deardaniel/secdata-raw huggingface dataset:
CVE: CVE-2016-8435
Published: 2017-01-12
Description: An elevation of privilege vulnerability in the NVIDIA GPU driver could enable a local malicious application to execute arbitrary code within the context of the kernel. This issue is rated as Critical due to the possibility of a local permanent device compromise, which may require reflashing the operating system to repair the device. Product: Android. Versions: Kernel-3.18. Android ID: A-32700935. References: N-CVE-2016-8435.
CVSS Score: 7.0 (HIGH)
CWE: CWE-284
References: http://www.securityfocus.com/bid/95254; https://source.android.com/security/bulletin/2017-01-01.html; http://www.securityfocus.com/bid/95254
CVE: CVE-2016-8436
Published: 2017-01-12
Description: An elevation of privilege vulnerability in the Qualcomm video driver could enable a local malicious application to execute arbitrary code within the context of the kernel. This issue is rated as Critical due to the possibility of a local permanent device compromise, which may require reflashing the operating system to repair the device. Product: Android. Versions: Kernel-3.18. Android ID: A-32450261. References: QC-CR#1007860.
CVSS Score: 7.8 (HIGH)
CWE: CWE-264
References: http://www.securityfocus.com/bid/95259; https://source.android.com/security/bulletin/2017-01-01.html; http://www.securityfocus.com/bid/95259
CVE: CVE-2016-8437
Published: 2017-01-12
Description: Improper input validation in Access Control APIs. Access control API may return memory range checking incorrectly. Product: Android. Versions: Kernel 3.18. Android ID: A-31623057. References: QC-CR#1009695.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-20
References: http://www.securityfocus.com/bid/95227; https://source.android.com/security/bulletin/2017-01-01.html; http://www.securityfocus.com/bid/95227
CVE: CVE-2016-8438
Published: 2017-01-12
Description: Integer overflow leading to a TOCTOU condition in hypervisor PIL. An integer overflow exposes a race condition that may be used to bypass (Peripheral Image Loader) PIL authentication. Product: Android. Versions: Kernel 3.18. Android ID: A-31624565. References: QC-CR#1023638.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-190
References: http://www.securityfocus.com/bid/95227; https://source.android.com/security/bulletin/2017-01-01.html; http://www.securityfocus.com/bid/95227
CVE: CVE-2016-8439
Published: 2017-01-12
Description: Possible buffer overflow in trust zone access control API. Buffer overflow may occur due to lack of buffer size checking. Product: Android. Versions: Kernel 3.18. Android ID: A-31625204. References: QC-CR#1027804.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-119
References: http://www.securityfocus.com/bid/95227; https://source.android.com/security/bulletin/2017-01-01.html; http://www.securityfocus.com/bid/95227
CVE: CVE-2016-8440
Published: 2017-01-12
Description: Possible buffer overflow in SMMU system call. Improper input validation in ADSP SID2CB system call may result in hypervisor memory overwrite. Product: Android. Versions: Kernel 3.18. Android ID: A-31625306. References: QC-CR#1036747.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-119
References: http://www.securityfocus.com/bid/95227; https://source.android.com/security/bulletin/2017-01-01.html; http://www.securityfocus.com/bid/95227
CVE: CVE-2016-8441
Published: 2017-01-12
Description: Possible buffer overflow in the hypervisor. Inappropriate usage of a static array could lead to a buffer overrun. Product: Android. Versions: Kernel 3.18. Android ID: A-31625904. References: QC-CR#1027769.
CVSS Score: 7.8 (HIGH)
CWE: CWE-119
References: http://www.securityfocus.com/bid/95227; https://source.android.com/security/bulletin/2017-01-01.html; http://www.securityfocus.com/bid/95227
CVE: CVE-2016-8442
Published: 2017-01-12
Description: Possible unauthorized memory access in the hypervisor. Lack of input validation could allow hypervisor memory to be accessed by the HLOS. Product: Android. Versions: Kernel 3.18. Android ID: A-31625910. QC-CR#1038173.
