deardaniel/secdata-raw huggingface dataset:
CVE: CVE-2020-0163
Published: 2020-06-11
Description: In parseSampleAuxiliaryInformationSizes of MPEG4Extractor.cpp, there is possible resource exhaustion due to improper input validation. This could lead to remote denial of service with no additional execution privileges needed. User interaction is needed for exploitation.Product: AndroidVersions: Android-10Android ID: A-124525515
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-20
References: https://source.android.com/security/bulletin/pixel/2020-06-01; https://source.android.com/security/bulletin/pixel/2020-06-01
CVE: CVE-2020-0164
Published: 2020-06-11
Description: In phNxpNciHal_NfcDep_cmd_ext of phNxpNciHal_NfcDepSWPrio.cc, there is a possible out of bounds read due to a missing bounds check. This could lead to local information disclosure with System execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-10Android ID: A-139736125
CVSS Score: 4.4 (MEDIUM)
CWE: CWE-125
References: https://source.android.com/security/bulletin/pixel/2020-06-01; https://source.android.com/security/bulletin/pixel/2020-06-01
CVE: CVE-2020-0165
Published: 2020-06-11
Description: In phNxpNciHal_NfcDep_cmd_ext of phNxpNciHal_NfcDepSWPrio.cc, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege via compromised device firmware with System execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-10Android ID: A-139532977
CVSS Score: 6.7 (MEDIUM)
CWE: CWE-787
References: https://source.android.com/security/bulletin/pixel/2020-06-01; https://source.android.com/security/bulletin/pixel/2020-06-01
CVE: CVE-2020-0166
Published: 2020-06-11
Description: In multiple functions of URI.java, there is a possible escalation of privilege due to missing validation in the parceling of URI information. This could lead to a local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-10Android ID: A-124526860
CVSS Score: 7.8 (HIGH)
CWE: CWE-20
References: https://source.android.com/security/bulletin/pixel/2020-06-01; https://source.android.com/security/bulletin/pixel/2020-06-01
CVE: CVE-2020-0167
Published: 2020-06-11
Description: In load of ResourceTypes.cpp, there is a possible out of bounds read due to an integer overflow. This could lead to local information disclosure with no additional execution privileges needed. User interaction is needed for exploitation.Product: AndroidVersions: Android-10Android ID: A-129475100
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-125, CWE-190
References: https://source.android.com/security/bulletin/pixel/2020-06-01; https://source.android.com/security/bulletin/pixel/2020-06-01
CVE: CVE-2020-0168
Published: 2020-06-11
Description: In impeg2_fmt_conv_yuv420p_to_yuv420sp_uv of impeg2_format_conv.c, there is a possible out of bounds write due to a missing bounds check. This could lead to remote code execution with no additional execution privileges needed. User interaction is needed for exploitation.Product: AndroidVersions: Android-10Android ID: A-137798382
CVSS Score: 8.8 (HIGH)
CWE: CWE-787
References: https://source.android.com/security/bulletin/pixel/2020-06-01; https://source.android.com/security/bulletin/pixel/2020-06-01
CVE: CVE-2020-0169
Published: 2020-06-11
Description: In RTTTL_Event of eas_rtttl.c, there is possible resource exhaustion due to a missing bounds check. This could lead to remote denial of service with no additional execution privileges needed. User interaction is needed for exploitation.Product: AndroidVersions: Android-10Android ID: A-123700383
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-20, CWE-834, CWE-835
References: https://source.android.com/security/bulletin/pixel/2020-06-01; https://source.android.com/security/bulletin/pixel/2020-06-01
CVE: CVE-2020-0170
Published: 2020-06-11
Description: In IMY_Event of eas_imelody.c, there is possible resource exhaustion due to a missing bounds check. This could lead to remote denial of service with no additional execution privileges needed. User interaction is needed for exploitation.Product: AndroidVersions: Android-10Android ID: A-127310810
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-20, CWE-834, CWE-835
References: https://source.android.com/security/bulletin/pixel/2020-06-01; https://source.android.com/security/bulletin/pixel/2020-06-01
CVE: CVE-2020-0171
Published: 2020-06-11
Description: In Parse_lart of eas_mdls.c, there is possible resource exhaustion due to a missing bounds check. This could lead to remote denial of service with no additional execution privileges needed. User interaction is needed for exploitation.Product: AndroidVersions: Android-10Android ID: A-127313223
