deardaniel/secdata-raw huggingface dataset:
CVE: CVE-2016-6789
Published: 2017-01-12
Description: An elevation of privilege vulnerability in the NVIDIA libomx library (libnvomx) could enable a local malicious application to execute arbitrary code within the context of a privileged process. This issue is rated as High because it could be used to gain local access to elevated capabilities, which are not normally accessible to a third-party application. Product: Android. Versions: Kernel-3.18. Android ID: A-31251973. References: N-CVE-2016-6789.
CVSS Score: 7.8 (HIGH)
CWE: CWE-284
References: http://nvidia.custhelp.com/app/answers/detail/a_id/4561; http://www.securityfocus.com/bid/94678; https://source.android.com/security/bulletin/2016-12-01.html
CVE: CVE-2016-6790
Published: 2017-01-12
Description: An elevation of privilege vulnerability in the NVIDIA libomx library (libnvomx) could enable a local malicious application to execute arbitrary code within the context of a privileged process. This issue is rated as High because it could be used to gain local access to elevated capabilities, which are not normally accessible to a third-party application. Product: Android. Versions: Kernel-3.18. Android ID: A-31251628. References: N-CVE-2016-6790.
CVSS Score: 7.8 (HIGH)
CWE: CWE-284
References: http://www.securityfocus.com/bid/94678; https://source.android.com/security/bulletin/2016-12-01.html; http://www.securityfocus.com/bid/94678
CVE: CVE-2016-6791
Published: 2017-01-12
Description: An elevation of privilege vulnerability in the Qualcomm sound driver could enable a local malicious application to execute arbitrary code within the context of the kernel. This issue is rated as High because it first requires compromising a privileged process. Product: Android. Versions: Kernel-3.10, Kernel-3.18. Android ID: A-31252384. References: QC-CR#1071809.
CVSS Score: 7.0 (HIGH)
CWE: CWE-284
References: http://www.securityfocus.com/bid/94681; https://source.android.com/security/bulletin/2016-12-01.html; http://www.securityfocus.com/bid/94681
CVE: CVE-2016-8391
Published: 2017-01-12
Description: An elevation of privilege vulnerability in the Qualcomm sound driver could enable a local malicious application to execute arbitrary code within the context of the kernel. This issue is rated as High because it first requires compromising a privileged process. Product: Android. Versions: Kernel-3.10, Kernel-3.18. Android ID: A-31253255. References: QC-CR#1072166.
CVSS Score: 7.0 (HIGH)
CWE: CWE-284
References: http://www.securityfocus.com/bid/94681; https://source.android.com/security/bulletin/2016-12-01.html; http://www.securityfocus.com/bid/94681
CVE: CVE-2016-8392
Published: 2017-01-12
Description: An elevation of privilege vulnerability in the Qualcomm sound driver could enable a local malicious application to execute arbitrary code within the context of the kernel. This issue is rated as High because it first requires compromising a privileged process. Product: Android. Versions: Kernel-3.10, Kernel-3.18. Android ID: A-31385862. References: QC-CR#1073136.
CVSS Score: 7.0 (HIGH)
CWE: CWE-284
References: http://www.securityfocus.com/bid/94681; https://source.android.com/security/bulletin/2016-12-01.html; http://www.securityfocus.com/bid/94681
CVE: CVE-2016-8393
Published: 2017-01-12
Description: An elevation of privilege vulnerability in the Synaptics touchscreen driver could enable a local malicious application to execute arbitrary code within the context of the kernel. This issue is rated as High because it first requires compromising a privileged process. Product: Android. Versions: Kernel-3.10. Android ID: A-31911920.
CVSS Score: 7.0 (HIGH)
CWE: CWE-284
References: http://www.securityfocus.com/bid/94682; https://source.android.com/security/bulletin/2016-12-01.html; http://www.securityfocus.com/bid/94682
CVE: CVE-2016-8394
Published: 2017-01-12
Description: An elevation of privilege vulnerability in the Synaptics touchscreen driver could enable a local malicious application to execute arbitrary code within the context of the kernel. This issue is rated as High because it first requires compromising a privileged process. Product: Android. Versions: Kernel-3.10. Android ID: A-31913197.