CVSS Score: 7.8 (HIGH)
CWE: CWE-20
References: http://www.securityfocus.com/bid/95227; https://source.android.com/security/bulletin/2017-01-01.html; http://www.securityfocus.com/bid/95227
CVE: CVE-2016-8443
Published: 2017-01-12
Description: Possible unauthorized memory access in the hypervisor. Incorrect configuration provides access to subsystem page tables. Product: Android. Versions: Kernel 3.18. Android ID: A-32576499. References: QC-CR#964185.
CVSS Score: 7.8 (HIGH)
CWE: CWE-285
References: http://www.securityfocus.com/bid/95227; https://source.android.com/security/bulletin/2017-01-01.html; http://www.securityfocus.com/bid/95227
CVE: CVE-2016-8444
Published: 2017-01-12
Description: An elevation of privilege vulnerability in the Qualcomm camera could enable a local malicious application to execute arbitrary code within the context of the kernel. This issue is rated as High because it first requires compromising a privileged process. Product: Android. Versions: Kernel-3.10. Android ID: A-31243641. References: QC-CR#1074310.
CVSS Score: 7.0 (HIGH)
CWE: CWE-284
References: http://www.securityfocus.com/bid/95238; https://source.android.com/security/bulletin/2017-01-01.html; http://www.securityfocus.com/bid/95238
CVE: CVE-2016-8445
Published: 2017-01-12
Description: An elevation of privilege vulnerability in MediaTek components, including the thermal driver and video driver, could enable a local malicious application to execute arbitrary code within the context of the kernel. This issue is rated as High because it first requires compromising a privileged process. Product: Android. Versions: N/A. Android ID: A-31747590. References: MT-ALPS02968983.
CVSS Score: 7.0 (HIGH)
CWE: CWE-264
References: http://www.securityfocus.com/bid/95229; https://source.android.com/security/bulletin/2017-01-01.html; http://www.securityfocus.com/bid/95229
CVE: CVE-2016-8446
Published: 2017-01-12
Description: An elevation of privilege vulnerability in MediaTek components, including the thermal driver and video driver, could enable a local malicious application to execute arbitrary code within the context of the kernel. This issue is rated as High because it first requires compromising a privileged process. Product: Android. Versions: N/A. Android ID: A-31747749. References: MT-ALPS02968909.
CVSS Score: 7.0 (HIGH)
CWE: CWE-264
References: http://www.securityfocus.com/bid/95229; https://source.android.com/security/bulletin/2017-01-01.html; http://www.securityfocus.com/bid/95229
CVE: CVE-2016-8447
Published: 2017-01-12
Description: An elevation of privilege vulnerability in MediaTek components, including the thermal driver and video driver, could enable a local malicious application to execute arbitrary code within the context of the kernel. This issue is rated as High because it first requires compromising a privileged process. Product: Android. Versions: N/A. Android ID: A-31749463. References: MT-ALPS02968886.
CVSS Score: 7.0 (HIGH)
CWE: CWE-264
References: http://www.securityfocus.com/bid/95229; https://source.android.com/security/bulletin/2017-01-01.html; http://www.securityfocus.com/bid/95229
CVE: CVE-2016-8448
Published: 2017-01-12
Description: An elevation of privilege vulnerability in MediaTek components, including the thermal driver and video driver, could enable a local malicious application to execute arbitrary code within the context of the kernel. This issue is rated as High because it first requires compromising a privileged process. Product: Android. Versions: N/A. Android ID: A-31791148. References: MT-ALPS02982181.
CVSS Score: 7.0 (HIGH)
CWE: CWE-264
References: http://www.securityfocus.com/bid/95229; https://source.android.com/security/bulletin/2017-01-01.html; http://www.securityfocus.com/bid/95229
CVE: CVE-2016-8449
Published: 2017-01-12
Description: An elevation of privilege vulnerability in the NVIDIA GPU driver could enable a local malicious application to execute arbitrary code within the context of the kernel. This issue is rated as High because it first requires compromising a privileged process. Product: Android. Versions: Kernel-3.10. Android ID: A-31798848. References: N-CVE-2016-8449.
