deardaniel/secdata-raw huggingface dataset:
CVE: CVE-2021-39725
Published: 2022-03-16
Description: In gasket_free_coherent_memory_all of gasket_page_table.c, there is a possible memory corruption due to a double free. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android kernelAndroid ID: A-151454974References: N/A
CVSS Score: 6.7 (MEDIUM)
CWE: CWE-415
References: https://source.android.com/security/bulletin/pixel/2022-03-01; https://source.android.com/security/bulletin/pixel/2022-03-01
CVE: CVE-2021-39726
Published: 2022-03-16
Description: In cd_ParseMsg of cd_codec.c, there is a possible out of bounds read due to an incorrect bounds check. This could lead to remote information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android kernelAndroid ID: A-181782896References: N/A
CVSS Score: 7.5 (HIGH)
CWE: CWE-125
References: https://source.android.com/security/bulletin/pixel/2022-03-01; https://source.android.com/security/bulletin/pixel/2022-03-01
CVE: CVE-2021-39727
Published: 2022-03-16
Description: In eicPresentationRetrieveEntryValue of acropora/app/identity/libeic/EicPresentation.c, there is a possible information disclosure due to a race condition. This could lead to local information disclosure with System execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android kernelAndroid ID: A-196388042References: N/A
CVSS Score: 4.1 (MEDIUM)
CWE: CWE-362
References: https://source.android.com/security/bulletin/pixel/2022-03-01; https://source.android.com/security/bulletin/pixel/2022-03-01
CVE: CVE-2021-39729
Published: 2022-03-16
Description: In the TitanM chip, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android kernelAndroid ID: A-202006191References: N/A
CVSS Score: 6.7 (MEDIUM)
CWE: CWE-787
References: https://source.android.com/security/bulletin/pixel/2022-03-01; https://source.android.com/security/bulletin/pixel/2022-03-01
CVE: CVE-2021-39730
Published: 2022-03-16
Description: In TBD of TBD, there is a possible out of bounds read due to a missing bounds check. This could lead to local information disclosure with System execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android kernelAndroid ID: A-206472503References: N/A
CVSS Score: 4.4 (MEDIUM)
CWE: CWE-125
References: https://source.android.com/security/bulletin/pixel/2022-03-01; https://source.android.com/security/bulletin/pixel/2022-03-01
CVE: CVE-2021-39731
Published: 2022-03-16
Description: In ProtocolStkProactiveCommandAdapter::Init of protocolstkadapter.cpp, there is a possible out of bounds write due to an incorrect bounds check. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android kernelAndroid ID: A-205036834References: N/A
CVSS Score: 6.7 (MEDIUM)
CWE: CWE-787
References: https://source.android.com/security/bulletin/pixel/2022-03-01; https://source.android.com/security/bulletin/pixel/2022-03-01
CVE: CVE-2021-39732
Published: 2022-03-16
Description: In copy_io_entries of lwis_ioctl.c, there is a possible out of bounds write due to an integer overflow. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android kernelAndroid ID: A-205992503References: N/A
CVSS Score: 7.8 (HIGH)
CWE: CWE-190, CWE-787
References: https://source.android.com/security/bulletin/pixel/2022-03-01; https://source.android.com/security/bulletin/pixel/2022-03-01
CVE: CVE-2021-39733
Published: 2022-03-16
Description: In amcs_cdev_unlocked_ioctl of audiometrics.c, there is a possible out of bounds write due to improper input validation. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android kernelAndroid ID: A-206128522References: N/A
CVSS Score: 6.7 (MEDIUM)
CWE: CWE-787
References: https://source.android.com/security/bulletin/pixel/2022-03-01; https://source.android.com/security/bulletin/pixel/2022-03-01
CVE: CVE-2021-39734
Published: 2022-03-16