CVSS Score: 7.0 (HIGH)
CWE: CWE-284
References: http://www.securityfocus.com/bid/94682; https://source.android.com/security/bulletin/2016-12-01.html; http://www.securityfocus.com/bid/94682
CVE: CVE-2016-8395
Published: 2017-01-12
Description: A denial of service vulnerability in the NVIDIA camera driver could enable an attacker to cause a local permanent denial of service, which may require reflashing the operating system to repair the device. This issue is rated as High due to the possibility of local permanent denial of service. Product: Android. Versions: Kernel-3.10. Android ID: A-31403040. References: N-CVE-2016-8395.
CVSS Score: 4.7 (MEDIUM)
References: http://nvidia.custhelp.com/app/answers/detail/a_id/4561; http://www.securityfocus.com/bid/94710; https://source.android.com/security/bulletin/2016-12-01.html
CVE: CVE-2016-8396
Published: 2017-01-12
Description: An information disclosure vulnerability in the MediaTek video driver could enable a local malicious application to access data outside of its permission levels. This issue is rated as High because it could be used to access sensitive data without explicit user permission. Product: Android. Versions: N/A. Android ID: A-31249105.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-200
References: http://www.securityfocus.com/bid/94712; https://source.android.com/security/bulletin/2016-12-01.html; http://www.securityfocus.com/bid/94712
CVE: CVE-2016-8397
Published: 2017-01-12
Description: An information disclosure vulnerability in the NVIDIA video driver could enable a local malicious application to access data outside of its permission levels. This issue is rated as High because it could be used to access sensitive data without explicit user permission. Product: Android. Versions: Kernel-3.10. Android ID: A-31385953. References: N-CVE-2016-8397.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-200
References: http://nvidia.custhelp.com/app/answers/detail/a_id/4561; http://www.securityfocus.com/bid/94714; https://source.android.com/security/bulletin/2016-12-01.html
CVE: CVE-2016-8399
Published: 2017-01-12
Description: An elevation of privilege vulnerability in the kernel networking subsystem could enable a local malicious application to execute arbitrary code within the context of the kernel. This issue is rated as Moderate because it first requires compromising a privileged process and current compiler optimizations restrict access to the vulnerable code. Product: Android. Versions: Kernel-3.10, Kernel-3.18. Android ID: A-31349935.
CVSS Score: 7.0 (HIGH)
CWE: CWE-284
References: http://rhn.redhat.com/errata/RHSA-2017-0817.html; http://www.securityfocus.com/bid/94708; https://access.redhat.com/errata/RHSA-2017:0869
CVE: CVE-2016-8400
Published: 2017-01-12
Description: An information disclosure vulnerability in the NVIDIA librm library (libnvrm) could enable a local malicious application to access data outside of its permission levels. This issue is rated as Moderate because it could be used to access sensitive data without permission. Product: Android. Versions: Kernel-3.18. Android ID: A-31251599. References: N-CVE-2016-8400.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-200
References: http://nvidia.custhelp.com/app/answers/detail/a_id/4561; http://www.securityfocus.com/bid/94713; https://source.android.com/security/bulletin/2016-12-01.html
CVE: CVE-2016-8401
Published: 2017-01-12
Description: An information disclosure vulnerability in kernel components including the ION subsystem, Binder, USB driver and networking subsystem could enable a local malicious application to access data outside of its permission levels. This issue is rated as Moderate because it first requires compromising a privileged process. Product: Android. Versions: Kernel-3.10, Kernel-3.18. Android ID: A-31494725.