CVSS Score: 7.0 (HIGH)
CWE: CWE-264
References: http://nvidia.custhelp.com/app/answers/detail/a_id/4561; http://www.securityfocus.com/bid/95262; https://source.android.com/security/bulletin/2017-01-01.html
CVE: CVE-2016-8450
Published: 2017-01-12
Description: An elevation of privilege vulnerability in the Qualcomm sound driver could enable a local malicious application to execute arbitrary code within the context of the kernel. This issue is rated as High because it first requires compromising a privileged process. Product: Android. Versions: Kernel-3.10. Android ID: A-32450563. References: QC-CR#880388.
CVSS Score: 7.0 (HIGH)
CWE: CWE-264
References: http://www.securityfocus.com/bid/95269; https://source.android.com/security/bulletin/2017-01-01.html; http://www.securityfocus.com/bid/95269
CVE: CVE-2016-8451
Published: 2017-01-12
Description: An elevation of privilege vulnerability in the Synaptics touchscreen driver could enable a local malicious application to execute arbitrary code within the context of the kernel. This issue is rated as High because it first requires compromising a privileged process. Product: Android. Versions: Kernel-3.4. Android ID: A-32178033.
CVSS Score: 7.0 (HIGH)
CWE: CWE-264
References: http://www.securityfocus.com/bid/95277; https://source.android.com/security/bulletin/2017-01-01.html; http://www.securityfocus.com/bid/95277
CVE: CVE-2016-8452
Published: 2017-01-12
Description: An elevation of privilege vulnerability in the Qualcomm Wi-Fi driver could enable a local malicious application to execute arbitrary code within the context of the kernel. This issue is rated as High because it first requires compromising a privileged process. Product: Android. Versions: Kernel-3.10, Kernel-3.18. Android ID: A-32506396. References: QC-CR#1050323.
CVSS Score: 7.0 (HIGH)
CWE: CWE-264
References: http://www.securityfocus.com/bid/95275; https://source.android.com/security/bulletin/2017-01-01.html; http://www.securityfocus.com/bid/95275
CVE: CVE-2016-8453
Published: 2017-01-12
Description: An elevation of privilege vulnerability in the Broadcom Wi-Fi driver could enable a local malicious application to execute arbitrary code within the context of the kernel. This issue is rated as High because it first requires compromising a privileged process. Product: Android. Versions: Kernel-3.10. Android ID: A-24739315. References: B-RB#73392.
CVSS Score: 7.0 (HIGH)
CWE: CWE-264
References: http://www.securityfocus.com/bid/95240; https://source.android.com/security/bulletin/2017-01-01.html; http://www.securityfocus.com/bid/95240
CVE: CVE-2016-8454
Published: 2017-01-12
Description: An elevation of privilege vulnerability in the Broadcom Wi-Fi driver could enable a local malicious application to execute arbitrary code within the context of the kernel. This issue is rated as High because it first requires compromising a privileged process. Product: Android. Versions: Kernel-3.10, Kernel-3.18. Android ID: A-32174590. References: B-RB#107142.
CVSS Score: 7.0 (HIGH)
CWE: CWE-264
References: http://www.securityfocus.com/bid/95240; https://source.android.com/security/bulletin/2017-01-01.html; http://www.securityfocus.com/bid/95240
CVE: CVE-2016-8455
Published: 2017-01-12
Description: An elevation of privilege vulnerability in the Broadcom Wi-Fi driver could enable a local malicious application to execute arbitrary code within the context of the kernel. This issue is rated as High because it first requires compromising a privileged process. Product: Android. Versions: Kernel-3.10. Android ID: A-32219121. References: B-RB#106311.
CVSS Score: 7.0 (HIGH)
CWE: CWE-264
References: http://www.securityfocus.com/bid/95240; https://source.android.com/security/bulletin/2017-01-01.html; http://www.securityfocus.com/bid/95240
CVE: CVE-2016-8456
Published: 2017-01-12
Description: An elevation of privilege vulnerability in the Broadcom Wi-Fi driver could enable a local malicious application to execute arbitrary code within the context of the kernel. This issue is rated as High because it first requires compromising a privileged process. Product: Android. Versions: Kernel-3.10, Kernel-3.18. Android ID: A-32219255. References: B-RB#105580.
