deardaniel/secdata-raw huggingface dataset:
CVE: CVE-2017-0547
Published: 2017-04-07
Description: An information disclosure vulnerability in libmedia in Mediaserver could enable a local malicious application to access data outside of its permission levels. This issue is rated as High because it is a general bypass for operating system protections that isolate application data from other applications. Product: Android. Versions: 4.4.4, 5.0.2, 5.1.1, 6.0, 6.0.1, 7.0, 7.1.1. Android ID: A-33861560.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-200
References: http://www.securityfocus.com/bid/97338; http://www.securitytracker.com/id/1038201; https://android.googlesource.com/platform/frameworks/av/+/9667e3eff2d34c3797c3b529370de47b2c1f1bf6
CVE: CVE-2017-0548
Published: 2017-04-07
Description: A remote denial of service vulnerability in libskia could enable an attacker to use a specially crafted file to cause a device hang or reboot. This issue is rated as High severity due to the possibility of remote denial of service. Product: Android. Versions: 7.0, 7.1.1. Android ID: A-33251605.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-119
References: http://www.securityfocus.com/bid/97398; http://www.securitytracker.com/id/1038201; https://source.android.com/security/bulletin/2017-04-01
CVE: CVE-2017-0549
Published: 2017-04-07
Description: A remote denial of service vulnerability in libavc in Mediaserver could enable an attacker to use a specially crafted file to cause a device hang or reboot. This issue is rated as High severity due to the possibility of remote denial of service. Product: Android. Versions: 6.0, 6.0.1, 7.0, 7.1.1. Android ID: A-33818508.
CVSS Score: 5.5 (MEDIUM)
References: http://www.securityfocus.com/bid/97336; http://www.securitytracker.com/id/1038201; https://android.googlesource.com/platform/external/libavc/+/37345554fea84afd446d6d8fbb87feea5a0dde3f
CVE: CVE-2017-0550
Published: 2017-04-07
Description: A remote denial of service vulnerability in libavc in Mediaserver could enable an attacker to use a specially crafted file to cause a device hang or reboot. This issue is rated as High severity due to the possibility of remote denial of service. Product: Android. Versions: 6.0, 6.0.1, 7.0, 7.1.1. Android ID: A-33933140.
CVSS Score: 5.5 (MEDIUM)
References: http://www.securityfocus.com/bid/97336; http://www.securitytracker.com/id/1038201; https://android.googlesource.com/platform/external/libavc/+/7950bf47b6944546a0aff11a7184947de9591b51
CVE: CVE-2017-0551
Published: 2017-04-07
Description: A remote denial of service vulnerability in libavc in Mediaserver could enable an attacker to use a specially crafted file to cause a device hang or reboot. This issue is rated as High severity due to the possibility of remote denial of service. Product: Android. Versions: 6.0, 6.0.1, 7.0, 7.1.1. Android ID: A-34097231.
CVSS Score: 5.5 (MEDIUM)
References: http://www.securityfocus.com/bid/97336; http://www.securitytracker.com/id/1038201; https://android.googlesource.com/platform/external/libavc/+/494561291a503840f385fbcd11d9bc5f4dc502b8
CVE: CVE-2017-0552
Published: 2017-04-07
Description: A remote denial of service vulnerability in libavc in Mediaserver could enable an attacker to use a specially crafted file to cause a device hang or reboot. This issue is rated as High severity due to the possibility of remote denial of service. Product: Android. Versions: 6.0, 6.0.1, 7.0, 7.1.1. Android ID: A-34097915.
CVSS Score: 5.5 (MEDIUM)
References: http://www.securityfocus.com/bid/97336; http://www.securitytracker.com/id/1038201; https://android.googlesource.com/platform/external/libavc/+/9a00f562a612d56e7b2b989d168647db900ba6cf
CVE: CVE-2017-0553
Published: 2017-04-07
Description: An elevation of privilege vulnerability in libnl could enable a local malicious application to execute arbitrary code within the context of the Wi-Fi service. This issue is rated as Moderate because it first requires compromising a privileged process and is mitigated by current platform configurations. Product: Android. Versions: 5.0.2, 5.1.1, 6.0, 6.0.1, 7.0, 7.1.1. Android ID: A-32342065. NOTE: this issue also exists in the upstream libnl before 3.3.0 library.
