deardaniel/secdata-raw huggingface dataset:
CVE: CVE-2019-9325
Published: 2019-09-27
Description: In libvpx, there is a possible out of bounds read due to a missing bounds check. This could lead to remote information disclosure with no additional execution privileges needed. User interaction is needed for exploitation. Product: AndroidVersions: Android-10Android ID: A-112001302
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-125
References: http://lists.opensuse.org/opensuse-security-announce/2020-01/msg00049.html; http://www.openwall.com/lists/oss-security/2019/10/25/17; http://www.openwall.com/lists/oss-security/2019/10/27/1
CVE: CVE-2019-9326
Published: 2019-09-27
Description: In Bluetooth, there is a possible out of bounds read due to a missing bounds check. This could lead to remote information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation. Product: AndroidVersions: Android-10Android ID: A-111215173
CVSS Score: 7.5 (HIGH)
CWE: CWE-125
References: https://source.android.com/security/bulletin/android-10; https://source.android.com/security/bulletin/android-10
CVE: CVE-2019-9327
Published: 2019-09-27
Description: In Bluetooth, there is a possible out of bounds read due to a missing bounds check. This could lead to remote information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation. Product: AndroidVersions: Android-10Android ID: A-112050583
CVSS Score: 7.5 (HIGH)
CWE: CWE-125
References: https://source.android.com/security/bulletin/android-10; https://source.android.com/security/bulletin/android-10
CVE: CVE-2019-9328
Published: 2019-09-27
Description: In Bluetooth, there is a possible out of bounds read due to a missing bounds check. This could lead to remote information disclosure, with no additional privileges required. User interaction is not needed for exploitation. Product: AndroidVersions: Android-10Android ID: A-111895000
CVSS Score: 7.5 (HIGH)
CWE: CWE-125
References: https://source.android.com/security/bulletin/android-10; https://source.android.com/security/bulletin/android-10
CVE: CVE-2019-9329
Published: 2019-09-27
Description: In Bluetooth, there is a possible out of bounds read due to uninitialized data. This could lead to remote information disclosure, with no additional privileges required. User interaction is not needed for exploitation. Product: AndroidVersions: Android-10Android ID: A-112917952
CVSS Score: 7.5 (HIGH)
CWE: CWE-908
References: https://source.android.com/security/bulletin/android-10; https://source.android.com/security/bulletin/android-10
CVE: CVE-2019-9330
Published: 2019-09-27
Description: In Bluetooth, there is a possible out of bounds read due to a missing bounds check. This could lead to remote information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation. Product: AndroidVersions: Android-10Android ID: A-111214739
CVSS Score: 7.5 (HIGH)
CWE: CWE-125
References: https://source.android.com/security/bulletin/android-10; https://source.android.com/security/bulletin/android-10
CVE: CVE-2019-9331
Published: 2019-09-27
Description: In Bluetooth, there is a possible out of bounds read due to a missing bounds check. This could lead to remote information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation. Product: AndroidVersions: Android-10Android ID: A-112272279
CVSS Score: 7.5 (HIGH)
CWE: CWE-125
References: https://source.android.com/security/bulletin/android-10; https://source.android.com/security/bulletin/android-10
CVE: CVE-2019-9332
Published: 2019-09-27
Description: In Bluetooth, there is a possible out of bounds read due to a missing bounds check. This could lead to remote information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation. Product: AndroidVersions: Android-10Android ID: A-78286500
CVSS Score: 7.5 (HIGH)
CWE: CWE-125
References: https://source.android.com/security/bulletin/android-10; https://source.android.com/security/bulletin/android-10
CVE: CVE-2019-9333
Published: 2019-09-27
Description: In Bluetooth, there is a possible out of bounds read due to a missing bounds check. This could lead to remote information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation. Product: AndroidVersions: Android-10Android ID: A-109753657
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-125
References: https://source.android.com/security/bulletin/android-10; https://source.android.com/security/bulletin/android-10
CVE: CVE-2019-9334
Published: 2019-09-27
Description: In libhevc there is a possible information disclosure due to uninitialized data. This could lead to remote information disclosure with no additional execution privileges needed. User interaction is needed for exploitation. Product: AndroidVersions: Android-10Android ID: A-112859934
