-06-01
CVE: CVE-2023-20989
Published: 2023-03-24
Description: In btm_ble_write_adv_enable_complete of btm_ble_gap.cc, there is a possible out of bounds read due to a missing bounds check. This could lead to local information disclosure with System execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-13Android ID: A-260568367
CVSS Score: 4.4 (MEDIUM)
CWE: CWE-125, CWE-125
References: https://source.android.com/security/bulletin/pixel/2023-06-01; https://source.android.com/security/bulletin/pixel/2023-06-01
CVE: CVE-2023-20990
Published: 2023-03-24
Description: In btm_ble_rand_enc_complete of btm_ble.cc, there is a possible out of bounds read due to a missing bounds check. This could lead to local information disclosure with System execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-13Android ID: A-260568354
CVSS Score: 4.4 (MEDIUM)
CWE: CWE-125
References: https://source.android.com/security/bulletin/pixel/2023-06-01; https://source.android.com/security/bulletin/pixel/2023-06-01
CVE: CVE-2023-20991
Published: 2023-03-24
Description: In btm_ble_process_periodic_adv_sync_lost_evt of ble_scanner_hci_interface.cc , there is a possible out of bounds read due to a missing bounds check. This could lead to local information disclosure with System execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-13Android ID: A-255305114
CVSS Score: 4.4 (MEDIUM)
CWE: CWE-125
References: https://source.android.com/security/bulletin/pixel/2023-06-01; https://source.android.com/security/bulletin/pixel/2023-06-01
CVE: CVE-2023-20992
Published: 2023-03-24
Description: In on_iso_link_quality_read of btm_iso_impl.h, there is a possible out of bounds read due to a missing bounds check. This could lead to local information disclosure in the Bluetooth server with System execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-13Android ID: A-260568750
CVSS Score: 4.5 (MEDIUM)
CWE: CWE-125
References: https://source.android.com/security/bulletin/pixel/2023-06-01; https://source.android.com/security/bulletin/pixel/2023-06-01
CVE: CVE-2023-20993
Published: 2023-03-24
Description: In multiple functions of SnoozeHelper.java, there is a possible failure to persist settings due to an uncaught exception. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-11 Android-12 Android-12L Android-13Android ID: A-261588851
CVSS Score: 7.8 (HIGH)
CWE: CWE-755, CWE-755
References: https://source.android.com/security/bulletin/2023-05-01; https://source.android.com/security/bulletin/2023-05-01
CVE: CVE-2023-20994
Published: 2023-03-24
Description: In _ufdt_output_property_to_fdt of ufdt_convert.c, there is a possible out of bounds write due to an incorrect bounds check. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-13Android ID: A-259062118
CVSS Score: 6.7 (MEDIUM)
CWE: CWE-787
References: https://source.android.com/security/bulletin/pixel/2023-03-01; https://source.android.com/security/bulletin/pixel/2023-03-01
CVE: CVE-2023-20995
Published: 2023-03-24
Description: In captureImage of CustomizedSensor.cpp, there is a possible way to bypass the fingerprint unlock due to a logic error in the code. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-13Android ID: A-241910279
CVSS Score: 7.8 (HIGH)
CWE: CWE-269
References: https://source.android.com/security/bulletin/pixel/2023-03-01; https://source.android.com/security/bulletin/pixel/2023-03-01
CVE: CVE-2023-20996
Published: 2023-03-24
Description: In multiple locations, there is a possible way to trigger a persistent reboot loop due to improper input validation. This could lead to local denial of service with User execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-13Android ID: A-246749764
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-835, CWE-835
References: https://source.android.com/security/bulletin/pixel/2023-03-01; https://source.android.com/security/bulletin/pixel/2023-03-01
CVE: CVE-2023-20997
Published: 2023-03-24
Description: In multiple locations, there is a possible way to trigger a persistent reboot loop due to improper input validation. This could lead to local denial of service with User execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-13Android ID: A-246749702
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-835, CWE-835
References: https://source.android.com/security/bulletin/pixel/2023-03-01; https://source.android.com/security/bulletin/pixel/2023-03-01
CVE: CVE-2023-20998
Published: 2023-03-24
Description: In multiple locations, there is a possible way to trigger a persistent reboot loop due to improper input validation. This could lead to local denial of service with User execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-13Android ID: A-246749936
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-835, CWE-835
References: https://source.android.com/security/bulletin/pixel/2023-03-01; https://source.android.com/security/bulletin/pixel/2023-03-01
CVE: CVE-2023-20999
Published: 2023-03-24
Description: In multiple locations, there is a possible way to trigger a persistent reboot loop due to improper input validation. This could lead to local denial of service with User execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-13Android ID: A-246750467
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-835, CWE-835