CVSS Score: 7.0 (HIGH)
CWE: CWE-190
References: http://git.infradead.org/users/tgr/libnl.git/commit/3e18948f17148e6a3c4255bdeaaf01ef6081ceeb; http://lists.infradead.org/pipermail/libnl/2017-May/002313.html; http://www.securityfocus.com/bid/97340
CVE: CVE-2017-0554
Published: 2017-04-07
Description: An elevation of privilege vulnerability in the Telephony component could enable a local malicious application to access capabilities outside of its permission levels. This issue is rated as Moderate because it could be used to gain access to elevated capabilities, which are not normally accessible to a third-party application. Product: Android. Versions: 4.4.4, 5.0.2, 5.1.1, 6.0, 6.0.1, 7.0, 7.1.1. Android ID: A-33815946.
CVSS Score: 7.8 (HIGH)
CWE: CWE-862
References: http://www.securityfocus.com/bid/97343; http://www.securitytracker.com/id/1038201; https://source.android.com/security/bulletin/2017-04-01
CVE: CVE-2017-0555
Published: 2017-04-07
Description: An information disclosure vulnerability in libavc in Mediaserver could enable a local malicious application to access data outside of its permission levels. This issue is rated as Moderate because it could be used to access data without permission. Product: Android. Versions: 6.0, 6.0.1, 7.0, 7.1.1. Android ID: A-33551775.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-200
References: http://www.securityfocus.com/bid/97332; http://www.securitytracker.com/id/1038201; https://android.googlesource.com/platform/external/libavc/+/0b23c81c3dd9ec38f7e6806a3955fed1925541a0
CVE: CVE-2017-0556
Published: 2017-04-07
Description: An information disclosure vulnerability in libmpeg2 in Mediaserver could enable a local malicious application to access data outside of its permission levels. This issue is rated as Moderate because it could be used to access data without permission. Product: Android. Versions: 6.0, 6.0.1, 7.0, 7.1.1. Android ID: A-34093952.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-200
References: http://www.securityfocus.com/bid/97332; http://www.securitytracker.com/id/1038201; https://android.googlesource.com/platform/external/libmpeg2/+/f301cff2c1ddd880d9a2c77b22602a137519867b
CVE: CVE-2017-0557
Published: 2017-04-07
Description: An information disclosure vulnerability in libmpeg2 in Mediaserver could enable a local malicious application to access data outside of its permission levels. This issue is rated as Moderate because it could be used to access data without permission. Product: Android. Versions: 6.0, 6.0.1, 7.0, 7.1.1. Android ID: A-34093073.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-200
References: http://www.securityfocus.com/bid/97332; http://www.securitytracker.com/id/1038201; https://android.googlesource.com/platform/external/libmpeg2/+/227c1f829127405e21dab[PII_REDACTED]c652ef71e
CVE: CVE-2017-0558
Published: 2017-04-07
Description: An information disclosure vulnerability in Mediaserver could enable a local malicious application to access data outside of its permission levels. This issue is rated as Moderate because it could be used to access data without permission. Product: Android. Versions: 4.4.4, 5.0.2, 5.1.1, 6.0, 6.0.1, 7.0, 7.1.1. Android ID: A-34056274.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-200
References: http://www.securityfocus.com/bid/97332; http://www.securitytracker.com/id/1038201; https://android.googlesource.com/platform/frameworks/av/+/50358a80b1724f6cf1bcdf003e1abf9cc141b122
CVE: CVE-2017-0559
Published: 2017-04-07
Description: An information disclosure vulnerability in libskia could enable a local malicious application to access data outside of its permission levels. This issue is rated as Moderate because it could be used to access data without permission. Product: Android. Versions: 4.4.4, 5.0.2, 5.1.1, 6.0, 6.0.1, 7.0, 7.1.1. Android ID: A-33897722.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-200
References: http://www.securityfocus.com/bid/97352; http://www.securitytracker.com/id/1038201; https://source.android.com/security/bulletin/2017-04-01
CVE: CVE-2017-0560
Published: 2017-04-07