Description: In sendMessage of OneToOneChatImpl.java (? TBD), there is a possible way to send an RCS message without permissions due to a missing permission check. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android kernelAndroid ID: A-208650395References: N/A
CVSS Score: 7.8 (HIGH)
CWE: CWE-862
References: https://source.android.com/security/bulletin/pixel/2022-03-01; https://source.android.com/security/bulletin/pixel/2022-03-01
CVE: CVE-2021-39735
Published: 2022-03-16
Description: In gasket_alloc_coherent_memory of gasket_page_table.c, there is a possible memory corruption due to a race condition. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android kernelAndroid ID: A-151455484References: N/A
CVSS Score: 6.4 (MEDIUM)
CWE: CWE-362
References: https://source.android.com/security/bulletin/pixel/2022-03-01; https://source.android.com/security/bulletin/pixel/2022-03-01
CVE: CVE-2021-39736
Published: 2022-03-16
Description: In prepare_io_entry and prepare_response of lwis_ioctl.c and lwis_periodic_io.c, there is a possible out of bounds write due to an integer overflow. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android kernelAndroid ID: A-205995773References: N/A
CVSS Score: 6.7 (MEDIUM)
CWE: CWE-190, CWE-787
References: https://source.android.com/security/bulletin/pixel/2022-03-01; https://source.android.com/security/bulletin/pixel/2022-03-01
CVE: CVE-2021-39737
Published: 2022-03-16
Description: Product: AndroidVersions: Android kernelAndroid ID: A-208229524References: N/A
CVSS Score: 9.8 (CRITICAL)
References: https://source.android.com/security/bulletin/pixel/2022-03-01; https://source.android.com/security/bulletin/pixel/2022-03-01
CVE: CVE-2021-39792
Published: 2022-03-16
Description: In usb_gadget_giveback_request of core.c, there is a possible use after free out of bounds read due to a race condition. This could lead to local information disclosure with System execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android kernelAndroid ID: A-161010552References: Upstream kernel
CVSS Score: 4.1 (MEDIUM)
CWE: CWE-362
References: https://source.android.com/security/bulletin/pixel/2022-03-01; https://source.android.com/security/bulletin/pixel/2022-03-01
CVE: CVE-2021-39793
Published: 2022-03-16
Description: In kbase_jd_user_buf_pin_pages of mali_kbase_mem.c, there is a possible out of bounds write due to a logic error in the code. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android kernelAndroid ID: A-210470189References: N/A
CVSS Score: 7.8 (HIGH)
CWE: CWE-787, CWE-787
References: https://source.android.com/security/bulletin/pixel/2022-03-01; https://source.android.com/security/bulletin/pixel/2022-03-01; https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2021-39793
CVE: CVE-2021-40734
Published: 2022-03-16
Description: Adobe Audition version 14.4 (and earlier) is affected by a memory corruption vulnerability when parsing a SVG file, potentially resulting in arbitrary code execution in the context of the current user. User interaction is required to exploit this vulnerability.
CVSS Score: 7.8 (HIGH)
CWE: CWE-788, CWE-119
References: https://helpx.adobe.com/security/products/audition/apsb21-92.html; https://helpx.adobe.com/security/products/audition/apsb21-92.html
CVE: CVE-2021-40735
Published: 2022-03-16
Description: Adobe Audition version 14.4 (and earlier) is affected by a memory corruption vulnerability, potentially resulting in arbitrary code execution in the context of the current user. User interaction is required to exploit this vulnerability.
CVSS Score: 7.8 (HIGH)
CWE: CWE-788, CWE-119
References: https://helpx.adobe.com/security/products/audition/apsb21-92.html; https://helpx.adobe.com/security/products/audition/apsb21-92.html
CVE: CVE-2021-40736
Published: 2022-03-16
Description: Adobe Audition version 14.4 (and earlier) is affected by a memory corruption vulnerability, potentially resulting in arbitrary code execution in the context of the current user. User interaction is required to exploit this vulnerability.