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-20, CWE-834, CWE-835
References: https://source.android.com/security/bulletin/pixel/2020-06-01; https://source.android.com/security/bulletin/pixel/2020-06-01
CVE: CVE-2020-0172
Published: 2020-06-11
Description: In Parse_art of eas_mdls.c, there is possible resource exhaustion due to a missing bounds check. This could lead to remote denial of service with no additional execution privileges needed. User interaction is needed for exploitation.Product: AndroidVersions: Android-10Android ID: A-127312550
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-20, CWE-834, CWE-835
References: https://source.android.com/security/bulletin/pixel/2020-06-01; https://source.android.com/security/bulletin/pixel/2020-06-01
CVE: CVE-2020-0173
Published: 2020-06-11
Description: In Parse_lins of eas_mdls.c, there is possible resource exhaustion due to improper input validation. This could lead to remote denial of service with no additional execution privileges needed. User interaction is needed for exploitation.Product: AndroidVersions: Android-10Android ID: A-127313764
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-20, CWE-400
References: https://source.android.com/security/bulletin/pixel/2020-06-01; https://source.android.com/security/bulletin/pixel/2020-06-01
CVE: CVE-2020-0174
Published: 2020-06-11
Description: In Parse_ptbl of eas_mdls.c, there is possible resource exhaustion due to a missing bounds check. This could lead to remote denial of service with no additional execution privileges needed. User interaction is needed for exploitation.Product: AndroidVersions: Android-10Android ID: A-127313537
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-20, CWE-834, CWE-835
References: https://source.android.com/security/bulletin/pixel/2020-06-01; https://source.android.com/security/bulletin/pixel/2020-06-01
CVE: CVE-2020-0175
Published: 2020-06-11
Description: In XMF_ReadNode of eas_xmf.c, there is possible resource exhaustion due to improper input validation. This could lead to remote denial of service with no additional execution privileges needed. User interaction is needed for exploitation.Product: AndroidVersions: Android-10Android ID: A-126380818
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-20, CWE-834
References: https://source.android.com/security/bulletin/pixel/2020-06-01; https://source.android.com/security/bulletin/pixel/2020-06-01
CVE: CVE-2020-0176
Published: 2020-06-11
Description: In avdt_msg_prs_rej of avdt_msg.cc, there is a possible out-of-bounds read due to improper input validation. This could lead to remote information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-10Android ID: A-79702484
CVSS Score: 7.5 (HIGH)
CWE: CWE-20, CWE-125
References: https://source.android.com/security/bulletin/pixel/2020-06-01; https://source.android.com/security/bulletin/pixel/2020-06-01
CVE: CVE-2020-0177
Published: 2020-06-11
Description: In connect() of PanService.java, there is a possible permissions bypass. This could lead to local escalation of privilege to change network connection settings with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-10Android ID: A-126206353
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-862
References: https://source.android.com/security/bulletin/pixel/2020-06-01; https://source.android.com/security/bulletin/pixel/2020-06-01
CVE: CVE-2020-0178
Published: 2020-06-11
Description: In getAllConfigFlags of SettingsProvider.cpp, there is a possible illegal read due to a missing permission check. This could lead to local information disclosure of config flags with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-10Android ID: A-143299398
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-862
References: https://source.android.com/security/bulletin/pixel/2020-06-01; https://source.android.com/security/bulletin/pixel/2020-06-01
CVE: CVE-2020-0179
Published: 2020-06-11
Description: In doSendObjectInfo of MtpServer.cpp, there is a possible path traversal attack due to insufficient input validation. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is required for exploitation.Product: AndroidVersions: Android-10Android ID: A-130656917
CVSS Score: 7.8 (HIGH)
CWE: CWE-20, CWE-22
References: https://source.android.com/security/bulletin/pixel/2020-06-01; https://source.android.com/security/bulletin/pixel/2020-06-01
CVE: CVE-2020-0180
Published: 2020-06-11