Description: An information disclosure vulnerability in the factory reset process could enable a local malicious attacker to access data from the previous owner. This issue is rated as Moderate due to the possibility of bypassing device protection. Product: Android. Versions: 4.4.4, 5.0.2, 5.1.1, 6.0, 6.0.1, 7.0, 7.1.1. Android ID: A-30681079.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-200
References: http://www.securityfocus.com/bid/97360; http://www.securitytracker.com/id/1038201; https://source.android.com/security/bulletin/2017-04-01
CVE: CVE-2017-0561
Published: 2017-04-07
Description: A remote code execution vulnerability in the Broadcom Wi-Fi firmware could enable a remote attacker to execute arbitrary code within the context of the Wi-Fi SoC. This issue is rated as Critical due to the possibility of remote code execution in the context of the Wi-Fi SoC. Product: Android. Versions: Kernel-3.10, Kernel-3.18. Android ID: A-34199105. References: B-RB#110814.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-787
References: http://www.securityfocus.com/bid/97367; http://www.securitytracker.com/id/1038201; https://lists.debian.org/debian-lts-announce/2018/11/msg00015.html
CVE: CVE-2017-0562
Published: 2017-04-07
Description: An elevation of privilege vulnerability in the MediaTek touchscreen driver could enable a local malicious application to execute arbitrary code within the context of the kernel. This issue is rated as Critical due to the possibility of a local permanent device compromise, which may require reflashing the operating system to repair the device. Product: Android. Versions: N/A. Android ID: A-30202425. References: M-ALPS02898189.
CVSS Score: 7.8 (HIGH)
References: http://www.securityfocus.com/bid/97345; http://www.securitytracker.com/id/1038201; https://source.android.com/security/bulletin/2017-04-01
CVE: CVE-2017-0563
Published: 2017-04-07
Description: An elevation of privilege vulnerability in the HTC touchscreen driver could enable a local malicious application to execute arbitrary code within the context of the kernel. This issue is rated as Critical due to the possibility of a local permanent device compromise, which may require reflashing the operating system to repair the device. Product: Android. Versions: Kernel-3.10. Android ID: A-32089409.
CVSS Score: 7.8 (HIGH)
CWE: CWE-345
References: http://seclists.org/fulldisclosure/2017/May/19; http://www.securityfocus.com/bid/97342; http://www.securitytracker.com/id/1038201
CVE: CVE-2017-0564
Published: 2017-04-07
Description: An elevation of privilege vulnerability in the kernel ION subsystem could enable a local malicious application to execute arbitrary code within the context of the kernel. This issue is rated as Critical due to the possibility of a local permanent device compromise, which may require reflashing the operating system to repair the device. Product: Android. Versions: Kernel-3.10, Kernel-3.18. Android ID: A-34276203.
CVSS Score: 7.8 (HIGH)
References: http://www.securityfocus.com/bid/97344; http://www.securitytracker.com/id/1038201; https://source.android.com/security/bulletin/2017-04-01
CVE: CVE-2017-0565
Published: 2017-04-07
Description: An elevation of privilege vulnerability in the MediaTek thermal driver could enable a local malicious application to execute arbitrary code within the context of the kernel. This issue is rated as High because it first requires compromising a privileged process. Product: Android. Versions: N/A. Android ID: A-28175904. References: M-ALPS02696516.
CVSS Score: 7.0 (HIGH)
References: http://www.securityfocus.com/bid/97349; http://www.securitytracker.com/id/1038201; https://source.android.com/security/bulletin/2017-04-01
CVE: CVE-2017-0566
Published: 2017-04-07
Description: An elevation of privilege vulnerability in the MediaTek camera driver could enable a local malicious application to execute arbitrary code within the context of the kernel. This issue is rated as High because it first requires compromising a privileged process. Product: Android. Versions: N/A. Android ID: A-28470975. References: M-ALPS02696367.