CVSS Score: 7.8 (HIGH)
CWE: CWE-788, CWE-119
References: https://helpx.adobe.com/security/products/audition/apsb21-92.html; https://helpx.adobe.com/security/products/audition/apsb21-92.html
CVE: CVE-2021-40737
Published: 2022-03-16
Description: Adobe Audition version 14.4 (and earlier) is affected by a Null pointer dereference vulnerability when parsing a specially crafted file. An unauthenticated attacker could leverage this vulnerability to achieve an application denial-of-service in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-476, CWE-476
References: https://helpx.adobe.com/security/products/audition/apsb21-92.html; https://helpx.adobe.com/security/products/audition/apsb21-92.html
CVE: CVE-2021-40738
Published: 2022-03-16
Description: Adobe Audition version 14.4 (and earlier) is affected by a memory corruption vulnerability when parsing a WAV file, potentially resulting in arbitrary code execution in the context of the current user. User interaction is required to exploit this vulnerability.
CVSS Score: 7.8 (HIGH)
CWE: CWE-788, CWE-119
References: https://helpx.adobe.com/security/products/audition/apsb21-92.html; https://helpx.adobe.com/security/products/audition/apsb21-92.html
CVE: CVE-2021-40739
Published: 2022-03-16
Description: Adobe Audition version 14.4 (and earlier) is affected by a memory corruption vulnerability when parsing a M4A file, potentially resulting in arbitrary code execution in the context of the current user. User interaction is required to exploit this vulnerability.
CVSS Score: 7.8 (HIGH)
CWE: CWE-788, CWE-119
References: https://helpx.adobe.com/security/products/audition/apsb21-92.html; https://helpx.adobe.com/security/products/audition/apsb21-92.html
CVE: CVE-2021-40740
Published: 2022-03-16
Description: Adobe Audition version 14.4 (and earlier) is affected by a memory corruption vulnerability when parsing a M4A file, potentially resulting in arbitrary code execution in the context of the current user. User interaction is required to exploit this vulnerability.
CVSS Score: 7.8 (HIGH)
CWE: CWE-788, CWE-119
References: https://helpx.adobe.com/security/products/audition/apsb21-92.html; https://helpx.adobe.com/security/products/audition/apsb21-92.html
CVE: CVE-2021-40741
Published: 2022-03-16
Description: Adobe Audition version 14.4 (and earlier) is affected by an Access of Memory Location After End of Buffer vulnerability when parsing a specially crafted file. An unauthenticated attacker could leverage this vulnerability to achieve an application denial-of-service in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-788
References: https://helpx.adobe.com/security/products/audition/apsb21-92.html; https://helpx.adobe.com/security/products/audition/apsb21-92.html
CVE: CVE-2021-40742
Published: 2022-03-16
Description: Adobe Audition version 14.4 (and earlier) is affected by a Null pointer dereference vulnerability when parsing a specially crafted file. An unauthenticated attacker could leverage this vulnerability to achieve an application denial-of-service in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-476
References: https://helpx.adobe.com/security/products/audition/apsb21-92.html; https://helpx.adobe.com/security/products/audition/apsb21-92.html
CVE: CVE-2021-40750
Published: 2022-03-16
Description: Adobe Bridge version 11.1.1 (and earlier) is affected by a Null pointer dereference vulnerability when parsing a specially crafted file. An unauthenticated attacker could leverage this vulnerability to achieve an application denial-of-service in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-476
References: https://helpx.adobe.com/security/products/bridge/apsb21-94.html; https://helpx.adobe.com/security/products/bridge/apsb21-94.html
CVE: CVE-2021-40762
Published: 2022-03-16
Description: Adobe Character Animator version 4.4 (and earlier) is affected by a Null pointer dereference vulnerability when parsing a specially crafted file. An unauthenticated attacker could leverage this vulnerability to achieve an application denial-of-service in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-476
References: https://helpx.adobe.com/security/products/character_animator/apsb21-95.html; https://helpx.adobe.com/security/products/character_animator/apsb21-95.html
CVE: CVE-2021-40763
Published: 2022-03-16
Description: Adobe Character Animator version 4.4 (and earlier) is affected by a memory corruption vulnerability when parsing a WAF file, potentially resulting in arbitrary code execution in the context of the current user. User interaction is required to exploit this vulnerability.