CVSS Score: 4.7 (MEDIUM)
CWE: CWE-200
References: http://www.securityfocus.com/bid/94686; https://source.android.com/security/bulletin/2016-12-01.html; http://www.securityfocus.com/bid/94686
CVE: CVE-2016-8402
Published: 2017-01-12
Description: An information disclosure vulnerability in kernel components including the ION subsystem, Binder, USB driver and networking subsystem could enable a local malicious application to access data outside of its permission levels. This issue is rated as Moderate because it first requires compromising a privileged process. Product: Android. Versions: Kernel-3.10, Kernel-3.18. Android ID: A-31495231.
CVSS Score: 4.7 (MEDIUM)
CWE: CWE-200
References: http://www.securityfocus.com/bid/94686; https://source.android.com/security/bulletin/2016-12-01.html; http://www.securityfocus.com/bid/94686
CVE: CVE-2016-8403
Published: 2017-01-12
Description: An information disclosure vulnerability in kernel components including the ION subsystem, Binder, USB driver and networking subsystem could enable a local malicious application to access data outside of its permission levels. This issue is rated as Moderate because it first requires compromising a privileged process. Product: Android. Versions: Kernel-3.10. Android ID: A-31495348.
CVSS Score: 4.7 (MEDIUM)
CWE: CWE-200
References: http://www.securityfocus.com/bid/94686; https://source.android.com/security/bulletin/2016-12-01.html; http://www.securityfocus.com/bid/94686
CVE: CVE-2016-8404
Published: 2017-01-12
Description: An information disclosure vulnerability in kernel components including the ION subsystem, Binder, USB driver and networking subsystem could enable a local malicious application to access data outside of its permission levels. This issue is rated as Moderate because it first requires compromising a privileged process. Product: Android. Versions: Kernel-3.10. Android ID: A-31496950.
CVSS Score: 4.7 (MEDIUM)
CWE: CWE-200
References: http://www.securityfocus.com/bid/94686; https://source.android.com/security/bulletin/2016-12-01.html; http://www.securityfocus.com/bid/94686
CVE: CVE-2016-8405
Published: 2017-01-12
Description: An information disclosure vulnerability in kernel components including the ION subsystem, Binder, USB driver and networking subsystem could enable a local malicious application to access data outside of its permission levels. This issue is rated as Moderate because it first requires compromising a privileged process. Product: Android. Versions: Kernel-3.10, Kernel-3.18. Android ID: A-31651010.
CVSS Score: 4.7 (MEDIUM)
CWE: CWE-200
References: http://www.debian.org/security/2017/dsa-3791; http://www.securityfocus.com/bid/94686; https://source.android.com/security/bulletin/2016-12-01.html
CVE: CVE-2016-8406
Published: 2017-01-12
Description: An information disclosure vulnerability in kernel components including the ION subsystem, Binder, USB driver and networking subsystem could enable a local malicious application to access data outside of its permission levels. This issue is rated as Moderate because it first requires compromising a privileged process. Product: Android. Versions: Kernel-3.10, Kernel-3.18. Android ID: A-31796940.
CVSS Score: 4.7 (MEDIUM)
CWE: CWE-200
References: http://www.securityfocus.com/bid/94686; https://source.android.com/security/bulletin/2016-12-01.html; http://www.securityfocus.com/bid/94686
CVE: CVE-2016-8407
Published: 2017-01-12
Description: An information disclosure vulnerability in kernel components including the ION subsystem, Binder, USB driver and networking subsystem could enable a local malicious application to access data outside of its permission levels. This issue is rated as Moderate because it first requires compromising a privileged process. Product: Android. Versions: Kernel-3.10, Kernel-3.18. Android ID: A-31802656.
CVSS Score: 4.7 (MEDIUM)
CWE: CWE-200
References: http://www.securityfocus.com/bid/94686; https://source.android.com/security/bulletin/2016-12-01.html; http://www.securityfocus.com/bid/94686
CVE: CVE-2016-8408
Published: 2017-01-12
Description: An information disclosure vulnerability in the NVIDIA video driver could enable a local malicious application to access data outside of its permission levels. This issue is rated as Moderate because it first requires compromising a privileged process. Product: Android. Versions: Kernel-3.10. Android ID: A-31496571. References: N-CVE-2016-8408.