CVSS Score: 7.0 (HIGH)
References: http://www.securityfocus.com/bid/97351; http://www.securitytracker.com/id/1038201; https://source.android.com/security/bulletin/2017-04-01
CVE: CVE-2017-0567
Published: 2017-04-07
Description: An elevation of privilege vulnerability in the Broadcom Wi-Fi driver could enable a local malicious application to execute arbitrary code within the context of the kernel. This issue is rated as High because it first requires compromising a privileged process. Product: Android. Versions: Kernel-3.10, Kernel-3.18. Android ID: A-32125310. References: B-RB#112575.
CVSS Score: 7.0 (HIGH)
References: http://www.securityfocus.com/bid/97331; http://www.securitytracker.com/id/1038201; https://source.android.com/security/bulletin/2017-04-01
CVE: CVE-2017-0568
Published: 2017-04-07
Description: An elevation of privilege vulnerability in the Broadcom Wi-Fi driver could enable a local malicious application to execute arbitrary code within the context of the kernel. This issue is rated as High because it first requires compromising a privileged process. Product: Android. Versions: Kernel-3.10, Kernel-3.18. Android ID: A-34197514. References: B-RB#112600.
CVSS Score: 7.0 (HIGH)
References: http://www.securityfocus.com/bid/97331; http://www.securitytracker.com/id/1038201; https://source.android.com/security/bulletin/2017-04-01
CVE: CVE-2017-0569
Published: 2017-04-07
Description: An elevation of privilege vulnerability in the Broadcom Wi-Fi driver could enable a local malicious application to execute arbitrary code within the context of the kernel. This issue is rated as High because it first requires compromising a privileged process. Product: Android. Versions: Kernel-3.10, Kernel-3.18. Android ID: A-34198729. References: B-RB#110666.
CVSS Score: 7.0 (HIGH)
CWE: CWE-131
References: http://www.securityfocus.com/bid/97331; http://www.securitytracker.com/id/1038201; https://source.android.com/security/bulletin/2017-04-01
CVE: CVE-2017-0570
Published: 2017-04-07
Description: An elevation of privilege vulnerability in the Broadcom Wi-Fi driver could enable a local malicious application to execute arbitrary code within the context of the kernel. This issue is rated as High because it first requires compromising a privileged process. Product: Android. Versions: Kernel-3.10, Kernel-3.18. Android ID: A-34199963. References: B-RB#110688.
CVSS Score: 7.0 (HIGH)
References: http://www.securityfocus.com/bid/97331; http://www.securitytracker.com/id/1038201; https://source.android.com/security/bulletin/2017-04-01
CVE: CVE-2017-0571
Published: 2017-04-07
Description: An elevation of privilege vulnerability in the Broadcom Wi-Fi driver could enable a local malicious application to execute arbitrary code within the context of the kernel. This issue is rated as High because it first requires compromising a privileged process. Product: Android. Versions: Kernel-3.10, Kernel-3.18. Android ID: A-34203305. References: B-RB#111541.
CVSS Score: 7.0 (HIGH)
References: http://www.securityfocus.com/bid/97331; http://www.securitytracker.com/id/1038201; https://source.android.com/security/bulletin/2017-04-01
CVE: CVE-2017-0572
Published: 2017-04-07
Description: An elevation of privilege vulnerability in the Broadcom Wi-Fi driver could enable a local malicious application to execute arbitrary code within the context of the kernel. This issue is rated as High because it first requires compromising a privileged process. Product: Android. Versions: Kernel-3.10. Android ID: A-34198931. References: B-RB#112597.
CVSS Score: 7.0 (HIGH)
References: http://www.securityfocus.com/bid/97331; http://www.securitytracker.com/id/1038201; https://source.android.com/security/bulletin/2017-04-01
CVE: CVE-2017-0573
Published: 2017-04-07
Description: An elevation of privilege vulnerability in the Broadcom Wi-Fi driver could enable a local malicious application to execute arbitrary code within the context of the kernel. This issue is rated as High because it first requires compromising a privileged process. Product: Android. Versions: Kernel-3.10, Kernel-3.18. Android ID: A-34469904. References: B-RB#91539.