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-908
References: https://source.android.com/security/bulletin/android-10; https://source.android.com/security/bulletin/android-10
CVE: CVE-2019-9335
Published: 2019-09-27
Description: In libavc there is a possible information disclosure due to uninitialized data. This could lead to remote information disclosure with no additional execution privileges needed. User interaction is needed for exploitation. Product: AndroidVersions: Android-10Android ID: A-112328051
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-908
References: https://source.android.com/security/bulletin/android-10; https://source.android.com/security/bulletin/android-10
CVE: CVE-2019-9336
Published: 2019-09-27
Description: In libavc there is a possible information disclosure due to uninitialized data. This could lead to remote information disclosure with no additional execution privileges needed. User interaction is needed for exploitation. Product: AndroidVersions: Android-10Android ID: A-112326322
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-908
References: https://source.android.com/security/bulletin/android-10; https://source.android.com/security/bulletin/android-10
CVE: CVE-2019-9337
Published: 2019-09-27
Description: In libavc there is a possible information disclosure due to uninitialized data. This could lead to remote information disclosure with no additional execution privileges needed. User interaction is needed for exploitation. Product: AndroidVersions: Android-10Android ID: A-112204376
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-908
References: https://source.android.com/security/bulletin/android-10; https://source.android.com/security/bulletin/android-10
CVE: CVE-2019-9338
Published: 2019-09-27
Description: In libavc there is a possible information disclosure due to uninitialized data. This could lead to remote information disclosure with no additional execution privileges needed. User interaction is needed for exploitation. Product: AndroidVersions: Android-10Android ID: A-111762686
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-908
References: https://source.android.com/security/bulletin/android-10; https://source.android.com/security/bulletin/android-10
CVE: CVE-2019-9341
Published: 2019-09-27
Description: In Bluetooth, there is a possible out of bounds read due to a missing bounds check. This could lead to remote information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation. Product: AndroidVersions: Android-10Android ID: A-111214770
CVSS Score: 7.5 (HIGH)
CWE: CWE-125
References: https://source.android.com/security/bulletin/android-10; https://source.android.com/security/bulletin/android-10
CVE: CVE-2019-9342
Published: 2019-09-27
Description: In Bluetooth, there is a possible out of bounds read due to a missing bounds check. This could lead to remote information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation. Product: AndroidVersions: Android-10Android ID: A-111214470
CVSS Score: 7.5 (HIGH)
CWE: CWE-125
References: https://source.android.com/security/bulletin/android-10; https://source.android.com/security/bulletin/android-10
CVE: CVE-2019-9343
Published: 2019-09-27
Description: In Bluetooth, there is a possible out of bounds read due to a missing bounds check. This could lead to remote information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation. Product: AndroidVersions: Android-10Android ID: A-112050983
CVSS Score: 7.5 (HIGH)
CWE: CWE-125
References: https://source.android.com/security/bulletin/android-10; https://source.android.com/security/bulletin/android-10
CVE: CVE-2019-9344
Published: 2019-09-27
Description: In NFC server, there is a possible out of bounds read due to a missing bounds check. This could lead to local information disclosure with no additional execution privileges needed. User interaction is needed for exploitation. Product: AndroidVersions: Android-10Android ID: A-120845341
CVSS Score: 5.0 (MEDIUM)
CWE: CWE-125
References: https://source.android.com/security/bulletin/android-10; https://source.android.com/security/bulletin/android-10
CVE: CVE-2019-9346
Published: 2019-09-27
Description: In libstagefright, there is a possible out of bounds write due to a heap buffer overflow. This could lead to remote code execution with no additional execution privileges needed. User interaction is needed for exploitation. Product: AndroidVersions: Android-10Android ID: A-128433933
CVSS Score: 8.8 (HIGH)
CWE: CWE-787
References: https://source.android.com/security/bulletin/android-10; https://source.android.com/security/bulletin/android-10
CVE: CVE-2019-9347
Published: 2019-09-27
