deardaniel/secdata-raw huggingface dataset:
CVE: CVE-2019-9376
Published: 2019-09-27
Description: In Account of Account.java, there is a possible boot loop due to improper input validation. This could lead to local denial of service with no additional execution privileges needed. User interaction is not needed for exploitation.Product: Android; Versions: Android-9, Android-8.0, Android-8.1; Android ID: A-129287265.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-834
References: https://source.android.com/security/bulletin/2021-01-01; https://source.android.com/security/bulletin/2021-01-01
CVE: CVE-2019-9377
Published: 2019-09-27
Description: In FingerprintService, there is a possible bypass for operating system protections that isolate user profiles from each other due to a missing permission check. This could lead to a local information disclosure of metadata about the biometrics of another user on the device with no additional execution privileges needed. User interaction is not needed for exploitation. Product: AndroidVersions: Android-10Android ID: A-128599663
CVSS Score: 3.3 (LOW)
CWE: CWE-862
References: https://source.android.com/security/bulletin/android-10; https://source.android.com/security/bulletin/android-10
CVE: CVE-2019-9378
Published: 2019-09-27
Description: In the Activity Manager service, there is a possible permission bypass due to incorrect permission check. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation. Product: AndroidVersions: Android-10Android ID: A-124539196
CVSS Score: 7.8 (HIGH)
CWE: CWE-732
References: https://source.android.com/security/bulletin/android-10; https://source.android.com/security/bulletin/android-10
CVE: CVE-2019-9379
Published: 2019-09-27
Description: In libstagefright, there is a possible resource exhaustion due to a missing bounds check. This could lead to remote denial of service with no additional execution privileges needed. User interaction is needed for exploitation. Product: AndroidVersions: Android-10Android ID: A-124329638
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-20
References: https://source.android.com/security/bulletin/android-10; https://source.android.com/security/bulletin/android-10
CVE: CVE-2019-9380
Published: 2019-09-27
Description: In the settings UI, there is a possible spoofing vulnerability due to a missing permission check. This could lead to a user mistakenly changing permission settings with no additional execution privileges needed. User interaction is needed for exploitation. Product: AndroidVersions: Android-10Android ID: A-123700098
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-862
References: https://source.android.com/security/bulletin/android-10; https://source.android.com/security/bulletin/android-10
CVE: CVE-2019-9381
Published: 2019-09-27
Description: In netd, there is a possible out of bounds read due to a use after free. This could lead to remote information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation. Product: AndroidVersions: Android-10Android ID: A-122677612
CVSS Score: 7.5 (HIGH)
CWE: CWE-125, CWE-416
References: https://source.android.com/security/bulletin/android-10; https://source.android.com/security/bulletin/android-10
CVE: CVE-2019-9382
Published: 2019-09-27
Description: In libeffects, there is a possible out of bounds write due to a missing bounds check. This could lead to remote code execution with no additional execution privileges needed. User interaction is needed for exploitation. Product: AndroidVersions: Android-10Android ID: A-120874654
CVSS Score: 8.8 (HIGH)
CWE: CWE-787
References: https://source.android.com/security/bulletin/android-10; https://source.android.com/security/bulletin/android-10
CVE: CVE-2019-9383
Published: 2019-09-27
Description: In NFC server, there is a possible out of bounds read due to a missing bounds check. This could lead to local information disclosure with no additional execution privileges needed. User interaction is needed for exploitation. Product: AndroidVersions: Android-10Android ID: A-120843827
CVSS Score: 5.0 (MEDIUM)
CWE: CWE-125
References: https://source.android.com/security/bulletin/android-10; https://source.android.com/security/bulletin/android-10
CVE: CVE-2019-9384
Published: 2019-09-27
Description: In LockPatternUtils, there is a possible escalation of privilege due to an improper permissions check. This could lead to local bypass of the Lockguard with System execution privileges needed. User interaction is not needed for exploitation. Product: AndroidVersions: Android-10Android ID: A-120568007
CVSS Score: 6.7 (MEDIUM)
References: https://source.android.com/security/bulletin/android-10; https://source.android.com/security/bulletin/android-10
CVE: CVE-2019-9385
Published: 2019-09-27
