rainbutterfly/cve_corpus huggingface dataset:
CVE-2018-9336 
openvpnserv.exe (aka the interactive service helper) in OpenVPN 2.4.x before 2.4.6 allows a local attacker to cause a double-free of memory by sending a malformed request to the interactive service. This could cause a denial-of-service through memory corruption or possibly have unspecified other impact including privilege escalation.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-05-01T18:00:00.000Z
CVE-2018-9337 
The PAN-OS web interface administration page in PAN-OS 6.1.20 and earlier, PAN-OS 7.1.17 and earlier, PAN-OS 8.0.10 and earlier, and PAN-OS 8.1.1 and earlier may allow an attacker to inject arbitrary JavaScript or HTML.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-07-03T21:00:00.000Z
CVE-2018-9338 
In ResStringPool::setTo of ResourceTypes.cpp, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.
Affected products: vendor: Google
product: Android
default_status: unaffected
Published: 2024-11-19T18:11:08.553Z
CVE-2018-9339 
In writeTypedArrayList and readTypedArrayList of Parcel.java, there is a possible escalation of privilege due to type confusion. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.
Affected products: vendor: Google
product: Android
default_status: unaffected
Published: 2024-11-19T18:45:21.601Z
CVE-2018-9340 
In ResStringPool::setTo of ResourceTypes.cpp, it's possible for an attacker to control the value of mStringPoolSize to be out of bounds, causing information disclosure.
Affected products: vendor: Google
product: Android
default_status: unaffected
Published: 2024-11-19T18:48:52.988Z
CVE-2018-9341 
In impeg2d_mc_fullx_fully of impeg2d_mc.c there is a possible out of bound write due to missing bounds check. This could lead to remote arbitrary code execution with no additional execution privileges needed. User interaction is needed for exploitation.
Affected products: vendor: Google
product: Android
default_status: unaffected
Published: 2024-11-19T18:51:40.920Z
CVE-2018-9344 
In several functions of DescramblerImpl.cpp, there is a possible use after free due to improper locking. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.
Affected products: vendor: Google
product: Android
default_status: unaffected
Published: 2024-11-19T18:59:40.177Z
CVE-2018-9345 
In BnAudioPolicyService::onTransact of AudioPolicyService.cpp, there is a possible information disclosure due to uninitialized data. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation.
Affected products: vendor: Google
product: Android
default_status: unaffected
Published: 2024-11-19T19:01:33.773Z
CVE-2018-9346 
In BnAudioPolicyService::onTransact of AudioPolicyService.cpp, there is a possible information disclosure due to uninitialized data. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation.
Affected products: vendor: Google
product: Android
default_status: unaffected
Published: 2024-11-19T19:03:45.821Z
CVE-2018-9347 
In function SMF_ParseMetaEvent of file eas_smf.c there is incorrect input validation causing an infinite loop. This could lead to a remote temporary DoS with no additional execution privileges needed. User interaction is needed for exploitation. Product: Android. Versions: Android-7.0 Android-7.1.1 Android-7.1.2 Android-8.0 Android-8.1 Android-9. Android ID: A-68664359
Problem types: description: Denial of service
Affected products: vendor: Google Inc.
product: Android
Published: 2018-11-14T18:00:00.000Z
CVE-2018-9348 
In SMF_ParseMetaEvent of eas_smf.c, there is a possible integer overflow. This could lead to remote denial of service due to resource exhaustion with no additional execution privileges needed. User interaction is needed for exploitation.
Affected products: vendor: Google
product: Android
default_status: unaffected
Published: 2024-11-19T19:08:21.744Z
CVE-2018-9349 
In mv_err_cost of mcomp.c there is a possible out of bounds read due to missing bounds check. This could lead to denial of service with no additional execution privileges needed. User interaction is needed for exploitation.
Affected products: vendor: Google
product: Android
default_status: unaffected
Published: 2024-11-27T21:45:18.436Z
CVE-2018-9350 
In ih264d_assign_pic_num of ih264d_utils.c there is a possible out of bound read due to missing bounds check. This could lead to a denial of service with no additional execution privileges needed. User interaction is needed for exploitation.
Affected products: vendor: Google
product: Android
default_status: unaffected
Published: 2024-11-27T21:52:57.651Z
CVE-2018-9351 
In ih264e_fmt_conv_420p_to_420sp of ih264e_fmt_conv.c there is a possible out of bound read due to missing bounds check. This could lead to remote denial of service with no additional execution privileges needed. User interaction is needed for exploitation.
