deardaniel/secdata-raw huggingface dataset:
CVE: CVE-2019-2162
Published: 2019-09-27
Description: In libxaac there is a possible out of bounds read due to a missing bounds check. This could lead to remote information disclosure with no additional execution privileges needed. User interaction is needed for exploitation. Product: AndroidVersions: Android-10Android ID: A-112713720
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-125
References: https://source.android.com/security/bulletin/android-10; https://source.android.com/security/bulletin/android-10
CVE: CVE-2019-2163
Published: 2019-09-27
Description: In libxaac there is a possible out of bounds read due to a missing bounds check. This could lead to information disclosure with no additional execution privileges needed. User interaction is needed for exploitation. Product: AndroidVersions: Android-10Android ID: A-118138797
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-125
References: https://source.android.com/security/bulletin/android-10; https://source.android.com/security/bulletin/android-10
CVE: CVE-2019-2164
Published: 2019-09-27
Description: In libxaac there is a possible out of bounds read due to a missing bounds check. This could lead to information disclosure with no additional execution privileges needed. User interaction is needed for exploitation. Product: AndroidVersions: Android-10Android ID: A-113263695
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-125
References: https://source.android.com/security/bulletin/android-10; https://source.android.com/security/bulletin/android-10
CVE: CVE-2019-2165
Published: 2019-09-27
Description: In libxaac there is a possible out of bounds read due to a missing bounds check. This could lead to information disclosure with no additional execution privileges needed. User interaction is needed for exploitation. Product: AndroidVersions: Android-10Android ID: A-112712154
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-125
References: https://source.android.com/security/bulletin/android-10; https://source.android.com/security/bulletin/android-10
CVE: CVE-2019-2166
Published: 2019-09-27
Description: In libxaac there is a possible information disclosure due to uninitialized data. This could lead to information disclosure with no additional execution privileges needed. User interaction is needed for exploitation. Product: AndroidVersions: Android-10Android ID: A-117661478
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-908
References: https://source.android.com/security/bulletin/android-10; https://source.android.com/security/bulletin/android-10
CVE: CVE-2019-2167
Published: 2019-09-27
Description: In libxaac there is a possible information disclosure due to uninitialized data. This could lead to information disclosure with no additional execution privileges needed. User interaction is needed for exploitation. Product: AndroidVersions: Android-10Android ID: A-118615501
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-908
References: https://source.android.com/security/bulletin/android-10; https://source.android.com/security/bulletin/android-10
CVE: CVE-2019-2168
Published: 2019-09-27
Description: In libxaac there is a possible information disclosure due to uninitialized data. This could lead to information disclosure with no additional execution privileges needed. User interaction is needed for exploitation. Product: AndroidVersions: Android-10Android ID: A-118492594
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-908
References: https://source.android.com/security/bulletin/android-10; https://source.android.com/security/bulletin/android-10
CVE: CVE-2019-2169
Published: 2019-09-27
Description: In libxaac there is a possible information disclosure due to uninitialized data. This could lead to information disclosure with no additional execution privileges needed. User interaction is needed for exploitation. Product: AndroidVersions: Android-10Android ID: A-118492282
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-908
References: https://source.android.com/security/bulletin/android-10; https://source.android.com/security/bulletin/android-10
CVE: CVE-2019-2170
Published: 2019-09-27
Description: In libxaac there is a possible information disclosure due to uninitialized data. This could lead to information disclosure with no additional execution privileges needed. User interaction is needed for exploitation. Product: AndroidVersions: Android-10Android ID: A-118615735
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-908
References: https://source.android.com/security/bulletin/android-10; https://source.android.com/security/bulletin/android-10
CVE: CVE-2019-2171