Description: In libxaac, there is a possible out of bounds read due to a missing bounds check. This could lead to remote information disclosure with no additional execution privileges needed. User interaction is needed for exploitation. Product: AndroidVersions: Android-10Android ID: A-120452956
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-125
References: https://source.android.com/security/bulletin/android-10; https://source.android.com/security/bulletin/android-10
CVE: CVE-2019-9386
Published: 2019-09-27
Description: In NFC server, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege in the system server with no additional execution privileges needed. User interaction is needed for exploitation. Product: AndroidVersions: Android-10Android ID: A-122361874
CVSS Score: 7.3 (HIGH)
CWE: CWE-787
References: https://source.android.com/security/bulletin/android-10; https://source.android.com/security/bulletin/android-10
CVE: CVE-2019-9387
Published: 2019-09-27
Description: In Bluetooth, there is a possible out of bounds read due to a missing bounds check. This could lead to remote information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation. Product: AndroidVersions: Android-10Android ID: A-117569833
CVSS Score: 7.5 (HIGH)
CWE: CWE-125
References: https://source.android.com/security/bulletin/android-10; https://source.android.com/security/bulletin/android-10
CVE: CVE-2019-9388
Published: 2019-09-27
Description: In Bluetooth, there is a possible out of bounds read due to a missing bounds check. This could lead to remote information disclosure in the Bluetooth service with no additional execution privileges needed. User interaction is not needed for exploitation. Product: AndroidVersions: Android-10Android ID: A-117567437
CVSS Score: 7.5 (HIGH)
CWE: CWE-125
References: https://source.android.com/security/bulletin/android-10; https://source.android.com/security/bulletin/android-10
CVE: CVE-2019-9389
Published: 2019-09-27
Description: In Bluetooth, there is a possible out of bounds read due to a missing bounds check. This could lead to remote denial of service with no additional execution privileges needed. User interaction is not needed for exploitation. Product: AndroidVersions: Android-10Android ID: A-117567058
CVSS Score: 7.5 (HIGH)
CWE: CWE-125
References: https://source.android.com/security/bulletin/android-10; https://source.android.com/security/bulletin/android-10
CVE: CVE-2019-9390
Published: 2019-09-27
Description: In Bluetooth, there is a possible out of bounds read due to a missing bounds check. This could lead to remote denial of service with no additional execution privileges needed. User interaction is not needed for exploitation. Product: AndroidVersions: Android-10Android ID: A-117551475
CVSS Score: 7.5 (HIGH)
CWE: CWE-125
References: https://source.android.com/security/bulletin/android-10; https://source.android.com/security/bulletin/android-10
CVE: CVE-2019-9391
Published: 2019-09-27
Description: In libxaac, there is a possible out of bounds read due to uninitialized data. This could lead to information disclosure with no additional execution privileges needed. User interaction is needed for exploitation. Product: AndroidVersions: Android-10Android ID: A-111050781
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-125, CWE-908
References: https://source.android.com/security/bulletin/android-10; https://source.android.com/security/bulletin/android-10
CVE: CVE-2019-9393
Published: 2019-09-27
Description: In Bluetooth, there is possible controlled termination due to a missing bounds check. This could lead to remote denial of service with no additional execution privileges needed. User interaction is not needed for exploitation. Product: AndroidVersions: Android-10Android ID: A-116357965
CVSS Score: 7.5 (HIGH)
CWE: CWE-20
References: https://source.android.com/security/bulletin/android-10; https://source.android.com/security/bulletin/android-10
CVE: CVE-2019-9394
Published: 2019-09-27
Description: In Bluetooth, there is possible controlled termination due to a missing bounds check. This could lead to remote denial of service with no additional execution privileges needed. User interaction is not needed for exploitation. Product: AndroidVersions: Android-10Android ID: A-116351796
CVSS Score: 7.5 (HIGH)
CWE: CWE-20
References: https://source.android.com/security/bulletin/android-10; https://source.android.com/security/bulletin/android-10
CVE: CVE-2019-9395
Published: 2019-09-27
Description: In Bluetooth, there is possible controlled termination due to a missing bounds check. This could lead to remote denial of service with no additional execution privileges needed. User interaction is not needed for exploitation. Product: AndroidVersions: Android-10Android ID: A-116267405