CVSS Score: 4.7 (MEDIUM)
CWE: CWE-200
References: http://www.securityfocus.com/bid/94691; https://source.android.com/security/bulletin/2016-12-01.html; http://www.securityfocus.com/bid/94691
CVE: CVE-2016-8409
Published: 2017-01-12
Description: An information disclosure vulnerability in the NVIDIA video driver could enable a local malicious application to access data outside of its permission levels. This issue is rated as Moderate because it first requires compromising a privileged process. Product: Android. Versions: Kernel-3.10. Android ID: A-31495687. References: N-CVE-2016-8409.
CVSS Score: 4.7 (MEDIUM)
CWE: CWE-200
References: http://www.securityfocus.com/bid/94691; https://source.android.com/security/bulletin/2016-12-01.html; http://www.securityfocus.com/bid/94691
CVE: CVE-2016-8410
Published: 2017-01-12
Description: An information disclosure vulnerability in the Qualcomm sound driver could enable a local malicious application to access data outside of its permission levels. This issue is rated as Moderate because it first requires compromising a privileged process. Product: Android. Versions: Kernel-3.10, Kernel-3.18. Android ID: A-31498403. References: QC-CR#987010.
CVSS Score: 4.7 (MEDIUM)
CWE: CWE-200
References: http://www.securityfocus.com/bid/94709; https://source.android.com/security/bulletin/2016-12-01.html; http://www.securityfocus.com/bid/94709
CVE: CVE-2016-8398
Published: 2017-01-12
Description: Unauthenticated messages processed by the UE. Certain NAS messages are processed when no EPS security context exists in the UE. Product: Android. Versions: Kernel 3.18. Android ID: A-31548486. References: QC-CR#877705.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-254
References: http://www.securityfocus.com/bid/95227; https://source.android.com/security/bulletin/2017-01-01.html; http://www.securityfocus.com/bid/95227
CVE: CVE-2016-8412
Published: 2017-01-12
Description: An elevation of privilege vulnerability in the Qualcomm camera could enable a local malicious application to execute arbitrary code within the context of the kernel. This issue is rated as High because it first requires compromising a privileged process. Product: Android. Versions: Kernel-3.10, Kernel-3.18. Android ID: A-31225246. References: QC-CR#1071891.
CVSS Score: 7.0 (HIGH)
CWE: CWE-284
References: http://www.securityfocus.com/bid/95238; https://source.android.com/security/bulletin/2017-01-01.html; http://www.securityfocus.com/bid/95238
CVE: CVE-2016-8415
Published: 2017-01-12
Description: An elevation of privilege vulnerability in the Qualcomm Wi-Fi driver could enable a local malicious application to execute arbitrary code within the context of the kernel. This issue is rated as High because it first requires compromising a privileged process. Product: Android. Versions: Kernel-3.10, Kernel-3.18. Android ID: A-31750554. References: QC-CR#1079596.
CVSS Score: 7.0 (HIGH)
CWE: CWE-284
References: http://www.securityfocus.com/bid/95260; https://source.android.com/security/bulletin/2017-01-01.html; http://www.securityfocus.com/bid/95260
CVE: CVE-2016-8422
Published: 2017-01-12
Description: An elevation of privilege vulnerability in the Qualcomm bootloader could enable a local malicious application to execute arbitrary code within the context of the kernel. This issue is rated as Critical due to the possibility of a local permanent device compromise, which may require reflashing the operating system to repair the device. Product: Android. Versions: N/A. Android ID: A-31471220. References: QC-CR#979426.
CVSS Score: 7.8 (HIGH)
CWE: CWE-264
References: http://www.securityfocus.com/bid/95241; https://source.android.com/security/bulletin/2017-01-01.html; http://www.securityfocus.com/bid/95241
CVE: CVE-2016-8423
Published: 2017-01-12
Description: An elevation of privilege vulnerability in the Qualcomm bootloader could enable a local malicious application to execute arbitrary code within the context of the kernel. This issue is rated as Critical due to the possibility of a local permanent device compromise, which may require reflashing the operating system to repair the device. Product: Android. Versions: N/A. Android ID: A-31399736. References: QC-CR#1000546.