Description: In the m4v_h263 codec, there is a possible out of bounds read due to a use after free. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation. Product: AndroidVersions: Android-10Android ID: A-109891727
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-125, CWE-416
References: https://source.android.com/security/bulletin/android-10; https://source.android.com/security/bulletin/android-10
CVE: CVE-2019-9348
Published: 2019-09-27
Description: In libstagefright, there is a possible resource exhaustion due to improper input validation. This could lead to remote denial of service with no additional execution privileges needed. User interaction is needed for exploitation. Product: AndroidVersions: Android-10Android ID: A-128431761
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-20
References: https://source.android.com/security/bulletin/android-10; https://source.android.com/security/bulletin/android-10
CVE: CVE-2019-9349
Published: 2019-09-27
Description: In libstagefright, there is a possible resource exhaustion due to improper input validation. This could lead to remote denial of service with no additional execution privileges needed. User interaction is needed for exploitation. Product: AndroidVersions: Android-10Android ID: A-124330204
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-400
References: https://source.android.com/security/bulletin/android-10; https://source.android.com/security/bulletin/android-10
CVE: CVE-2019-9350
Published: 2019-09-27
Description: In Keymaster, there is a possible EoP due to a use after free. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation. Product: AndroidVersions: Android-10Android ID: A-129562815
CVSS Score: 7.8 (HIGH)
CWE: CWE-416
References: https://source.android.com/security/bulletin/android-10; https://source.android.com/security/bulletin/android-10
CVE: CVE-2019-9351
Published: 2019-09-27
Description: In SyncStatusObserver, there is a possible bypass for operating system protections that isolate user profiles from each other due to a missing permission check. This could lead to local limited information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation. Product: AndroidVersions: Android-10Android ID: A-128599864
CVSS Score: 3.3 (LOW)
CWE: CWE-862
References: https://source.android.com/security/bulletin/android-10; https://source.android.com/security/bulletin/android-10
CVE: CVE-2019-9352
Published: 2019-09-27
Description: In libstagefright, there is a possible resource exhaustion due to a missing bounds check. This could lead to remote denial of service with no additional execution privileges needed. User interaction is needed for exploitation. Product: AndroidVersions: Android-10Android ID: A-124253062
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-20
References: https://source.android.com/security/bulletin/android-10; https://source.android.com/security/bulletin/android-10
CVE: CVE-2019-9353
Published: 2019-09-27
Description: In Bluetooth, there is a possible out of bounds read due to a missing bounds check. This could lead to remote information disclosure with no additional execution privileges needed. User interaction is needed for exploitation. Product: AndroidVersions: Android-10Android ID: A-123024201
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-125
References: https://source.android.com/security/bulletin/android-10; https://source.android.com/security/bulletin/android-10
CVE: CVE-2019-9354
Published: 2019-09-27
Description: In NFC server, there's a possible out of bounds read due to a missing bounds check. This could lead to information disclosure with no additional execution privileges needed. User interaction is needed for exploitation. Product: AndroidVersions: Android-10Android ID: A-118148142
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-125
References: https://source.android.com/security/bulletin/android-10; https://source.android.com/security/bulletin/android-10
CVE: CVE-2019-9355
Published: 2019-09-27
Description: In Bluetooth, there is a possible out of bounds read due to a missing bounds check. This could lead to remote information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation. Product: AndroidVersions: Android-10Android ID: A-115903122
CVSS Score: 7.5 (HIGH)
CWE: CWE-125
References: https://source.android.com/security/bulletin/android-10; https://source.android.com/security/bulletin/android-10
CVE: CVE-2019-9356
Published: 2019-09-27
Description: In NFC server, there is a possible out of bounds read due to a missing bounds check. This could lead to local information disclosure with no additional execution privileges needed. User interaction is needed for exploitation. Product: AndroidVersions: Android-10Android ID: A-111699773