Published: 2019-09-27
Description: In libxaac there is a possible information disclosure due to uninitialized data. This could lead to information disclosure with no additional execution privileges needed. User interaction is needed for exploitation. Product: AndroidVersions: Android-10Android ID: A-113035086
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-908
References: https://source.android.com/security/bulletin/android-10; https://source.android.com/security/bulletin/android-10
CVE: CVE-2019-2172
Published: 2019-09-27
Description: In libxaac there is a possible information disclosure due to uninitialized data. This could lead to information disclosure with no additional execution privileges needed. User interaction is needed for exploitation. Product: AndroidVersions: Android-10Android ID: A-113035224
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-908
References: https://source.android.com/security/bulletin/android-10; https://source.android.com/security/bulletin/android-10
CVE: CVE-2019-2188
Published: 2019-09-27
Description: In the Easel driver, there is possible memory corruption due to race conditions. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android kernelAndroid ID: A-112309571
CVSS Score: 6.4 (MEDIUM)
CWE: CWE-362, CWE-787
References: https://source.android.com/security/bulletin/pixel/2019-09-01; https://source.android.com/security/bulletin/pixel/2019-09-01
CVE: CVE-2019-2189
Published: 2019-09-27
Description: In the Easel driver, there is possible memory corruption due to race conditions. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android kernelAndroid ID: A-112312381
CVSS Score: 6.4 (MEDIUM)
CWE: CWE-362, CWE-787
References: https://source.android.com/security/bulletin/pixel/2019-09-01; https://source.android.com/security/bulletin/pixel/2019-09-01
CVE: CVE-2019-2190
Published: 2019-09-27
Description: In LG's LAF component, there is a possible leak of information in a protected disk partition due to a missing bounds check. This could lead to local information disclosure via USB with User execution privileges needed. User interaction is not required for exploitation.Product: AndroidVersions: Android kernelAndroid ID: A-68771598
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-119
References: https://source.android.com/security/bulletin/pixel/2019-09-01; https://source.android.com/security/bulletin/pixel/2019-09-01
CVE: CVE-2019-2191
Published: 2019-09-27
Description: In LG's LAF component, there is a possible leak of information in a protected disk partition due to a missing bounds check. This could lead to local information disclosure via USB with User execution privileges needed. User interaction is not required for exploitation.Product: AndroidVersions: Android kernelAndroid ID: A-68770980
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-119
References: https://source.android.com/security/bulletin/pixel/2019-09-01; https://source.android.com/security/bulletin/pixel/2019-09-01
CVE: CVE-2019-9232
Published: 2019-09-27
Description: In libvpx, there is a possible out of bounds read due to a missing bounds check. This could lead to remote information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation. Product: AndroidVersions: Android-10Android ID: A-122675483
CVSS Score: 7.5 (HIGH)
CWE: CWE-125
References: http://lists.opensuse.org/opensuse-security-announce/2020-01/msg00049.html; http://www.openwall.com/lists/oss-security/2019/10/25/17; http://www.openwall.com/lists/oss-security/2019/10/27/1
CVE: CVE-2019-9233
Published: 2019-09-27
Description: In wpa_supplicant_8, there is a possible out of bounds read due to an incorrect bounds check. This could lead to remote information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation. Product: AndroidVersions: Android-10Android ID: A-122529021
CVSS Score: 7.5 (HIGH)
CWE: CWE-125
References: https://source.android.com/security/bulletin/android-10; https://source.android.com/security/bulletin/android-10
CVE: CVE-2019-9234
Published: 2019-09-27
Description: In wpa_supplicant_8, there is a possible out of bounds read due to a missing bounds check. This could lead to remote information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation. Product: AndroidVersions: Android-10Android ID: A-122465453
CVSS Score: 7.5 (HIGH)
CWE: CWE-125
References: https://source.android.com/security/bulletin/android-10; https://source.android.com/security/bulletin/android-10
CVE: CVE-2019-9235
Published: 2019-09-27
Description: In NFC, there is a possible out of bounds read due to a missing bounds check. This could lead to local information disclosure with no additional execution privileges needed. User interaction is needed for exploitation. Product: AndroidVersions: Android-10Android ID: A-122323053