CVSS Score: 7.8 (HIGH)
CWE: CWE-264
References: http://www.securityfocus.com/bid/95241; https://source.android.com/security/bulletin/2017-01-01.html; http://www.securityfocus.com/bid/95241
CVE: CVE-2016-8424
Published: 2017-01-12
Description: An elevation of privilege vulnerability in the NVIDIA GPU driver could enable a local malicious application to execute arbitrary code within the context of the kernel. This issue is rated as Critical due to the possibility of a local permanent device compromise, which may require reflashing the operating system to repair the device. Product: Android. Versions: Kernel-3.10. Android ID: A-31606947. References: N-CVE-2016-8424.
CVSS Score: 7.8 (HIGH)
CWE: CWE-264
References: http://nvidia.custhelp.com/app/answers/detail/a_id/4561; http://www.securityfocus.com/bid/95231; https://source.android.com/security/bulletin/2017-01-01.html
CVE: CVE-2016-8425
Published: 2017-01-12
Description: An elevation of privilege vulnerability in the NVIDIA GPU driver could enable a local malicious application to execute arbitrary code within the context of the kernel. This issue is rated as Critical due to the possibility of a local permanent device compromise, which may require reflashing the operating system to repair the device. Product: Android. Versions: Kernel-3.10. Android ID: A-31797770. References: N-CVE-2016-8425.
CVSS Score: 7.8 (HIGH)
CWE: CWE-264
References: http://nvidia.custhelp.com/app/answers/detail/a_id/4561; http://www.securityfocus.com/bid/95231; https://source.android.com/security/bulletin/2017-01-01.html
CVE: CVE-2016-8426
Published: 2017-01-12
Description: An elevation of privilege vulnerability in the NVIDIA GPU driver could enable a local malicious application to execute arbitrary code within the context of the kernel. This issue is rated as Critical due to the possibility of a local permanent device compromise, which may require reflashing the operating system to repair the device. Product: Android. Versions: Kernel-3.10. Android ID: A-31799206. References: N-CVE-2016-8426.
CVSS Score: 7.8 (HIGH)
CWE: CWE-264
References: http://nvidia.custhelp.com/app/answers/detail/a_id/4561; http://www.securityfocus.com/bid/95231; https://source.android.com/security/bulletin/2017-01-01.html
CVE: CVE-2016-8427
Published: 2017-01-12
Description: An elevation of privilege vulnerability in the NVIDIA GPU driver could enable a local malicious application to execute arbitrary code within the context of the kernel. This issue is rated as Critical due to the possibility of a local permanent device compromise, which may require reflashing the operating system to repair the device. Product: Android. Versions: Kernel-3.10. Android ID: A-31799885. References: N-CVE-2016-8427.
CVSS Score: 7.8 (HIGH)
CWE: CWE-264
References: http://nvidia.custhelp.com/app/answers/detail/a_id/4561; http://www.securityfocus.com/bid/95231; https://source.android.com/security/bulletin/2017-01-01.html
CVE: CVE-2016-8428
Published: 2017-01-12
Description: An elevation of privilege vulnerability in the NVIDIA GPU driver could enable a local malicious application to execute arbitrary code within the context of the kernel. This issue is rated as Critical due to the possibility of a local permanent device compromise, which may require reflashing the operating system to repair the device. Product: Android. Versions: Kernel-3.10. Android ID: A-31993456. References: N-CVE-2016-8428.