CVSS Score: 7.0 (HIGH)
CWE: CWE-264
References: http://www.securityfocus.com/bid/95240; https://source.android.com/security/bulletin/2017-01-01.html; http://www.securityfocus.com/bid/95240
CVE: CVE-2016-8457
Published: 2017-01-12
Description: An elevation of privilege vulnerability in the Broadcom Wi-Fi driver could enable a local malicious application to execute arbitrary code within the context of the kernel. This issue is rated as High because it first requires compromising a privileged process. Product: Android. Versions: Kernel-3.10, Kernel-3.18. Android ID: A-32219453. References: B-RB#106116.
CVSS Score: 7.0 (HIGH)
CWE: CWE-264
References: http://www.securityfocus.com/bid/95240; https://source.android.com/security/bulletin/2017-01-01.html; http://www.securityfocus.com/bid/95240
CVE: CVE-2016-8458
Published: 2017-01-12
Description: An elevation of privilege vulnerability in the Synaptics touchscreen driver could enable a local malicious application to execute arbitrary code within the context of the kernel. This issue is rated as High because it first requires compromising a privileged process. Product: Android. Versions: Kernel-3.10, Kernel-3.18. Android ID: A-31968442.
CVSS Score: 7.0 (HIGH)
CWE: CWE-264
References: http://www.securityfocus.com/bid/95279; https://source.android.com/security/bulletin/2017-01-01.html; http://www.securityfocus.com/bid/95279
CVE: CVE-2016-8459
Published: 2017-01-12
Description: Possible buffer overflow in storage subsystem. Bad parameters as part of listener responses to RPMB commands could lead to buffer overflow. Product: Android. Versions: Kernel 3.18. Android ID: A-32577972. References: QC-CR#988462.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-119
References: http://www.securityfocus.com/bid/95227; https://source.android.com/security/bulletin/2017-01-01.html; http://www.securityfocus.com/bid/95227
CVE: CVE-2016-8460
Published: 2017-01-12
Description: An information disclosure vulnerability in the NVIDIA video driver could enable a local malicious application to access data outside of its permission levels. This issue is rated as High because it could be used to access sensitive data without explicit user permission. Product: Android. Versions: Kernel-3.10. Android ID: A-31668540. References: N-CVE-2016-8460.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-200
References: http://www.securityfocus.com/bid/95249; https://source.android.com/security/bulletin/2017-01-01.html; http://www.securityfocus.com/bid/95249
CVE: CVE-2016-8461
Published: 2017-01-12
Description: An information disclosure vulnerability in the bootloader could enable a local attacker to access data outside of its permission level. This issue is rated as High because it could be used to access sensitive data. Product: Android. Versions: Kernel-3.18. Android ID: A-32369621.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-200
References: http://www.securityfocus.com/bid/95237; https://source.android.com/security/bulletin/2017-01-01.html; http://www.securityfocus.com/bid/95237
CVE: CVE-2016-8462
Published: 2017-01-12
Description: An information disclosure vulnerability in the bootloader could enable a local attacker to access data outside of its permission level. This issue is rated as High because it could be used to access sensitive data. Product: Android. Versions: N/A. Android ID: A-32510383.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-200
References: http://www.securityfocus.com/bid/95237; https://github.com/CunningLogic/PixelDump_CVE-2016-8462; https://securityresear.ch/2017/01/04/fastboot-oem-sha1sum/
CVE: CVE-2016-8463
Published: 2017-01-12
Description: A denial of service vulnerability in the Qualcomm FUSE file system could enable a remote attacker to use a specially crafted file to cause a device hang or reboot. This issue is rated as High due to the possibility of remote denial of service. Product: Android. Versions: Kernel-3.10, Kernel-3.18. Android ID: A-30786860. References: QC-CR#586855.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-399
References: http://www.securityfocus.com/bid/95245; https://source.android.com/security/bulletin/2017-01-01.html; https://source.codeaurora.org/quic/la/kernel/msm-3.10/commit/?id=cd0fa86de6ca1d40c0a93d86d1c0f7846e8a9a10
CVE: CVE-2016-8464
Published: 2017-01-12
Description: An elevation of privilege vulnerability in the Broadcom Wi-Fi driver could enable a local malicious application to execute arbitrary code within the context of the kernel. This issue is rated as Moderate because it first requires compromising a privileged process and is mitigated by current platform configurations. Product: Android. Versions: Kernel-3.10, Kernel-3.18. Android ID: A-29000183. References: B-RB#106314.