CVSS Score: 7.8 (HIGH)
CWE: CWE-788, CWE-119
References: https://helpx.adobe.com/security/products/character_animator/apsb21-95.html; https://helpx.adobe.com/security/products/character_animator/apsb21-95.html
CVE: CVE-2021-40764
Published: 2022-03-16
Description: Adobe Character Animator version 4.4 (and earlier) is affected by a memory corruption vulnerability when parsing a M4A file, potentially resulting in arbitrary code execution in the context of the current user. User interaction is required to exploit this vulnerability.
CVSS Score: 7.8 (HIGH)
CWE: CWE-788, CWE-119
References: https://helpx.adobe.com/security/products/character_animator/apsb21-95.html; https://helpx.adobe.com/security/products/character_animator/apsb21-95.html
CVE: CVE-2021-40765
Published: 2022-03-16
Description: Adobe Character Animator version 4.4 (and earlier) is affected by a memory corruption vulnerability when parsing a M4A file, potentially resulting in arbitrary code execution in the context of the current user. User interaction is required to exploit this vulnerability.
CVSS Score: 7.8 (HIGH)
CWE: CWE-788, CWE-119
References: https://helpx.adobe.com/security/products/character_animator/apsb21-95.html; https://helpx.adobe.com/security/products/character_animator/apsb21-95.html
CVE: CVE-2021-40766
Published: 2022-03-16
Description: Adobe Character Animator version 4.4 (and earlier versions) are affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability to bypass mitigations such as ASLR. Exploitation of this issue requires user interaction in that a victim must open a malicious file.
CVSS Score: 3.3 (LOW)
CWE: CWE-125
References: https://helpx.adobe.com/security/products/character_animator/apsb21-95.html; https://helpx.adobe.com/security/products/character_animator/apsb21-95.html
CVE: CVE-2021-40767
Published: 2022-03-16
Description: Adobe Character Animator version 4.4 (and earlier) is affected by an Access of Memory Location After End of Buffer vulnerability when parsing a specially crafted file. An unauthenticated attacker could leverage this vulnerability to achieve an application denial-of-service in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-788
References: https://helpx.adobe.com/security/products/character_animator/apsb21-95.html; https://helpx.adobe.com/security/products/character_animator/apsb21-95.html
CVE: CVE-2021-40768
Published: 2022-03-16
Description: Adobe Character Animator version 4.4 (and earlier) is affected by a Null pointer dereference vulnerability when parsing a specially crafted file. An unauthenticated attacker could leverage this vulnerability to achieve an application denial-of-service in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-476
References: https://helpx.adobe.com/security/products/character_animator/apsb21-95.html; https://helpx.adobe.com/security/products/character_animator/apsb21-95.html
CVE: CVE-2021-40769
Published: 2022-03-16
Description: Adobe Character Animator version 4.4 (and earlier versions) are affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability to bypass mitigations such as ASLR. Exploitation of this issue requires user interaction in that a victim must open a malicious file.
CVSS Score: 3.3 (LOW)
CWE: CWE-125
References: https://helpx.adobe.com/security/products/character_animator/apsb21-95.html; https://helpx.adobe.com/security/products/character_animator/apsb21-95.html
CVE: CVE-2021-40777
Published: 2022-03-16
Description: Adobe Media Encoder version 15.4.1 (and earlier) is affected by a memory corruption vulnerability due to insecure handling of a malicious file, potentially resulting in arbitrary code execution in the context of the current user. User interaction is required to exploit this vulnerability.
CVSS Score: 7.8 (HIGH)
CWE: CWE-788, CWE-119
References: https://helpx.adobe.com/security/products/media-encoder/apsb21-99.html; https://helpx.adobe.com/security/products/media-encoder/apsb21-99.html
CVE: CVE-2021-40778
Published: 2022-03-16
Description: Adobe Media Encoder 15.4.1 (and earlier) is affected by a Null pointer dereference vulnerability when parsing a specially crafted file. An unauthenticated attacker could leverage this vulnerability to achieve an application denial-of-service in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-476
References: https://helpx.adobe.com/security/products/media-encoder/apsb21-99.html; https://helpx.adobe.com/security/products/media-encoder/apsb21-99.html
CVE: CVE-2021-40779
Published: 2022-03-16
Description: Adobe Media Encoder version 15.4.1 (and earlier) is affected by a memory corruption vulnerability due to insecure handling of a malicious file, potentially resulting in arbitrary code execution in the context of the current user. User interaction is required to exploit this vulnerability.