References: https://source.android.com/security/bulletin/pixel/2023-03-01; https://source.android.com/security/bulletin/pixel/2023-03-01
CVE: CVE-2023-21000
Published: 2023-03-24
Description: In MediaCodec.cpp, there is a possible use after free due to improper locking. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-13Android ID: A-194783918
CVSS Score: 7.8 (HIGH)
CWE: CWE-667, CWE-667
References: https://source.android.com/security/bulletin/pixel/2023-03-01; https://source.android.com/security/bulletin/pixel/2023-03-01
CVE: CVE-2023-21001
Published: 2023-03-24
Description: In onContextItemSelected of NetworkProviderSettings.java, there is a possible way for users to change the Wi-Fi settings of other users due to a missing permission check. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-13Android ID: A-237672190
CVSS Score: 7.8 (HIGH)
CWE: CWE-862, CWE-862
References: https://source.android.com/security/bulletin/pixel/2023-03-01; https://source.android.com/security/bulletin/pixel/2023-03-01
CVE: CVE-2023-21002
Published: 2023-03-24
Description: In getAvailabilityStatus of several Transcode Permission Controllers, there is a possible permission bypass due to a missing permission check. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-13Android ID: A-261193935
CVSS Score: 7.8 (HIGH)
CWE: CWE-862, CWE-862
References: https://source.android.com/security/bulletin/pixel/2023-03-01; https://source.android.com/security/bulletin/pixel/2023-03-01
CVE: CVE-2023-21003
Published: 2023-03-24
Description: In getAvailabilityStatus of several Transcode Permission Controllers, there is a possible permission bypass due to a missing permission check. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-13Android ID: A-261193711
CVSS Score: 7.8 (HIGH)
CWE: CWE-862, CWE-862
References: https://source.android.com/security/bulletin/pixel/2023-03-01; https://source.android.com/security/bulletin/pixel/2023-03-01
CVE: CVE-2023-21004
Published: 2023-03-24
Description: In getAvailabilityStatus of several Transcode Permission Controllers, there is a possible permission bypass due to a missing permission check. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-13Android ID: A-261193664
CVSS Score: 7.8 (HIGH)
CWE: CWE-862, CWE-862
References: https://source.android.com/security/bulletin/pixel/2023-03-01; https://source.android.com/security/bulletin/pixel/2023-03-01
CVE: CVE-2023-21005
Published: 2023-03-24
Description: In getAvailabilityStatus of several Transcode Permission Controllers, there is a possible permission bypass due to a missing permission check. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-13Android ID: A-261193946
CVSS Score: 7.8 (HIGH)
CWE: CWE-862, CWE-862
References: https://source.android.com/security/bulletin/pixel/2023-03-01; https://source.android.com/security/bulletin/pixel/2023-03-01
CVE: CVE-2023-21006
Published: 2023-03-24
Description: In multiple locations of p2p_iface.cpp, there is a possible out of bounds read due to a missing bounds check. This could lead to local information disclosure with System execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-13Android ID: A-257030027
CVSS Score: 4.4 (MEDIUM)
CWE: CWE-125, CWE-125
References: https://source.android.com/security/bulletin/pixel/2023-03-01; https://source.android.com/security/bulletin/pixel/2023-03-01
CVE: CVE-2023-21007
Published: 2023-03-24
Description: In multiple locations of p2p_iface.cpp, there is a possible out of bounds read due to a missing bounds check. This could lead to local information disclosure with System execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-13Android ID: A-257029965
CVSS Score: 4.4 (MEDIUM)
CWE: CWE-125, CWE-125
References: https://source.android.com/security/bulletin/pixel/2023-03-01; https://source.android.com/security/bulletin/pixel/2023-03-01
CVE: CVE-2023-21008
Published: 2023-03-24
Description: In multiple locations of p2p_iface.cpp, there is a possible out of bounds read due to a missing bounds check. This could lead to local information disclosure with System execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-13Android ID: A-257030100
CVSS Score: 4.4 (MEDIUM)
CWE: CWE-125, CWE-125
References: https://source.android.com/security/bulletin/pixel/2023-03-01; https://source.android.com/security/bulletin/pixel/2023-03-01
CVE: CVE-2023-21009
Published: 2023-03-24
Description: In multiple locations of p2p_iface.cpp, there is a possible out of bounds read due to a missing bounds check. This could lead to local information disclosure with System execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-13Android ID: A-257029925
CVSS Score: 4.4 (MEDIUM)
CWE: CWE-125, CWE-125
References: https://source.android.com/security/bulletin/pixel/2023-03-01; https://source.android.com/security/bulletin/pixel/2023-03-01
CVE: CVE-2023-21010
Published: 2023-03-24
Description: In multiple locations of p2p_iface.cpp, there is a possible out of bounds read due to a missing bounds check. This could lead to local information disclosure with System execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-13Android ID: A-257029915
CVSS Score: 4.4 (MEDIUM)
CWE: CWE-125, CWE-125
References: https://source.android.com/security/bulletin/pixel/2023-03-01; https://source.android.com/security/bulletin/pixel/2023-03-01