deardaniel/secdata-raw huggingface dataset:
CVE: CVE-2023-21011
Published: 2023-03-24
Description: In multiple locations of p2p_iface.cpp, there is a possible out of bounds read due to a missing bounds check. This could lead to local information disclosure with System execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-13Android ID: A-257029912
CVSS Score: 4.4 (MEDIUM)
CWE: CWE-125, CWE-125
References: https://source.android.com/security/bulletin/pixel/2023-03-01; https://source.android.com/security/bulletin/pixel/2023-03-01
CVE: CVE-2023-21012
Published: 2023-03-24
Description: In multiple locations of p2p_iface.cpp, there is a possible out of bounds read due to a missing bounds check. This could lead to local information disclosure with System execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-13Android ID: A-257029812
CVSS Score: 4.4 (MEDIUM)
CWE: CWE-125, CWE-125
References: https://source.android.com/security/bulletin/pixel/2023-03-01; https://source.android.com/security/bulletin/pixel/2023-03-01
CVE: CVE-2023-21013
Published: 2023-03-24
Description: In forceStaDisconnection of hostapd.cpp, there is a possible out of bounds read due to a missing bounds check. This could lead to local information disclosure with System execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-13Android ID: A-256818945
CVSS Score: 4.4 (MEDIUM)
CWE: CWE-125, CWE-125
References: https://source.android.com/security/bulletin/pixel/2023-03-01; https://source.android.com/security/bulletin/pixel/2023-03-01
CVE: CVE-2023-21014
Published: 2023-03-24
Description: In multiple locations of p2p_iface.cpp, there is a possible out of bounds read due to a missing bounds check. This could lead to local information disclosure with System execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-13Android ID: A-257029326
CVSS Score: 4.4 (MEDIUM)
CWE: CWE-125, CWE-125
References: https://source.android.com/security/bulletin/pixel/2023-03-01; https://source.android.com/security/bulletin/pixel/2023-03-01
CVE: CVE-2023-21015
Published: 2023-03-24
Description: In getAvailabilityStatus of several Transcode Permission Controllers, there is a possible permission bypass due to a missing permission check. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-13Android ID: A-244569778
CVSS Score: 7.8 (HIGH)
CWE: CWE-862, CWE-862
References: https://source.android.com/security/bulletin/pixel/2023-03-01; https://source.android.com/security/bulletin/pixel/2023-03-01
CVE: CVE-2023-21016
Published: 2023-03-24
Description: In AccountTypePreference of AccountTypePreference.java, there is a possible way to mislead the user about accounts installed on the device due to improper input validation. This could lead to local denial of service with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-13Android ID: A-213905884
CVSS Score: 5.5 (MEDIUM)
References: https://source.android.com/security/bulletin/pixel/2023-03-01; https://source.android.com/security/bulletin/pixel/2023-03-01
CVE: CVE-2023-21017
Published: 2023-03-24
Description: In InstallStart of InstallStart.java, there is a possible way to change the installer package name due to an improper input validation. This could lead to local escalation of privilege with User execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-13Android ID: A-236687884
CVSS Score: 7.8 (HIGH)
References: https://source.android.com/security/bulletin/pixel/2023-03-01; https://source.android.com/security/bulletin/pixel/2023-03-01
CVE: CVE-2023-21018
Published: 2023-03-24
Description: In UnwindingWorker of unwinding.cc, there is a possible out of bounds write due to a use after free. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-13Android ID: A-233338564
CVSS Score: 6.7 (MEDIUM)
CWE: CWE-416, CWE-416
References: https://source.android.com/security/bulletin/pixel/2023-03-01; https://source.android.com/security/bulletin/pixel/2023-03-01
CVE: CVE-2023-21019
Published: 2023-03-24
Description: In ih264e_init_proc_ctxt of ih264e_process.c, there is a possible out of bounds read due to a heap buffer overflow. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-13Android ID: A-242379731