CVSS Score: 5.0 (MEDIUM)
CWE: CWE-125
References: https://source.android.com/security/bulletin/android-10; https://source.android.com/security/bulletin/android-10
CVE: CVE-2019-9357
Published: 2019-09-27
Description: In libAACdec, there is a possible out of bounds write due to an integer overflow. This could lead to remote code execution with no additional execution privileges needed. User interaction is needed for exploitation. Product: AndroidVersions: Android-10Android ID: A-112662995
CVSS Score: 8.8 (HIGH)
CWE: CWE-190, CWE-787
References: https://source.android.com/security/bulletin/android-10; https://source.android.com/security/bulletin/android-10
CVE: CVE-2019-9358
Published: 2019-09-27
Description: In NFC, there is a possible out of bounds write due to a missing bounds check. This could lead to a to local escalation of privilege with no additional execution privileges needed. User interaction is needed for exploitation. Product: AndroidVersions: Android-10Android ID: A-120156401
CVSS Score: 7.3 (HIGH)
CWE: CWE-787
References: https://source.android.com/security/bulletin/android-10; https://source.android.com/security/bulletin/android-10
CVE: CVE-2019-9359
Published: 2019-09-27
Description: In libavc there is a possible information disclosure due to uninitialized data. This could lead to remote information disclosure with no additional execution privileges needed. User interaction is needed for exploitation. Product: AndroidVersions: Android-10Android ID: A-111407302
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-908
References: https://source.android.com/security/bulletin/android-10; https://source.android.com/security/bulletin/android-10
CVE: CVE-2019-9360
Published: 2019-09-27
Description: In the TEE, there's a possible out of bounds read due to a missing bounds check. This could lead to local information disclosure with System execution privileges needed. User interaction is not needed for exploitation. Product: AndroidVersions: Android-10Android ID: A-120610663
CVSS Score: 4.4 (MEDIUM)
CWE: CWE-125
References: https://source.android.com/security/bulletin/android-10; https://source.android.com/security/bulletin/android-10
CVE: CVE-2019-9361
Published: 2019-09-27
Description: In libavc there is a possible information disclosure due to uninitialized data. This could lead to remote information disclosure with no additional execution privileges needed. User interaction is needed for exploitation. Product: AndroidVersions: Android-10Android ID: A-111762807
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-908
References: https://source.android.com/security/bulletin/android-10; https://source.android.com/security/bulletin/android-10
CVE: CVE-2019-9362
Published: 2019-09-27
Description: In libSACdec, there is a possible out of bounds read due to a missing bounds check. This could lead to remote information disclosure with no additional execution privileges needed. User interaction is needed for exploitation. Product: AndroidVersions: Android-10Android ID: A-120426980
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-125
References: https://source.android.com/security/bulletin/android-10; https://source.android.com/security/bulletin/android-10
CVE: CVE-2019-9363
Published: 2019-09-27
Description: In Bluetooth, there is a possible out of bounds write due to a missing bounds check. This could lead to remote code execution with no additional execution privileges needed. User interaction is needed for exploitation. Product: AndroidVersions: Android-10Android ID: A-123584306
CVSS Score: 8.8 (HIGH)
CWE: CWE-787
References: https://source.android.com/security/bulletin/android-10; https://source.android.com/security/bulletin/android-10
CVE: CVE-2019-9364
Published: 2019-09-27
Description: In AudioService, there is a possible trigger of background user audio due to a permissions bypass. This could lead to local information disclosure by playing the background user's audio with no additional execution privileges needed. User interaction is not needed for exploitation. Product: AndroidVersions: Android-10Android ID: A-73364631
CVSS Score: 3.3 (LOW)
CWE: CWE-863
References: https://source.android.com/security/bulletin/android-10; https://source.android.com/security/bulletin/android-10
CVE: CVE-2019-9365
Published: 2019-09-27
Description: In Bluetooth, there is a possible deserialization error due to missing string validation. This could lead to remote code execution with no additional execution privileges needed. User interaction is not needed for exploitation. Product: AndroidVersions: Android-10Android ID: A-109838537
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-502