CVSS Score: 7.5 (HIGH)
CWE: CWE-20
References: https://source.android.com/security/bulletin/android-10; https://source.android.com/security/bulletin/android-10
CVE: CVE-2019-9396
Published: 2019-09-27
Description: In Bluetooth, there is possible controlled termination due to a missing bounds check. This could lead to remote denial of service with no additional execution privileges needed. User interaction is not needed for exploitation. Product: AndroidVersions: Android-10Android ID: A-115747155
CVSS Score: 7.5 (HIGH)
CWE: CWE-20
References: https://source.android.com/security/bulletin/android-10; https://source.android.com/security/bulletin/android-10
CVE: CVE-2019-9397
Published: 2019-09-27
Description: In Bluetooth, there is possible controlled termination due to a missing bounds check. This could lead to remote denial of service with no additional execution privileges needed. User interaction is not needed for exploitation. Product: AndroidVersions: Android-10Android ID: A-115747410
CVSS Score: 7.5 (HIGH)
CWE: CWE-20
References: https://source.android.com/security/bulletin/android-10; https://source.android.com/security/bulletin/android-10
CVE: CVE-2019-9398
Published: 2019-09-27
Description: In Bluetooth, there is possible controlled termination due to a missing bounds check. This could lead to remote denial of service with no additional execution privileges needed. User interaction is not needed for exploitation. Product: AndroidVersions: Android-10Android ID: A-115745406
CVSS Score: 7.5 (HIGH)
CWE: CWE-20
References: https://source.android.com/security/bulletin/android-10; https://source.android.com/security/bulletin/android-10
CVE: CVE-2019-9399
Published: 2019-09-27
Description: The Print Service is susceptible to man in the middle attacks due to improperly used crypto. This could lead to remote information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation. Product: AndroidVersions: Android-10Android ID: A-115635664
CVSS Score: 5.9 (MEDIUM)
CWE: CWE-327
References: https://source.android.com/security/bulletin/android-10; https://source.android.com/security/bulletin/android-10
CVE: CVE-2019-9400
Published: 2019-09-27
Description: In Bluetooth, there is a possible null pointer dereference due to a missing null check. This could lead to remote denial of service with no additional execution privileges needed. User interaction is not needed for exploitation. Product: AndroidVersions: Android-10Android ID: A-115509589
CVSS Score: 7.5 (HIGH)
CWE: CWE-476
References: https://source.android.com/security/bulletin/android-10; https://source.android.com/security/bulletin/android-10
CVE: CVE-2019-9401
Published: 2019-09-27
Description: In Bluetooth, there is possible controlled termination due to a missing bounds check. This could lead to remote denial of service with no additional execution privileges needed. User interaction is not needed for exploitation. Product: AndroidVersions: Android-10Android ID: A-115375248
CVSS Score: 7.5 (HIGH)
CWE: CWE-20
References: https://source.android.com/security/bulletin/android-10; https://source.android.com/security/bulletin/android-10
CVE: CVE-2019-9402
Published: 2019-09-27
Description: In Bluetooth, there is possible controlled termination due to a missing bounds check. This could lead to remote denial of service with no additional execution privileges needed. User interaction is not needed for exploitation. Product: AndroidVersions: Android-10Android ID: A-115372550
CVSS Score: 7.5 (HIGH)
CWE: CWE-20
References: https://source.android.com/security/bulletin/android-10; https://source.android.com/security/bulletin/android-10
CVE: CVE-2019-9403
Published: 2019-09-27
Description: In cn-cbor, there is a possible out of bounds read due to improper casting. This could lead to remote information disclosure with no additional execution privileges needed. User interaction is needed for exploitation. Product: AndroidVersions: Android-10Android ID: A-113512324
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-125
References: https://source.android.com/security/bulletin/android-10; https://source.android.com/security/bulletin/android-10
CVE: CVE-2019-9404
Published: 2019-09-27
Description: In Bluetooth, there is possible controlled termination due to a missing bounds check. This could lead to remote denial of service with no additional execution privileges needed. User interaction is not needed for exploitation. Product: AndroidVersions: Android-10Android ID: A-112923309
CVSS Score: 7.5 (HIGH)
CWE: CWE-20
References: https://source.android.com/security/bulletin/android-10; https://source.android.com/security/bulletin/android-10
CVE: CVE-2019-9405
Published: 2019-09-27