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-125, CWE-125
References: https://source.android.com/security/bulletin/pixel/2023-03-01; https://source.android.com/security/bulletin/pixel/2023-03-01
CVE: CVE-2023-21020
Published: 2023-03-24
Description: In registerSignalHandlers of main.c, there is a possible local arbitrary code execution due to a use after free. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-13Android ID: A-256591441
CVSS Score: 6.7 (MEDIUM)
CWE: CWE-416, CWE-416
References: https://source.android.com/security/bulletin/pixel/2023-03-01; https://source.android.com/security/bulletin/pixel/2023-03-01
CVE: CVE-2023-21021
Published: 2023-03-24
Description: In isTargetSdkLessThanQOrPrivileged of WifiServiceImpl.java, there is a possible way for the guest user to change admin user network settings due to a missing permission check. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-13Android ID: A-255537598
CVSS Score: 7.8 (HIGH)
CWE: CWE-862, CWE-862
References: https://source.android.com/security/bulletin/pixel/2023-03-01; https://source.android.com/security/bulletin/pixel/2023-03-01
CVE: CVE-2023-21022
Published: 2023-03-24
Description: In BufferBlock of Suballocation.cpp, there is a possible out of bounds write due to memory corruption. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-13Android ID: A-236098131
CVSS Score: 7.8 (HIGH)
CWE: CWE-787, CWE-787
References: https://source.android.com/security/bulletin/pixel/2023-03-01; https://source.android.com/security/bulletin/pixel/2023-03-01
CVE: CVE-2023-21024
Published: 2023-03-24
Description: In maybeFinish of FallbackHome.java, there is a possible delay of lockdown screen due to logic error. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-13Android ID: A-246543238
CVSS Score: 7.8 (HIGH)
CWE: CWE-693
References: https://source.android.com/security/bulletin/pixel/2023-03-01; https://source.android.com/security/bulletin/pixel/2023-03-01
CVE: CVE-2023-21025
Published: 2023-03-24
Description: In ufdt_local_fixup_prop of ufdt_overlay.c, there is a possible out of bounds read due to an incorrect bounds check. This could lead to local information disclosure with System execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-13Android ID: A-254929746
CVSS Score: 4.4 (MEDIUM)
CWE: CWE-125, CWE-125
References: https://source.android.com/security/bulletin/pixel/2023-03-01; https://source.android.com/security/bulletin/pixel/2023-03-01
CVE: CVE-2023-21026
Published: 2023-03-24
Description: In updateInputChannel of WindowManagerService.java, there is a possible way to set a touchable region beyond its own SurfaceControl due to a logic error in the code. This could lead to local denial of service with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-13Android ID: A-254681548
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-703
References: https://source.android.com/security/bulletin/pixel/2023-03-01; https://source.android.com/security/bulletin/pixel/2023-03-01
CVE: CVE-2023-21027
Published: 2023-03-24
Description: In multiple functions of PasspointXmlUtils.java, there is a possible authentication misconfiguration due to a logic error in the code. This could lead to remote information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-13Android ID: A-216854451
CVSS Score: 7.5 (HIGH)
CWE: CWE-287
References: https://source.android.com/security/bulletin/pixel/2023-06-01; https://source.android.com/security/bulletin/pixel/2023-06-01
CVE: CVE-2023-21028
Published: 2023-03-24
Description: In parse_printerAttributes of ipphelper.c, there is a possible out of bounds read due to a string without a null-terminator. This could lead to remote information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-13Android ID: A-180680572
CVSS Score: 7.5 (HIGH)
CWE: CWE-125, CWE-125
References: https://source.android.com/security/bulletin/pixel/2023-03-01; https://source.android.com/security/bulletin/pixel/2023-03-01
CVE: CVE-2023-21029
Published: 2023-03-24