CVSS Score: 7.0 (HIGH)
CWE: CWE-264
References: http://www.securityfocus.com/bid/95242; https://source.android.com/security/bulletin/2017-01-01.html; http://www.securityfocus.com/bid/95242
CVE: CVE-2016-8465
Published: 2017-01-12
Description: An elevation of privilege vulnerability in the Broadcom Wi-Fi driver could enable a local malicious application to execute arbitrary code within the context of the kernel. This issue is rated as Moderate because it first requires compromising a privileged process and is mitigated by current platform configurations. Product: Android. Versions: Kernel-3.10, Kernel-3.18. Android ID: A-32474971. References: B-RB#106053.
CVSS Score: 7.0 (HIGH)
CWE: CWE-264
References: http://www.securityfocus.com/bid/95242; http://www.securitytracker.com/id/1038201; https://source.android.com/security/bulletin/2017-01-01.html
CVE: CVE-2016-8466
Published: 2017-01-12
Description: An elevation of privilege vulnerability in the Broadcom Wi-Fi driver could enable a local malicious application to execute arbitrary code within the context of the kernel. This issue is rated as Moderate because it first requires compromising a privileged process and is mitigated by current platform configurations. Product: Android. Versions: Kernel-3.10, Kernel-3.18. Android ID: A-31822524. References: B-RB#105268.
CVSS Score: 7.0 (HIGH)
CWE: CWE-264
References: http://www.securityfocus.com/bid/95242; https://source.android.com/security/bulletin/2017-01-01.html; http://www.securityfocus.com/bid/95242
CVE: CVE-2016-8468
Published: 2017-01-12
Description: An elevation of privilege vulnerability in Binder could enable a local malicious application to execute arbitrary code within the context of a privileged process. This issue is rated as Moderate because it first requires compromising a privileged process and is mitigated by current platform configurations. Product: Android. Versions: Kernel-3.18. Android ID: A-32394425.
CVSS Score: 7.0 (HIGH)
CWE: CWE-264
References: http://www.securityfocus.com/bid/95285; https://source.android.com/security/bulletin/2017-01-01.html; http://www.securityfocus.com/bid/95285
CVE: CVE-2016-8469
Published: 2017-01-12
Description: An information disclosure vulnerability in the camera driver could enable a local malicious application to access data outside of its permission levels. This issue is rated as Moderate because it first requires compromising a privileged process. Product: Android. Versions: Kernel-3.10. Android ID: A-31351206. References: N-CVE-2016-8469.
CVSS Score: 4.7 (MEDIUM)
CWE: CWE-200
References: http://www.securityfocus.com/bid/95246; https://source.android.com/security/bulletin/2017-01-01.html; http://www.securityfocus.com/bid/95246
CVE: CVE-2016-8470
Published: 2017-01-12
Description: An information disclosure vulnerability in the MediaTek driver could enable a local malicious application to access data outside of its permission levels. This issue is rated as Moderate because it first requires compromising a privileged process. Product: Android. Versions: N/A. Android ID: A-31528889. References: MT-ALPS02961395.
CVSS Score: 4.7 (MEDIUM)
CWE: CWE-200
References: http://www.securityfocus.com/bid/95235; https://source.android.com/security/bulletin/2017-01-01.html; http://www.securityfocus.com/bid/95235
CVE: CVE-2016-8471
Published: 2017-01-12
Description: An information disclosure vulnerability in the MediaTek driver could enable a local malicious application to access data outside of its permission levels. This issue is rated as Moderate because it first requires compromising a privileged process. Product: Android. Versions: N/A. Android ID: A-31528890. References: MT-ALPS02961380.