Description: In libAACdec, there is a possible out of bounds write due to an integer overflow. This could lead to remote code execution with no additional execution privileges needed. User interaction is needed for exploitation. Product: AndroidVersions: Android-10Android ID: A-112890225
CVSS Score: 8.8 (HIGH)
CWE: CWE-190, CWE-787
References: https://source.android.com/security/bulletin/android-10; https://source.android.com/security/bulletin/android-10
CVE: CVE-2019-9406
Published: 2019-09-27
Description: In libhevc there is a possible information disclosure due to uninitialized data. This could lead to remote information disclosure with no additional execution privileges needed. User interaction is needed for exploitation. Product: AndroidVersions: Android-10Android ID: A-112552517
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-908
References: https://source.android.com/security/bulletin/android-10; https://source.android.com/security/bulletin/android-10
CVE: CVE-2019-9407
Published: 2019-09-27
Description: In notification management of the service manager, there is a possible permissions bypass. This could lead to local escalation of privilege by preventing user notification, with no additional execution privileges needed. User interaction is not needed for exploitation. Product: AndroidVersions: Android-10Android ID: A-112434609
CVSS Score: 7.8 (HIGH)
References: https://source.android.com/security/bulletin/android-10; https://source.android.com/security/bulletin/android-10
CVE: CVE-2019-9408
Published: 2019-09-27
Description: In libavc there is a possible information disclosure due to uninitialized data. This could lead to remote information disclosure with no additional execution privileges needed. User interaction is needed for exploitation. Product: AndroidVersions: Android-10Android ID: A-112380157
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-908
References: https://source.android.com/security/bulletin/android-10; https://source.android.com/security/bulletin/android-10
CVE: CVE-2019-9409
Published: 2019-09-27
Description: In libhevc there is a possible information disclosure due to uninitialized data. This could lead to remote information disclosure with no additional execution privileges needed. User interaction is needed for exploitation. Product: AndroidVersions: Android-10Android ID: A-112272091
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-908
References: https://source.android.com/security/bulletin/android-10; https://source.android.com/security/bulletin/android-10
CVE: CVE-2019-9410
Published: 2019-09-27
Description: In libavc there is a possible information disclosure due to uninitialized data. This could lead to remote information disclosure with no additional execution privileges needed. User interaction is needed for exploitation. Product: AndroidVersions: Android-10Android ID: A-112204443
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-908
References: https://source.android.com/security/bulletin/android-10; https://source.android.com/security/bulletin/android-10
CVE: CVE-2019-9411
Published: 2019-09-27
Description: In libavc there is a possible information disclosure due to uninitialized data. This could lead to remote information disclosure with no additional execution privileges needed. User interaction is needed for exploitation. Product: AndroidVersions: Android-10Android ID: A-112204845
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-908
References: https://source.android.com/security/bulletin/android-10; https://source.android.com/security/bulletin/android-10
CVE: CVE-2019-9412
Published: 2019-09-27
Description: In libSBRdec there is a possible out of bounds read due to incorrect bounds check. This could lead to remote information disclosure with no additional execution privileges needed. User interaction is needed for exploitation. Product: AndroidVersions: Android-10Android ID: A-112006096
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-125
References: https://source.android.com/security/bulletin/android-10; https://source.android.com/security/bulletin/android-10
CVE: CVE-2019-9413
Published: 2019-09-27
Description: In Bluetooth, there is a possible out of bounds read due to a missing bounds check. This could lead to remote information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation. Product: AndroidVersions: Android-10Android ID: A-111935831
CVSS Score: 7.5 (HIGH)
CWE: CWE-125
References: https://source.android.com/security/bulletin/android-10; https://source.android.com/security/bulletin/android-10
CVE: CVE-2019-9414
Published: 2019-09-27
Description: In wpa_supplicant, there is a possible man in the middle vulnerability due to improper input validation of the basicConstraints field of intermediary certificates. This could lead to remote information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation. Product: AndroidVersions: Android-10Android ID: A-111893041