Description: In register of UidObserverController.java, there is a missing permission check. This could lead to local information disclosure of app usage with User execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-13Android ID: A-217934898
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-862, CWE-862
References: https://source.android.com/security/bulletin/pixel/2023-03-01; https://source.android.com/security/bulletin/pixel/2023-03-01
CVE: CVE-2023-21030
Published: 2023-03-24
Description: In Confirmation of keystore_cli_v2.cpp, there is a possible way to corrupt memory due to a double free. This could lead to local escalation of privilege in an unprivileged process with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-13Android ID: A-226234140
CVSS Score: 7.8 (HIGH)
CWE: CWE-415, CWE-415
References: https://source.android.com/security/bulletin/pixel/2023-03-01; https://source.android.com/security/bulletin/pixel/2023-03-01
CVE: CVE-2023-21031
Published: 2023-03-24
Description: In setPowerMode of HWC2.cpp, there is a possible out of bounds read due to a race condition. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-13Android ID: A-242688355
CVSS Score: 4.7 (MEDIUM)
CWE: CWE-125, CWE-362, CWE-362
References: https://source.android.com/security/bulletin/pixel/2023-06-01; https://source.android.com/security/bulletin/pixel/2023-06-01
CVE: CVE-2023-21032
Published: 2023-03-24
Description: In _ufdt_output_node_to_fdt of ufdt_convert.c, there is a possible out of bounds read due to a heap buffer overflow. This could lead to local information disclosure with System execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-13Android ID: A-248085351
CVSS Score: 4.4 (MEDIUM)
CWE: CWE-125, CWE-125
References: https://source.android.com/security/bulletin/pixel/2023-03-01; https://source.android.com/security/bulletin/pixel/2023-03-01
CVE: CVE-2023-21033
Published: 2023-03-24
Description: In addNetwork of WifiManager.java, there is a possible way to trigger a persistent DoS due to resource exhaustion. This could lead to local denial of service with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-13Android ID: A-244713323
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-400, CWE-400
References: https://source.android.com/security/bulletin/pixel/2023-03-01; https://source.android.com/security/bulletin/pixel/2023-03-01
CVE: CVE-2023-21034
Published: 2023-03-24
Description: In multiple functions of SensorService.cpp, there is a possible access of accurate sensor data due to a permissions bypass. This could lead to local escalation of privilege with User execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-13Android ID: A-230358834
CVSS Score: 7.8 (HIGH)
CWE: CWE-863, CWE-863
References: https://source.android.com/security/bulletin/pixel/2023-03-01; https://source.android.com/security/bulletin/pixel/2023-03-01
CVE: CVE-2023-21035
Published: 2023-03-24
Description: In multiple functions of BackupHelper.java, there is a possible way for an app to get permissions previously granted to another app with the same package name due to a permissions bypass. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-13Android ID: A-184847040
CVSS Score: 7.8 (HIGH)
CWE: CWE-863, CWE-863
References: https://source.android.com/security/bulletin/pixel/2023-03-01; https://source.android.com/security/bulletin/pixel/2023-03-01
CVE: CVE-2023-21036
Published: 2023-03-24
Description: In BitmapExport.java, there is a possible failure to truncate images due to a logic error in the code.Product: AndroidVersions: Android kernelAndroid ID: A-264261868References: N/A
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-703
References: https://source.android.com/security/bulletin/pixel/2023-03-01; https://source.android.com/security/bulletin/pixel/2023-03-01
CVE: CVE-2023-21038
Published: 2023-03-24
Description: In cs40l2x_cp_trigger_queue_show of cs40l2x.c, there is a possible out of bounds write due to a use after free. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android kernelAndroid ID: A-224000736References: N/A
CVSS Score: 6.7 (MEDIUM)
CWE: CWE-416, CWE-787, CWE-416
References: https://source.android.com/security/bulletin/pixel/2023-03-01; https://source.android.com/security/bulletin/pixel/2023-03-01