CVSS Score: 7.8 (HIGH)
CWE: CWE-264
References: http://nvidia.custhelp.com/app/answers/detail/a_id/4561; http://www.securityfocus.com/bid/95231; https://source.android.com/security/bulletin/2017-01-01.html
CVE: CVE-2016-8429
Published: 2017-01-12
Description: An elevation of privilege vulnerability in the NVIDIA GPU driver could enable a local malicious application to execute arbitrary code within the context of the kernel. This issue is rated as Critical due to the possibility of a local permanent device compromise, which may require reflashing the operating system to repair the device. Product: Android. Versions: Kernel-3.10. Android ID: A-32160775. References: N-CVE-2016-8429.
CVSS Score: 7.8 (HIGH)
CWE: CWE-264
References: http://nvidia.custhelp.com/app/answers/detail/a_id/4561; http://www.securityfocus.com/bid/95231; https://source.android.com/security/bulletin/2017-01-01.html
CVE: CVE-2016-8430
Published: 2017-01-12
Description: An elevation of privilege vulnerability in the NVIDIA GPU driver could enable a local malicious application to execute arbitrary code within the context of the kernel. This issue is rated as Critical due to the possibility of a local permanent device compromise, which may require reflashing the operating system to repair the device. Product: Android. Versions: Kernel-3.10. Android ID: A-32225180. References: N-CVE-2016-8430.
CVSS Score: 7.8 (HIGH)
CWE: CWE-264
References: http://nvidia.custhelp.com/app/answers/detail/a_id/4561; http://www.securityfocus.com/bid/95231; https://source.android.com/security/bulletin/2017-01-01.html
CVE: CVE-2016-8431
Published: 2017-01-12
Description: An elevation of privilege vulnerability in the NVIDIA GPU driver could enable a local malicious application to execute arbitrary code within the context of the kernel. This issue is rated as Critical due to the possibility of a local permanent device compromise, which may require reflashing the operating system to repair the device. Product: Android. Versions: Kernel-3.18. Android ID: A-32402179. References: N-CVE-2016-8431.
CVSS Score: 7.8 (HIGH)
CWE: CWE-264
References: http://www.securityfocus.com/bid/95236; https://source.android.com/security/bulletin/2017-01-01.html; http://www.securityfocus.com/bid/95236
CVE: CVE-2016-8432
Published: 2017-01-12
Description: An elevation of privilege vulnerability in the NVIDIA GPU driver could enable a local malicious application to execute arbitrary code within the context of the kernel. This issue is rated as Critical due to the possibility of a local permanent device compromise, which may require reflashing the operating system to repair the device. Product: Android. Versions: Kernel-3.18. Android ID: A-32447738. References: N-CVE-2016-8432.
CVSS Score: 7.8 (HIGH)
CWE: CWE-264
References: http://www.securityfocus.com/bid/95236; https://source.android.com/security/bulletin/2017-01-01.html; http://www.securityfocus.com/bid/95236
CVE: CVE-2016-8433
Published: 2017-01-12
Description: An elevation of privilege vulnerability in the MediaTek driver could enable a local malicious application to execute arbitrary code within the context of the kernel. This issue is rated as Critical due to the possibility of a local permanent device compromise, which may require reflashing the operating system to repair the device. Product: Android. Versions: N/A. Android ID: A-31750190. References: MT-ALPS02974192.
CVSS Score: 7.8 (HIGH)
CWE: CWE-264
References: http://www.securityfocus.com/bid/95253; https://source.android.com/security/bulletin/2017-01-01.html; http://www.securityfocus.com/bid/95253
CVE: CVE-2016-8434
Published: 2017-01-12
Description: An elevation of privilege vulnerability in the Qualcomm GPU driver could enable a local malicious application to execute arbitrary code within the context of the kernel. This issue is rated as Critical due to the possibility of a local permanent device compromise, which may require reflashing the operating system to repair the device. Product: Android. Versions: Kernel-3.10. Android ID: A-32125137. References: QC-CR#1081855.
CVSS Score: 7.0 (HIGH)
CWE: CWE-284
References: http://www.securityfocus.com/bid/95257; https://source.android.com/security/bulletin/2017-01-01.html; http://www.securityfocus.com/bid/95257