CVSS Score: 7.0 (HIGH)
References: http://www.securityfocus.com/bid/97331; http://www.securitytracker.com/id/1038201; https://source.android.com/security/bulletin/2017-04-01
CVE: CVE-2017-0574
Published: 2017-04-07
Description: An elevation of privilege vulnerability in the Broadcom Wi-Fi driver could enable a local malicious application to execute arbitrary code within the context of the kernel. This issue is rated as High because it first requires compromising a privileged process. Product: Android. Versions: Kernel-3.10, Kernel-3.18. Android ID: A-34624457. References: B-RB#113189.
CVSS Score: 7.0 (HIGH)
References: http://www.securityfocus.com/bid/97331; http://www.securitytracker.com/id/1038201; https://source.android.com/security/bulletin/2017-04-01
CVE: CVE-2017-0575
Published: 2017-04-07
Description: An elevation of privilege vulnerability in the Qualcomm Wi-Fi driver could enable a local malicious application to execute arbitrary code within the context of the kernel. This issue is rated as High because it first requires compromising a privileged process. Product: Android. Versions: Kernel-3.10, Kernel-3.18. Android ID: A-32658595. References: QC-CR#1103099.
CVSS Score: 7.0 (HIGH)
References: http://www.securityfocus.com/bid/97403; http://www.securitytracker.com/id/1038201; https://source.android.com/security/bulletin/2017-04-01
CVE: CVE-2017-0576
Published: 2017-04-07
Description: An elevation of privilege vulnerability in the Qualcomm crypto engine driver could enable a local malicious application to execute arbitrary code within the context of the kernel. This issue is rated as High because it first requires compromising a privileged process. Product: Android. Versions: Kernel-3.10, Kernel-3.18. Android ID: A-33544431. References: QC-CR#1103089.
CVSS Score: 7.0 (HIGH)
CWE: CWE-190
References: http://www.securityfocus.com/bid/97395; http://www.securitytracker.com/id/1038201; https://github.com/derrekr/android_security/commit/0dd1a733e60cf5239c0a185d4219ba2ef1118a8b
CVE: CVE-2017-0577
Published: 2017-04-07
Description: An elevation of privilege vulnerability in the HTC touchscreen driver could enable a local malicious application to execute arbitrary code within the context of the kernel. This issue is rated as High because it first requires compromising a privileged process. Product: Android. Versions: Kernel-3.18. Android ID: A-33842951.
CVSS Score: 7.0 (HIGH)
References: http://www.securityfocus.com/bid/97348; http://www.securitytracker.com/id/1038201; https://source.android.com/security/bulletin/2017-04-01
CVE: CVE-2017-0578
Published: 2017-04-07
Description: An elevation of privilege vulnerability in the DTS sound driver could enable a local malicious application to execute arbitrary code within the context of the kernel. This issue is rated as High because it first requires compromising a privileged process. Product: Android. Versions: N/A. Android ID: A-33964406.
CVSS Score: 7.0 (HIGH)
References: http://www.securityfocus.com/bid/97358; http://www.securitytracker.com/id/1038201; https://source.android.com/security/bulletin/2017-04-01
CVE: CVE-2017-0579
Published: 2017-04-07
Description: An elevation of privilege vulnerability in the Qualcomm video driver could enable a local malicious application to execute arbitrary code within the context of the kernel. This issue is rated as High because it first requires compromising a privileged process. Product: Android. Versions: Kernel-3.10, Kernel-3.18. Android ID: A-34125463. References: QC-CR#1115406.
CVSS Score: 7.0 (HIGH)
References: http://www.securityfocus.com/bid/97339; http://www.securitytracker.com/id/1038201; https://source.android.com/security/bulletin/2017-04-01
CVE: CVE-2017-0580
Published: 2017-04-07
Description: An elevation of privilege vulnerability in the Synaptics Touchscreen driver could enable a local malicious application to execute arbitrary code within the context of the kernel. This issue is rated as High because it first requires compromising a privileged process. Product: Android. Versions: Kernel-3.18. Android ID: A-34325986.