CVE: CVE-2023-21039
Published: 2023-03-24
Description: In dumpstateBoard of Dumpstate.cpp, there is a possible out of bounds read due to an incorrect bounds check. This could lead to local information disclosure with System execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android kernelAndroid ID: A-263783650References: N/A
CVSS Score: 4.4 (MEDIUM)
CWE: CWE-125, CWE-125
References: https://source.android.com/security/bulletin/pixel/2023-03-01; https://source.android.com/security/bulletin/pixel/2023-03-01
CVE: CVE-2023-21040
Published: 2023-03-24
Description: In buildCommand of bluetooth_ccc.cc, there is a possible out of bounds write due to a logic error in the code. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android kernelAndroid ID: A-238420277References: N/A
CVSS Score: 7.8 (HIGH)
CWE: CWE-787
References: https://source.android.com/security/bulletin/pixel/2023-03-01; https://source.android.com/security/bulletin/pixel/2023-03-01
CVE: CVE-2023-21041
Published: 2023-03-24
Description: In append_to_params of param_util.c, there is a possible out of bounds write due to an incorrect bounds check. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android kernelAndroid ID: A-250123688References: N/A
CVSS Score: 7.8 (HIGH)
CWE: CWE-787, CWE-787
References: https://source.android.com/security/bulletin/pixel/2023-03-01; https://source.android.com/security/bulletin/pixel/2023-03-01
CVE: CVE-2023-21042
Published: 2023-03-24
Description: In (TBD) of (TBD), there is a possible way to corrupt memory due to a use after free. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android kernelAndroid ID: A-239873326References: N/A
CVSS Score: 6.7 (MEDIUM)
CWE: CWE-416, CWE-416
References: https://source.android.com/security/bulletin/pixel/2023-03-01; https://source.android.com/security/bulletin/pixel/2023-03-01
CVE: CVE-2023-21043
Published: 2023-03-24
Description: In (TBD) of (TBD), there is a possible way to corrupt memory due to a use after free. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android kernelAndroid ID: A-239872581References: N/A
CVSS Score: 6.7 (MEDIUM)
CWE: CWE-416, CWE-416
References: https://source.android.com/security/bulletin/pixel/2023-03-01; https://source.android.com/security/bulletin/pixel/2023-03-01
CVE: CVE-2023-21044
Published: 2023-03-24
Description: In init of VendorGraphicBufferMeta, there is a possible out of bounds read due to a missing bounds check. This could lead to local information disclosure with System execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android kernelAndroid ID: A-253425086References: N/A
CVSS Score: 4.4 (MEDIUM)
CWE: CWE-119, CWE-119
References: https://source.android.com/security/bulletin/pixel/2023-03-01; https://source.android.com/security/bulletin/pixel/2023-03-01
CVE: CVE-2023-21045
Published: 2023-03-24
Description: When cpif handles probe failures, there is a possible out of bounds read due to a use after free. This could lead to local information disclosure with System execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android kernelAndroid ID: A-259323725References: N/A
CVSS Score: 4.4 (MEDIUM)
CWE: CWE-416, CWE-416
References: https://source.android.com/security/bulletin/pixel/2023-03-01; https://source.android.com/security/bulletin/pixel/2023-03-01
CVE: CVE-2023-21046
Published: 2023-03-24
Description: In ConvertToHalMetadata of aidl_utils.cc, there is a possible out of bounds read due to an incorrect bounds check. This could lead to local information disclosure with System execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android kernelAndroid ID: A-253424924References: N/A
CVSS Score: 4.4 (MEDIUM)
CWE: CWE-787, CWE-787
References: https://source.android.com/security/bulletin/pixel/2023-03-01; https://source.android.com/security/bulletin/pixel/2023-03-01
CVE: CVE-2023-21047
Published: 2023-03-24
Description: In ConvertToHalMetadata of aidl_utils.cc, there is a possible out of bounds read due to a missing bounds check. This could lead to local information disclosure with System execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android kernelAndroid ID: A-256166866References: N/A