CVSS Score: 5.9 (MEDIUM)
CWE: CWE-20
References: https://source.android.com/security/bulletin/android-10; https://source.android.com/security/bulletin/android-10
CVE: CVE-2019-9415
Published: 2019-09-27
Description: In libstagefright there is a possible information disclosure due to uninitialized data. This could lead to remote information disclosure with no additional execution privileges needed. User interaction is needed for exploitation. Product: AndroidVersions: Android-10Android ID: A-111805098
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-908
References: https://source.android.com/security/bulletin/android-10; https://source.android.com/security/bulletin/android-10
CVE: CVE-2019-9416
Published: 2019-09-27
Description: In libstagefright there is a possible information disclosure due to uninitialized data. This could lead to remote information disclosure with no additional execution privileges needed. User interaction is needed for exploitation. Product: AndroidVersions: Android-10Android ID: A-111804142
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-908
References: https://source.android.com/security/bulletin/android-10; https://source.android.com/security/bulletin/android-10
CVE: CVE-2019-9417
Published: 2019-09-27
Description: In Bluetooth, there is a possible out of bounds read due to a missing bounds check. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation. Product: AndroidVersions: Android-10Android ID: A-111450079
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-125
References: https://source.android.com/security/bulletin/android-10; https://source.android.com/security/bulletin/android-10
CVE: CVE-2019-9418
Published: 2019-09-27
Description: In libstagefright, there is a possible resource exhaustion due to a missing bounds check. This could lead to remote denial of service with no additional execution privileges needed. User interaction is needed for exploitation. Product: AndroidVersions: Android-10Android ID: A-111450210
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-20
References: https://source.android.com/security/bulletin/android-10; https://source.android.com/security/bulletin/android-10
CVE: CVE-2019-9419
Published: 2019-09-27
Description: In Bluetooth, there is a possible out of bounds read due to a missing bounds check. This could lead to remote information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation. Product: AndroidVersions: Android-10Android ID: A-111407544
CVSS Score: 7.5 (HIGH)
CWE: CWE-125
References: https://source.android.com/security/bulletin/android-10; https://source.android.com/security/bulletin/android-10
CVE: CVE-2019-9420
Published: 2019-09-27
Description: In libhevc, there is a possible out of bounds read due to an integer overflow. This could lead to remote denial of service with no additional execution privileges needed. User interaction is needed for exploitation. Product: AndroidVersions: Android-10Android ID: A-111272481
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-125, CWE-190
References: https://source.android.com/security/bulletin/android-10; https://source.android.com/security/bulletin/android-10
CVE: CVE-2019-9421
Published: 2019-09-27
Description: In libandroidfw, there is a possible OOB read due to an integer overflow. This could lead to local information disclosure with no additional execution privileges needed. User interaction is needed for exploitation. Product: AndroidVersions: Android-10Android ID: A-111215250
CVSS Score: 5.0 (MEDIUM)
CWE: CWE-125, CWE-190
References: https://source.android.com/security/bulletin/android-10; https://source.android.com/security/bulletin/android-10
CVE: CVE-2019-9422
Published: 2019-09-27
Description: In Bluetooth, there is a possible out of bounds read due to a missing bounds check. This could lead to remote information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation. Product: AndroidVersions: Android-10Android ID: A-111214766
CVSS Score: 7.5 (HIGH)
CWE: CWE-125
References: https://source.android.com/security/bulletin/android-10; https://source.android.com/security/bulletin/android-10
CVE: CVE-2019-9423
Published: 2019-09-27
Description: In opencv calls that use libpng, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with no additional execution privileges required. User interaction is not required for exploitation. Product: AndroidVersions: Android-10Android ID: A-110986616
CVSS Score: 7.8 (HIGH)
CWE: CWE-787
References: http://www.openwall.com/lists/oss-security/2019/10/25/17; http://www.openwall.com/lists/oss-security/2019/10/27/1; http://www.openwall.com/lists/oss-security/2019/11/07/1