Description: In GetOpusHeaderBuffers() of OpusHeader.cpp, there is a possible out of bounds read due to a missing bounds check. This could lead to remote information disclosure with no additional execution privileges needed. User interaction is needed for exploitation.Product: AndroidVersions: Android-10Android ID: A-142861738
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-125
References: https://source.android.com/security/bulletin/pixel/2020-06-01; https://source.android.com/security/bulletin/pixel/2020-06-01
CVE: CVE-2020-0181
Published: 2020-06-11
Description: In exif_data_load_data_thumbnail of exif-data.c, there is a possible denial of service due to an integer overflow. This could lead to remote denial of service with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-10Android ID: A-145075076
CVSS Score: 7.5 (HIGH)
CWE: CWE-190
References: https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/ELDZR6USD5PR34MRK2ZISLCYJ465FNKN/; https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/SVBD5JRUQPN4LQHTAAJHA3MR5M7YTAC7/; https://security.gentoo.org/glsa/202011-19
CVE: CVE-2020-0182
Published: 2020-06-11
Description: In exif_entry_get_value of exif-entry.c, there is a possible out of bounds read due to a missing bounds check. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-10Android ID: A-147140917
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-125
References: https://lists.debian.org/debian-lts-announce/2020/06/msg00020.html; https://source.android.com/security/bulletin/pixel/2020-06-01; https://usn.ubuntu.com/4396-1/
CVE: CVE-2020-0183
Published: 2020-06-11
Description: In handleMessage of BluetoothManagerService, there is an incomplete reset. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is needed for exploitation.Product: AndroidVersions: Android-10Android ID: A-110181479
CVSS Score: 7.8 (HIGH)
CWE: CWE-459
References: https://source.android.com/security/bulletin/pixel/2020-06-01; https://source.android.com/security/bulletin/pixel/2020-06-01
CVE: CVE-2020-0184
Published: 2020-06-11
Description: In ihevcd_ref_list() of ihevcd_ref_list.c, there is a possible infinite loop due to a missing bounds check. This could lead to remote denial of service with no additional execution privileges needed. User interaction is needed for exploitation.Product: AndroidVersions: Android-10Android ID: A-141688974
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-835
References: https://source.android.com/security/bulletin/pixel/2020-06-01; https://source.android.com/security/bulletin/pixel/2020-06-01
CVE: CVE-2020-0185
Published: 2020-06-11
Description: In avrc_pars_browsing_cmd of avrc_pars_tg.cc, there is a possible out of bounds read due to a missing bounds check. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-10Android ID: A-79945152
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-125
References: https://source.android.com/security/bulletin/pixel/2020-06-01; https://source.android.com/security/bulletin/pixel/2020-06-01
CVE: CVE-2020-0186
Published: 2020-06-11
Description: In hal_fd_init of hal_fd.cc, there is a possible out of bounds write due to an incorrect bounds check. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-10Android ID: A-146144463
CVSS Score: 6.7 (MEDIUM)
CWE: CWE-787
References: https://source.android.com/security/bulletin/pixel/2020-06-01; https://source.android.com/security/bulletin/pixel/2020-06-01
CVE: CVE-2020-0187
Published: 2020-06-11
Description: In engineSetMode of BaseBlockCipher.java, there is a possible incorrect cryptographic algorithm chosen due to an incomplete comparison. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-10Android ID: A-148517383
CVSS Score: 5.5 (MEDIUM)
References: https://source.android.com/security/bulletin/pixel/2020-06-01; https://source.android.com/security/bulletin/pixel/2020-06-01
CVE: CVE-2020-0188
Published: 2020-06-11
Description: In onCreatePermissionRequest of SettingsSliceProvider.java, there is a possible permissions bypass due to a PendingIntent error. This could lead to local escalation of privilege with User execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-10Android ID: A-147355897
CVSS Score: 7.8 (HIGH)
References: https://source.android.com/security/bulletin/pixel/2020-06-01; https://source.android.com/security/bulletin/pixel/2020-06-01
CVE: CVE-2020-0189
Published: 2020-06-11
Description: In ihevcd_decode() of ihevcd_decode.c, there is possible resource exhaustion due to an infinite loop. This could lead to remote denial of service with no additional execution privileges needed. User interaction is needed for exploitation.Product: AndroidVersions: Android-10Android ID: A-139939283