CVSS Score: 4.7 (MEDIUM)
CWE: CWE-200
References: http://www.securityfocus.com/bid/95235; https://source.android.com/security/bulletin/2017-01-01.html; http://www.securityfocus.com/bid/95235
CVE: CVE-2016-8472
Published: 2017-01-12
Description: An information disclosure vulnerability in the MediaTek driver could enable a local malicious application to access data outside of its permission levels. This issue is rated as Moderate because it first requires compromising a privileged process. Product: Android. Versions: N/A. Android ID: A-31531758. References: MT-ALPS02961384.
CVSS Score: 4.7 (MEDIUM)
CWE: CWE-200
References: http://www.securityfocus.com/bid/95235; https://source.android.com/security/bulletin/2017-01-01.html; http://www.securityfocus.com/bid/95235
CVE: CVE-2016-8473
Published: 2017-01-12
Description: An information disclosure vulnerability in the STMicroelectronics driver could enable a local malicious application to access data outside of its permission levels. This issue is rated as Moderate because it first requires compromising a privileged process. Product: Android. Versions: Kernel-3.10. Android ID: A-31795790.
CVSS Score: 4.7 (MEDIUM)
CWE: CWE-200
References: http://www.securityfocus.com/bid/95233; https://source.android.com/security/bulletin/2017-01-01.html; http://www.securityfocus.com/bid/95233
CVE: CVE-2016-8474
Published: 2017-01-12
Description: An information disclosure vulnerability in the STMicroelectronics driver could enable a local malicious application to access data outside of its permission levels. This issue is rated as Moderate because it first requires compromising a privileged process. Product: Android. Versions: Kernel-3.10. Android ID: A-31799972.
CVSS Score: 4.7 (MEDIUM)
CWE: CWE-200
References: http://www.securityfocus.com/bid/95233; https://source.android.com/security/bulletin/2017-01-01.html; http://www.securityfocus.com/bid/95233
CVE: CVE-2016-8475
Published: 2017-01-12
Description: An information disclosure vulnerability in the HTC input driver could enable a local malicious application to access data outside of its permission levels. This issue is rated as Moderate because it first requires compromising a privileged process. Product: Android. Versions: Kernel-3.18. Android ID: A-32591129.
CVSS Score: 4.7 (MEDIUM)
CWE: CWE-200
References: http://www.securityfocus.com/bid/95244; https://source.android.com/security/bulletin/2017-01-01.html; http://www.securityfocus.com/bid/95244
CVE: CVE-2017-0381
Published: 2017-01-12
Description: An information disclosure vulnerability in silk/NLSF_stabilize.c in libopus in Mediaserver could enable a local malicious application to access data outside of its permission levels. This issue is rated as Moderate because it could be used to access sensitive data without permission. Product: Android. Versions: 5.0.2, 5.1.1, 6.0, 6.0.1, 7.0, 7.1. Android ID: A-31607432.
CVSS Score: 7.8 (HIGH)
CWE: CWE-190
References: http://www.securityfocus.com/bid/95248; http://www.securitytracker.com/id/1039427; https://android.googlesource.com/platform/external/libopus/+/0d052d64480a30e83fcdda80f4774624e044beb7
CVE: CVE-2017-0382
Published: 2017-01-12
Description: A remote code execution vulnerability in the Framesequence library could enable an attacker using a specially crafted file to execute arbitrary code in the context of an unprivileged process. This issue is rated as High due to the possibility of remote code execution in an application that uses the Framesequence library. Product: Android. Versions: 5.0.2, 5.1.1, 6.0, 6.0.1, 7.0, 7.1. Android ID: A-32338390.
CVSS Score: 7.8 (HIGH)
References: http://www.securityfocus.com/bid/95247; https://source.android.com/security/bulletin/2017-01-01.html; http://www.securityfocus.com/bid/95247