CVSS Score: 7.8 (HIGH)
CWE: CWE-788, CWE-119
References: https://helpx.adobe.com/security/products/media-encoder/apsb21-99.html; https://helpx.adobe.com/security/products/media-encoder/apsb21-99.html
CVE: CVE-2021-40780
Published: 2022-03-16
Description: Adobe Media Encoder version 15.4.1 (and earlier) is affected by a memory corruption vulnerability due to insecure handling of a malicious file, potentially resulting in arbitrary code execution in the context of the current user. User interaction is required to exploit this vulnerability.
CVSS Score: 7.8 (HIGH)
CWE: CWE-788, CWE-119
References: https://helpx.adobe.com/security/products/media-encoder/apsb21-99.html; https://helpx.adobe.com/security/products/media-encoder/apsb21-99.html
CVE: CVE-2021-40781
Published: 2022-03-16
Description: Adobe Media Encoder 15.4.1 (and earlier) is affected by a Null pointer dereference vulnerability when parsing a specially crafted file. An unauthenticated attacker could leverage this vulnerability to achieve an application denial-of-service in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-476
References: https://helpx.adobe.com/security/products/media-encoder/apsb21-99.html; https://helpx.adobe.com/security/products/media-encoder/apsb21-99.html
CVE: CVE-2021-40782
Published: 2022-03-16
Description: Adobe Media Encoder 15.4.1 (and earlier) is affected by a Null pointer dereference vulnerability when parsing a specially crafted file. An unauthenticated attacker could leverage this vulnerability to achieve an application denial-of-service in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-476
References: https://helpx.adobe.com/security/products/media-encoder/apsb21-99.html; https://helpx.adobe.com/security/products/media-encoder/apsb21-99.html
CVE: CVE-2021-40785
Published: 2022-03-16
Description: Adobe Premiere Elements 20210809.daily.2242976 (and earlier) is affected by a Null pointer dereference vulnerability when parsing a specially crafted file. An unauthenticated attacker could leverage this vulnerability to achieve an application denial-of-service in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-476, CWE-476
References: https://helpx.adobe.com/security/products/premiere_elements/apsb21-106.html; https://helpx.adobe.com/security/products/premiere_elements/apsb21-106.html
CVE: CVE-2021-40786
Published: 2022-03-16
Description: Adobe Premiere Elements 20210809.daily.2242976 (and earlier) is affected by a memory corruption vulnerability due to insecure handling of a malicious file, potentially resulting in arbitrary code execution in the context of the current user. User interaction is required to exploit this vulnerability.
CVSS Score: 7.8 (HIGH)
CWE: CWE-788, CWE-119
References: https://helpx.adobe.com/security/products/premiere_elements/apsb21-106.html; https://helpx.adobe.com/security/products/premiere_elements/apsb21-106.html
CVE: CVE-2021-40787
Published: 2022-03-16
Description: Adobe Premiere Elements 20210809.daily.2242976 (and earlier) is affected by a memory corruption vulnerability due to insecure handling of a malicious file, potentially resulting in arbitrary code execution in the context of the current user. User interaction is required to exploit this vulnerability.
CVSS Score: 7.8 (HIGH)
CWE: CWE-788, CWE-119
References: https://helpx.adobe.com/security/products/premiere_elements/apsb21-106.html; https://helpx.adobe.com/security/products/premiere_elements/apsb21-106.html
CVE: CVE-2021-40788
Published: 2022-03-16
Description: Adobe Premiere Elements 20210809.daily.2242976 (and earlier) is affected by a Null pointer dereference vulnerability when parsing a specially crafted file. An unauthenticated attacker could leverage this vulnerability to achieve an application denial-of-service in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-476
References: https://helpx.adobe.com/security/products/premiere_elements/apsb21-106.html; https://helpx.adobe.com/security/products/premiere_elements/apsb21-106.html