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-835
References: https://source.android.com/security/bulletin/pixel/2020-06-01; https://source.android.com/security/bulletin/pixel/2020-06-01
CVE: CVE-2020-0190
Published: 2020-06-11
Description: In ideint_weave_blk of ideint_utils.c, there is a possible out of bounds write due to a heap buffer overflow. This could lead to remote code execution with no additional execution privileges needed. User interaction is needed for exploitation.Product: AndroidVersions: Android-10Android ID: A-140324890
CVSS Score: 8.8 (HIGH)
CWE: CWE-787
References: https://source.android.com/security/bulletin/pixel/2020-06-01; https://source.android.com/security/bulletin/pixel/2020-06-01
CVE: CVE-2020-0191
Published: 2020-06-11
Description: In ih264d_update_default_index_list() of ih264d_dpb_mgr.c, there is a possible out of bounds read due to a logic error. This could lead to remote information disclosure with no additional execution privileges needed. User interaction is needed for exploitation.Product: AndroidVersions: Android-10Android ID: A-140561484
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-125
References: https://source.android.com/security/bulletin/pixel/2020-06-01; https://source.android.com/security/bulletin/pixel/2020-06-01
CVE: CVE-2020-0192
Published: 2020-06-11
Description: In ih264d_decode_slice_thread of ih264d_thread_parse_decode.c, there is a possible out of bounds read due to improper input validation. This could lead to remote information disclosure with no additional execution privileges needed. User interaction is needed for exploitation.Product: AndroidVersions: Android-10Android ID: A-144687080
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-20, CWE-125
References: https://source.android.com/security/bulletin/pixel/2020-06-01; https://source.android.com/security/bulletin/pixel/2020-06-01
CVE: CVE-2020-0193
Published: 2020-06-11
Description: In ihevc_intra_pred_chroma_mode_3_to_9_av8 of ihevc_intra_pred_chroma_mode_3_to_9.s, there is a possible out of bounds read due to a heap buffer overflow. This could lead to remote information disclosure with no additional execution privileges needed. User interaction is needed for exploitation.Product: AndroidVersions: Android-10Android ID: A-144595488
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-125
References: https://source.android.com/security/bulletin/pixel/2020-06-01; https://source.android.com/security/bulletin/pixel/2020-06-01
CVE: CVE-2020-0194
Published: 2020-06-11
Description: In ihevcd_parse_slice_header of ihevcd_parse_slice_header.c, there is a possible out of bounds write due to an integer overflow. This could lead to remote code execution with no additional execution privileges needed. User interaction is needed for exploitation.Product: AndroidVersions: Android-10Android ID: A-143826590
CVSS Score: 8.8 (HIGH)
CWE: CWE-190, CWE-787
References: https://source.android.com/security/bulletin/pixel/2020-06-01; https://source.android.com/security/bulletin/pixel/2020-06-01
CVE: CVE-2020-0195
Published: 2020-06-11
Description: In ihevcd_iquant_itrans_recon_ctb of ihevcd_iquant_itrans_recon_ctb.c and related functions, there is a possible information disclosure due to uninitialized data. This could lead to remote information disclosure with no additional execution privileges needed. User interaction is needed for exploitation.Product: AndroidVersions: Android-10Android ID: A-144686961
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-908, CWE-909
References: https://source.android.com/security/bulletin/pixel/2020-06-01; https://source.android.com/security/bulletin/pixel/2020-06-01
CVE: CVE-2020-0196
Published: 2020-06-11
Description: In RegisterNotificationResponse::GetEvent of register_notification_packet.cc, there is a possible abort due to improper input validation. This could lead to remote denial of service of the Bluetooth service, over Bluetooth, with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-10Android ID: A-144066833
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-20
References: https://source.android.com/security/bulletin/pixel/2020-06-01; https://source.android.com/security/bulletin/pixel/2020-06-01
CVE: CVE-2020-0197
Published: 2020-06-11
Description: In InitDataParser::parsePssh of InitDataParser.cpp, there is a possible out of bounds read due to a missing bounds check. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-10Android ID: A-137370379
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-125