References: https://source.android.com/security/bulletin/android-10; https://source.android.com/security/bulletin/android-10
CVE: CVE-2019-9366
Published: 2019-09-27
Description: In libSBRdec there is a possible out of bounds read due to a missing bounds check. This could lead to remote information disclosure with no additional execution privileges needed. User interaction is needed for exploitation. Product: AndroidVersions: Android-10Android ID: A-112052062
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-125
References: https://source.android.com/security/bulletin/android-10; https://source.android.com/security/bulletin/android-10
CVE: CVE-2019-9367
Published: 2019-09-27
Description: In Bluetooth, there is a possible out of bounds read due to a missing bounds check. This could lead to remote information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation. Product: AndroidVersions: Android-10Android ID: A-112106425
CVSS Score: 7.5 (HIGH)
CWE: CWE-125
References: https://source.android.com/security/bulletin/android-10; https://source.android.com/security/bulletin/android-10
CVE: CVE-2019-9368
Published: 2019-09-27
Description: In Bluetooth, there is a possible out of bounds read due to a missing bounds check. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation. Product: AndroidVersions: Android-10Android ID: A-79883568
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-125
References: https://source.android.com/security/bulletin/android-10; https://source.android.com/security/bulletin/android-10
CVE: CVE-2019-9369
Published: 2019-09-27
Description: In Bluetooth, there is a use of uninitialized variable. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation. Product: AndroidVersions: Android-10Android ID: A-79995407
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-908
References: https://source.android.com/security/bulletin/android-10; https://source.android.com/security/bulletin/android-10
CVE: CVE-2019-9370
Published: 2019-09-27
Description: In sonivox, there is a possible out of bounds read due to an incorrect bounds check. This could lead to remote information disclosure with no additional execution privileges needed. User interaction is needed for exploitation. Product: AndroidVersions: Android-10Android ID: A-133880046
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-125
References: https://source.android.com/security/bulletin/android-10; https://source.android.com/security/bulletin/android-10
CVE: CVE-2019-9371
Published: 2019-09-27
Description: In libvpx, there is a possible resource exhaustion due to improper input validation. This could lead to remote denial of service with no additional execution privileges needed. User interaction is needed for exploitation. Product: AndroidVersions: Android-10Android ID: A-132783254
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-20
References: http://lists.opensuse.org/opensuse-security-announce/2020-01/msg00049.html; http://www.openwall.com/lists/oss-security/2019/10/25/17; http://www.openwall.com/lists/oss-security/2019/10/27/1
CVE: CVE-2019-9372
Published: 2019-09-27
Description: In libskia, there is a possible crash due to a missing null check. This could lead to remote denial of service with no additional execution privileges needed. User interaction is needed for exploitation. Product: AndroidVersions: Android-10Android ID: A-132782448
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-252, CWE-476
References: https://source.android.com/security/bulletin/android-10; https://source.android.com/security/bulletin/android-10
CVE: CVE-2019-9373
Published: 2019-09-27
Description: In JobStore, there is a mismatched serialization/deserialization for the "battery-not-low" job attribute. This could lead to a local denial of service with no additional execution privileges needed. User interaction is not needed for exploitation. Product: AndroidVersions: Android-10Android ID: A-130173029
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-502
References: https://source.android.com/security/bulletin/android-10; https://source.android.com/security/bulletin/android-10
CVE: CVE-2019-9374
Published: 2019-09-27
Description: Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was withdrawn by its CNA. Notes: none
CWE: CWE-862
CVE: CVE-2019-9375
Published: 2019-09-27
Description: In hostapd, there is a possible out of bounds write due to a race condition. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Product: AndroidVersions: Android-10Android ID: A-129344244
CVSS Score: 6.4 (MEDIUM)
CWE: CWE-362, CWE-787
References: https://source.android.com/security/bulletin/android-10; https://source.android.com/security/bulletin/android-10