CVSS Score: 5.0 (MEDIUM)
CWE: CWE-125
References: https://source.android.com/security/bulletin/android-10; https://source.android.com/security/bulletin/android-10
CVE: CVE-2019-9236
Published: 2019-09-27
Description: In NFC, there is a possible out of bounds read due to a missing bounds check. This could lead to local information disclosure with no additional execution privileges needed. User interaction is needed for exploitation. Product: AndroidVersions: Android-10Android ID: A-122322613
CVSS Score: 5.0 (MEDIUM)
CWE: CWE-125
References: https://source.android.com/security/bulletin/android-10; https://source.android.com/security/bulletin/android-10
CVE: CVE-2019-9237
Published: 2019-09-27
Description: In Bluetooth, there is a possible out of bounds read due to a missing bounds check. This could lead to remote information disclosure with no additional execution privileges needed. User interaction is needed for exploitation. Product: AndroidVersions: Android-10Android ID: A-121325979
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-125
References: https://source.android.com/security/bulletin/android-10; https://source.android.com/security/bulletin/android-10
CVE: CVE-2019-9238
Published: 2019-09-27
Description: In the NFC stack, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with System execution privileges needed. User interaction is needed for exploitation. Product: AndroidVersions: Android-10Android ID: A-121267042
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-787
References: https://source.android.com/security/bulletin/android-10; https://source.android.com/security/bulletin/android-10
CVE: CVE-2019-9239
Published: 2019-09-27
Description: In NFC, there is a possible out of bounds read due to a missing bounds check. This could lead to local information disclosure with no additional execution privileges needed. User interaction is needed for exploitation. Product: AndroidVersions: Android-10Android ID: A-121263487
CVSS Score: 5.0 (MEDIUM)
CWE: CWE-125
References: https://source.android.com/security/bulletin/android-10; https://source.android.com/security/bulletin/android-10
CVE: CVE-2019-9240
Published: 2019-09-27
Description: In NFC, there is a possible out of bounds read due to a missing bounds check. This could lead to local information disclosure with no additional execution privileges needed. User interaction is needed for exploitation. Product: AndroidVersions: Android-10Android ID: A-121150966
CVSS Score: 5.0 (MEDIUM)
CWE: CWE-125
References: https://source.android.com/security/bulletin/android-10; https://source.android.com/security/bulletin/android-10
CVE: CVE-2019-9241
Published: 2019-09-27
Description: In Bluetooth, there is a possible out of bounds read due to a missing bounds check. This could lead to remote information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation. Product: AndroidVersions: Android-10Android ID: A-121036603
CVSS Score: 7.5 (HIGH)
CWE: CWE-125
References: https://source.android.com/security/bulletin/android-10; https://source.android.com/security/bulletin/android-10
CVE: CVE-2019-9242
Published: 2019-09-27
Description: In NFC, there is a possible out of bounds read due to a missing bounds check. This could lead to local information disclosure with no additional execution privileges needed. User interaction is needed for exploitation. Product: AndroidVersions: Android-10Android ID: A-121035878
CVSS Score: 5.0 (MEDIUM)
CWE: CWE-125
References: https://source.android.com/security/bulletin/android-10; https://source.android.com/security/bulletin/android-10
CVE: CVE-2019-9243
Published: 2019-09-27
Description: In wpa_supplicant_8, there is a possible out of bounds read due to a missing bounds check. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation. Product: AndroidVersions: Android-10Android ID: A-120905706
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-125
References: https://source.android.com/security/bulletin/android-10; https://source.android.com/security/bulletin/android-10
CVE: CVE-2019-9244
Published: 2019-09-27
Description: In NFC, there is a possible out of bounds read due to a missing bounds check. This could lead to local information disclosure with no additional execution privileges needed. User interaction is needed for exploitation. Product: AndroidVersions: Android-10Android ID: A-120865977
CVSS Score: 5.0 (MEDIUM)
CWE: CWE-125
References: https://source.android.com/security/bulletin/android-10; https://source.android.com/security/bulletin/android-10
CVE: CVE-2019-9246
Published: 2019-09-27