CVSS Score: 7.0 (HIGH)
References: http://www.securityfocus.com/bid/97335; http://www.securitytracker.com/id/1038201; https://source.android.com/security/bulletin/2017-04-01
CVE: CVE-2017-0581
Published: 2017-04-07
Description: An elevation of privilege vulnerability in the Synaptics Touchscreen driver could enable a local malicious application to execute arbitrary code within the context of the kernel. This issue is rated as High because it first requires compromising a privileged process. Product: Android. Versions: Kernel-3.18. Android ID: A-34614485.
CVSS Score: 7.0 (HIGH)
References: http://www.securityfocus.com/bid/97335; http://www.securitytracker.com/id/1038201; https://source.android.com/security/bulletin/2017-04-01
CVE: CVE-2017-0582
Published: 2017-04-07
Description: An elevation of privilege vulnerability in the HTC OEM fastboot command could enable a local malicious application to execute arbitrary code within the context of the sensor hub. This issue is rated as Moderate because it first requires exploitation of separate vulnerabilities. Product: Android. Versions: Kernel-3.10. Android ID: A-33178836.
CVSS Score: 7.0 (HIGH)
References: http://www.securityfocus.com/bid/97356; http://www.securitytracker.com/id/1038201; https://source.android.com/security/bulletin/2017-04-01
CVE: CVE-2017-0583
Published: 2017-04-07
Description: An elevation of privilege vulnerability in the Qualcomm CP access driver could enable a local malicious application to execute arbitrary code within the context of the kernel. This issue is rated as Moderate because it first requires compromising a privileged process and because of vulnerability specific details which limit the impact of the issue. Product: Android. Versions: Kernel-3.10, Kernel-3.18. Android ID: A-32068683. References: QC-CR#1103788.
CVSS Score: 7.0 (HIGH)
References: http://www.securityfocus.com/bid/97368; http://www.securitytracker.com/id/1038201; https://source.android.com/security/bulletin/2017-04-01
CVE: CVE-2017-0584
Published: 2017-04-07
Description: An information disclosure vulnerability in the Qualcomm Wi-Fi driver could enable a local malicious application to access data outside of its permission levels. This issue is rated as Moderate because it first requires compromising a privileged process. Product: Android. Versions: Kernel-3.10, Kernel-3.18. Android ID: A-32074353. References: QC-CR#1104731.
CVSS Score: 4.7 (MEDIUM)
CWE: CWE-200
References: http://www.securityfocus.com/bid/97363; http://www.securitytracker.com/id/1038201; https://source.android.com/security/bulletin/2017-04-01
CVE: CVE-2017-0585
Published: 2017-04-07
Description: An information disclosure vulnerability in the Broadcom Wi-Fi driver could enable a local malicious application to access data outside of its permission levels. This issue is rated as Moderate because it first requires compromising a privileged process. Product: Android. Versions: Kernel-3.10, Kernel-3.18. Android ID: A-32475556. References: B-RB#112953.
CVSS Score: 4.7 (MEDIUM)
CWE: CWE-200
References: http://www.securityfocus.com/bid/97366; http://www.securitytracker.com/id/1038201; https://source.android.com/security/bulletin/2017-04-01
CVE: CVE-2017-0586
Published: 2017-04-07
Description: An information disclosure vulnerability in the Qualcomm sound driver could enable a local malicious application to access data outside of its permission levels. This issue is rated as Moderate because it first requires compromising a privileged process. Product: Android. Versions: Kernel-3.10, Kernel-3.18. Android ID: A-33649808. References: QC-CR#1097569.
CVSS Score: 4.7 (MEDIUM)
CWE: CWE-200
References: http://www.securityfocus.com/bid/97357; http://www.securitytracker.com/id/1038201; https://source.android.com/security/bulletin/2017-04-01