References: https://source.android.com/security/bulletin/pixel/2020-06-01; https://source.android.com/security/bulletin/pixel/2020-06-01
CVE: CVE-2020-0198
Published: 2020-06-11
Description: In exif_data_load_data_content of exif-data.c, there is a possible UBSAN abort due to an integer overflow. This could lead to remote denial of service with no additional execution privileges needed. User interaction is needed for exploitation.Product: AndroidVersions: Android-10Android ID: A-146428941
CVSS Score: 7.5 (HIGH)
CWE: CWE-190
References: https://lists.debian.org/debian-lts-announce/2020/06/msg00020.html; https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/ELDZR6USD5PR34MRK2ZISLCYJ465FNKN/; https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/SVBD5JRUQPN4LQHTAAJHA3MR5M7YTAC7/
CVE: CVE-2020-0199
Published: 2020-06-11
Description: In TimeCheck::TimeCheckThread::threadLoop of TimeCheck.cpp, there is a possible use-after-free due to a race condition. This could lead to local information disclosure with System execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-10Android ID: A-142142406
CVSS Score: 4.1 (MEDIUM)
CWE: CWE-362, CWE-416
References: https://source.android.com/security/bulletin/pixel/2020-06-01; https://source.android.com/security/bulletin/pixel/2020-06-01
CVE: CVE-2020-0200
Published: 2020-06-11
Description: In ReadLittleEndian of raw_bit_reader.cc, there is a possible out of bounds read due to a missing bounds check. This could lead to remote information disclosure in the media server with no additional execution privileges needed. User interaction is needed for exploitation.Product: AndroidVersions: Android-10Android ID: A-147231862
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-125
References: https://source.android.com/security/bulletin/pixel/2020-06-01; https://source.android.com/security/bulletin/pixel/2020-06-01
CVE: CVE-2020-0201
Published: 2020-06-11
Description: In showSecurityFields of WifiConfigController.java there is a possible credential leak due to a confused deputy. This could lead to remote escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-10Android ID: A-143601727
CVSS Score: 9.8 (CRITICAL)
References: https://source.android.com/security/bulletin/pixel/2020-06-01; https://source.android.com/security/bulletin/pixel/2020-06-01
CVE: CVE-2020-0202
Published: 2020-06-11
Description: In onHandleIntent of TraceService.java, there is a possible bypass of developer settings requirements for capturing system traces due to a missing permission check. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is needed for exploitation. Product: Android Versions: Android-11 Android ID: A-142936525
CVSS Score: 7.8 (HIGH)
CWE: CWE-862
References: https://source.android.com/security/bulletin/pixel/2020-12-01; https://source.android.com/security/bulletin/pixel/2020-12-01
CVE: CVE-2020-0203
Published: 2020-06-11
Description: In freeIsolatedUidLocked of ProcessList.java, there is a possible UID reuse due to improper cleanup. This could lead to local escalation of privilege between constrained processes with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-10Android ID: A-146313311
CVSS Score: 7.8 (HIGH)
CWE: CWE-404
References: https://source.android.com/security/bulletin/pixel/2020-06-01; https://source.android.com/security/bulletin/pixel/2020-06-01
CVE: CVE-2020-0204
Published: 2020-06-11
Description: In InstallPackage of package.cpp, there is a possible bypass of a signature check due to a Time of Check/Time of Use condition. This could lead to local escalation of privilege by allowing a bypass of the initial zip file signature check for an OS update with no additional execution privileges needed. User interaction is needed for exploitation.Product: AndroidVersions: Android-10Android ID: A-136498130
CVSS Score: 7.0 (HIGH)
CWE: CWE-367
References: https://source.android.com/security/bulletin/pixel/2020-06-01; https://source.android.com/security/bulletin/pixel/2020-06-01
CVE: CVE-2020-0205
Published: 2020-06-11
Description: In the DaalaBitReader constructor of entropy_decoder.cc, there is a possible out of bounds read due to a missing bounds check. This could lead to remote information disclosure in the media server with no additional execution privileges needed. User interaction is needed for exploitation.Product: AndroidVersions: Android-10Android ID: A-147234020
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-125
References: https://source.android.com/security/bulletin/pixel/2020-06-01; https://source.android.com/security/bulletin/pixel/2020-06-01