Description: In NFC, there is a possible out of bounds read due to a missing bounds check. This could lead to local information disclosure with no additional execution privileges needed. User interaction is needed for exploitation. Product: AndroidVersions: Android-10Android ID: A-120428637
CVSS Score: 5.0 (MEDIUM)
CWE: CWE-125
References: https://source.android.com/security/bulletin/android-10; https://source.android.com/security/bulletin/android-10
CVE: CVE-2019-9247
Published: 2019-09-27
Description: In AAC Codec, there is a missing variable initialization. This could lead to remote information disclosure with no additional execution privileges needed. User interaction is needed for exploitation. Product: AndroidVersions: Android-10Android ID: A-120426166
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-909
References: https://source.android.com/security/bulletin/android-10; https://source.android.com/security/bulletin/android-10
CVE: CVE-2019-9249
Published: 2019-09-27
Description: In Bluetooth, there is a possible out of bounds read due to a missing bounds check. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation. Product: AndroidVersions: Android-10Android ID: A-120255805
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-125
References: https://source.android.com/security/bulletin/android-10; https://source.android.com/security/bulletin/android-10
CVE: CVE-2019-9250
Published: 2019-09-27
Description: In Bluetooth, there is a possible out of bounds read due to a missing bounds check. This could lead to remote information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation. Product: AndroidVersions: Android-10Android ID: A-120276962
CVSS Score: 7.5 (HIGH)
CWE: CWE-125
References: https://source.android.com/security/bulletin/android-10; https://source.android.com/security/bulletin/android-10
CVE: CVE-2019-9251
Published: 2019-09-27
Description: In NFC, there is a possible out of bounds read due to a missing bounds check. This could lead to local information disclosure with no additional execution privileges needed. User interaction is needed for exploitation. Product: AndroidVersions: Android-10Android ID: A-120274615
CVSS Score: 5.0 (MEDIUM)
CWE: CWE-125
References: https://source.android.com/security/bulletin/android-10; https://source.android.com/security/bulletin/android-10
CVE: CVE-2019-9252
Published: 2019-09-27
Description: In libavc there is a possible out of bounds read due to uninitialized data. This could lead to remote information disclosure with no additional execution privileges needed. User interaction is needed for exploitation. Product: AndroidVersions: Android-10Android ID: A-73339042
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-125
References: https://source.android.com/security/bulletin/android-10; https://source.android.com/security/bulletin/android-10
CVE: CVE-2019-9253
Published: 2019-09-27
Description: In KeyStore, there is a possible storage of symmetric keys in the TEE instead of the strongbox due to a missing strongbox flag. This could lead to local information disclosure with System execution privileges needed. User interaction is not needed for exploitation. Product: AndroidVersions: Android-10Android ID: A-109769728
CVSS Score: 4.4 (MEDIUM)
CWE: CWE-922
References: https://source.android.com/security/bulletin/android-10; https://source.android.com/security/bulletin/android-10
CVE: CVE-2019-9256
Published: 2019-09-27
Description: In libmediaextractor there is a possible out of bounds write due to an integer overflow. This could lead to remote code execution with no additional execution privileges needed. User interaction is needed for exploitation. Product: AndroidVersions: Android-10Android ID: A-111921829
CVSS Score: 8.8 (HIGH)
CWE: CWE-190, CWE-787
References: https://source.android.com/security/bulletin/android-10; https://source.android.com/security/bulletin/android-10
CVE: CVE-2019-9257
Published: 2019-09-27
Description: In Bluetooth, there is a possible out of bounds write due to an integer overflow. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation. Product: AndroidVersions: Android-10Android ID: A-113572342
CVSS Score: 7.8 (HIGH)
CWE: CWE-190, CWE-787
References: https://source.android.com/security/bulletin/android-10; https://source.android.com/security/bulletin/android-10
CVE: CVE-2019-9258
Published: 2019-09-27
Description: In wifilogd, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation. Product: AndroidVersions: Android-10Android ID: A-113655028
CVSS Score: 7.8 (HIGH)
CWE: CWE-787
References: https://source.android.com/security/bulletin/android-10; https://source.android.com/security/bulletin/android-10
CVE: CVE-2019-9259
Published: 2019-09-27