CVSS Score: 4.4 (MEDIUM)
CWE: CWE-119, CWE-119
References: https://source.android.com/security/bulletin/pixel/2023-03-01; https://source.android.com/security/bulletin/pixel/2023-03-01
CVE: CVE-2023-21048
Published: 2023-03-24
Description: In handleEvent of nan.cpp, there is a possible out of bounds read due to a missing bounds check. This could lead to local information disclosure with System execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android kernelAndroid ID: A-259304053References: N/A
CVSS Score: 4.4 (MEDIUM)
CWE: CWE-125, CWE-125
References: https://source.android.com/security/bulletin/pixel/2023-03-01; https://source.android.com/security/bulletin/pixel/2023-03-01
CVE: CVE-2023-21049
Published: 2023-03-24
Description: In append_camera_metadata of camera_metadata.c, there is a possible out of bounds read due to a missing bounds check. This could lead to local information disclosure with System execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android kernelAndroid ID: A-236688120References: N/A
CVSS Score: 4.4 (MEDIUM)
CWE: CWE-125, CWE-125
References: https://source.android.com/security/bulletin/pixel/2023-03-01; https://source.android.com/security/bulletin/pixel/2023-03-01
CVE: CVE-2023-21050
Published: 2023-03-24
Description: In load_png_image of ExynosHWCHelper.cpp, there is a possible out of bounds write due to improper input validation. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android kernelAndroid ID: A-244423702References: N/A
CVSS Score: 6.7 (MEDIUM)
CWE: CWE-787, CWE-787
References: https://source.android.com/security/bulletin/pixel/2023-03-01; https://source.android.com/security/bulletin/pixel/2023-03-01
CVE: CVE-2023-21051
Published: 2023-03-24
Description: In dwc3_exynos_clk_get of dwc3-exynos.c, there is a possible out of bounds write due to an incorrect bounds check. This could lead to local escalation of privilege in the kernel with System execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android kernelAndroid ID: A-259323322References: N/A
CVSS Score: 6.7 (MEDIUM)
CWE: CWE-787, CWE-787
References: https://source.android.com/security/bulletin/pixel/2023-03-01; https://source.android.com/security/bulletin/pixel/2023-03-01
CVE: CVE-2023-21052
Published: 2023-03-24
Description: In setToExternal of ril_external_client.cpp, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android kernelAndroid ID: A-259063189References: N/A
CVSS Score: 6.7 (MEDIUM)
CWE: CWE-787, CWE-787
References: https://source.android.com/security/bulletin/pixel/2023-03-01; https://source.android.com/security/bulletin/pixel/2023-03-01
CVE: CVE-2023-21053
Published: 2023-03-24
Description: In sms_ExtractCbLanguage of sms_CellBroadcast.c, there is a possible out of bounds read due to a missing bounds check. This could lead to remote information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android kernelAndroid ID: A-251805610References: N/A
CVSS Score: 7.5 (HIGH)
CWE: CWE-125, CWE-125
References: https://source.android.com/security/bulletin/pixel/2023-03-01; https://source.android.com/security/bulletin/pixel/2023-03-01
CVE: CVE-2023-21054
Published: 2023-03-24
Description: In EUTRAN_LCS_ConvertLCS_MOLRReq of LPP_CommonUtil.c, there is a possible out of bounds write due to a logic error in the code. This could lead to remote code execution with System execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android kernelAndroid ID: A-244556535References: N/A
CVSS Score: 7.2 (HIGH)
CWE: CWE-787, CWE-787
References: https://source.android.com/security/bulletin/pixel/2023-03-01; https://source.android.com/security/bulletin/pixel/2023-03-01
CVE: CVE-2023-21055
Published: 2023-03-24
Description: In dit_hal_ioctl of dit.c, there is a possible use after free due to a race condition. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android kernelAndroid ID: A-244301523References: N/A
CVSS Score: 6.4 (MEDIUM)
CWE: CWE-416, CWE-416
References: https://source.android.com/security/bulletin/pixel/2023-03-01; https://source.android.com/security/bulletin/pixel/2023-03-01