Description: In the Bluetooth stack, there is a possible out of bounds write due to a use after free. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Product: AndroidVersions: Android-10Android ID: A-113575306
CVSS Score: 6.7 (MEDIUM)
CWE: CWE-416, CWE-787
References: https://source.android.com/security/bulletin/android-10; https://source.android.com/security/bulletin/android-10
CVE: CVE-2019-9260
Published: 2019-09-27
Description: In Bluetooth, there is a possible out of bounds read due to an incorrect bounds check. This could lead to remote information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation. Product: AndroidVersions: Android-10Android ID: A-113495295
CVSS Score: 7.5 (HIGH)
CWE: CWE-125
References: https://source.android.com/security/bulletin/android-10; https://source.android.com/security/bulletin/android-10
CVE: CVE-2019-9261
Published: 2019-09-27
Description: In libxaac there is a possible out of bounds read due to missing bounds check. This could lead to information disclosure with no additional execution privileges needed. User interaction is needed for exploitation. Product: AndroidVersions: Android-10Android ID: A-116774214
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-125
References: https://source.android.com/security/bulletin/android-10; https://source.android.com/security/bulletin/android-10
CVE: CVE-2019-9262
Published: 2019-09-27
Description: In MPEG4Extractor, there is a possible out of bounds write due to an integer overflow. This could lead to remote code execution in the media extractor with no additional execution privileges needed. User interaction is needed for exploitation. Product: AndroidVersions: Android-10Android ID: A-111792351
CVSS Score: 8.8 (HIGH)
CWE: CWE-190, CWE-787
References: https://source.android.com/security/bulletin/android-10; https://source.android.com/security/bulletin/android-10
CVE: CVE-2019-9263
Published: 2019-09-27
Description: In telephony, there is a possible bypass of user interaction requirements due to missing permission checks. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation. Product: AndroidVersions: Android-10Android ID: A-73136824
CVSS Score: 7.8 (HIGH)
CWE: CWE-862
References: https://source.android.com/security/bulletin/android-10; https://source.android.com/security/bulletin/android-10
CVE: CVE-2019-9264
Published: 2019-09-27
Description: In libxaac there is a possible out of bounds read due to missing bounds check. This could lead to information disclosure with no additional execution privileges needed. User interaction is needed for exploitation. Product: AndroidVersions: Android-10Android ID: A-116774502
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-125
References: https://source.android.com/security/bulletin/android-10; https://source.android.com/security/bulletin/android-10
CVE: CVE-2019-9265
Published: 2019-09-27
Description: In Bluetooth, there is a possible out of bounds read due to an incorrect bounds check. This could lead to remote information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation. Product: AndroidVersions: Android-10Android ID: A-37994606
CVSS Score: 7.5 (HIGH)
CWE: CWE-125
References: https://source.android.com/security/bulletin/android-10; https://source.android.com/security/bulletin/android-10
CVE: CVE-2019-9266
Published: 2019-09-27
Description: In sensorservice, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Product: AndroidVersions: Android-10Android ID: A-119501435
CVSS Score: 6.7 (MEDIUM)
CWE: CWE-787
References: https://source.android.com/security/bulletin/android-10; https://source.android.com/security/bulletin/android-10
CVE: CVE-2019-9268
Published: 2019-09-27
Description: In libstagefright, there is a possible use-after-free due to improper locking. This could lead to local escalation of privilege in the media server with no additional execution privileges needed. User interaction is not needed for exploitation. Product: AndroidVersions: Android-10Android ID: A-77474014
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-416, CWE-667
References: https://source.android.com/security/bulletin/android-10; https://source.android.com/security/bulletin/android-10
CVE: CVE-2019-9269
Published: 2019-09-27
Description: In System Settings, there is a possible permissions bypass due to a cached Linux user ID. This could lead to a local permissions bypass with no additional execution privileges needed. User interaction is needed for exploitation. Product: AndroidVersions: Android-10Android ID: A-36899497
CVSS Score: 7.3 (HIGH)
CWE: CWE-613
References: https://source.android.com/security/bulletin/android-10; https://source.android.com/security/bulletin/android-10