Affected products: vendor: Google
product: Android
default_status: unaffected
Published: 2024-11-27T22:05:01.280Z
CVE-2018-9352 
In ihevcd_allocate_dynamic_bufs of ihevcd_api.c there is a possible resource exhaustion due to integer overflow. This could lead to remote denial of service with no additional execution privileges needed. User interaction is needed for exploitation.
Affected products: vendor: Google
product: Android
default_status: unaffected
Published: 2024-11-27T22:31:43.655Z
CVE-2018-9353 
In ihevcd_parse_slice_data of ihevcd_parse_slice.c there is a possible heap buffer out of bound read due to a missing bounds check. This could lead to remote denial of service with no additional execution privileges needed. User interaction is needed for exploitation.
Affected products: vendor: Google
product: Android
default_status: unaffected
Published: 2024-11-27T22:34:57.383Z
CVE-2018-9354 
In VideoFrameScheduler.cpp of VideoFrameScheduler::PLL::fit, there is a possible remote denial of service due to divide by 0. This could lead to remote denial of service with no additional execution privileges needed. User interaction is needed for exploitation.
Affected products: vendor: Google
product: Android
default_status: unaffected
Published: 2024-11-27T22:37:57.293Z
CVE-2018-9355 
In bta_dm_sdp_result of bta_dm_act.cc, there is a possible out of bounds stack write due to a missing bounds check. This could lead to remote code execution with no additional execution privileges needed. User interaction is not needed for exploitation. Product: Android Versions: Android-6.0 Android-6.0.1 Android-7.0 Android-7.1.1 Android-7.1.2 Android-8.0 Android-8.1 Android ID: A-74016921.
Problem types: description: Remote code execution
Affected products: vendor: Google Inc.
product: Android
Published: 2018-11-06T17:00:00.000Z
CVE-2018-9356 
In bnep_data_ind of bnep_main.c, there is a possible remote code execution due to a double free. This could lead to remote code execution with no additional execution privileges needed. User interaction is not needed for exploitation. Product: Android Versions: Android-6.0 Android-6.0.1 Android-7.0 Android-7.1.1 Android-7.1.2 Android-8.0 Android-8.1 Android ID: A-74950468.
Problem types: description: Remote code execution
Affected products: vendor: Google Inc.
product: Android
Published: 2018-11-06T17:00:00.000Z
CVE-2018-9357 
In BNEP_Write of bnep_api.cc, there is a possible out of bounds write due to an incorrect bounds check. This could lead to local escalation of privilege with User execution privileges needed. User interaction is not needed for exploitation. Product: Android Versions: Android-6.0 Android-6.0.1 Android-7.0 Android-7.1.1 Android-7.1.2 Android-8.0 Android-8.1 Android ID: A-74947856.
Problem types: description: Elevation of privilege
Affected products: vendor: Google Inc.
product: Android
Published: 2018-11-06T17:00:00.000Z
CVE-2018-9358 
In gatts_process_attribute_req of gatt_sc.cc, there is a possible read of uninitialized data due to a missing bounds check. This could lead to remote information disclosure in the Bluetooth process with no additional execution privileges needed. User interaction is not needed for exploitation. Product: Android Versions: Android-6.0 Android-6.0.1 Android-7.0 Android-7.1.1 Android-7.1.2 Android-8.0 Android-8.1 Android ID: A-73172115.
Problem types: description: Information disclosure
Affected products: vendor: Google Inc.
product: Android
Published: 2018-11-06T17:00:00.000Z
CVE-2018-9359 
In process_l2cap_cmd of l2c_main.cc, there is a possible out of bounds read due to a missing bounds check. This could lead to remote information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation. Product: Android Versions: Android-6.0 Android-6.0.1 Android-7.0 Android-7.1.1 Android-7.1.2 Android-8.0 Android-8.1 Android ID: A-74196706.
Problem types: description: Information disclosure
Affected products: vendor: Google Inc.
product: Android
Published: 2018-11-06T17:00:00.000Z
CVE-2018-9360 
In process_l2cap_cmd of l2c_main.cc, there is a possible out of bounds read due to a missing bounds check. This could lead to remote information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation. Product: Android Versions: Android-6.0 Android-6.0.1 Android-7.0 Android-7.1.1 Android-7.1.2 Android-8.0 Android-8.1 Android ID: A-74201143.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-11-06T17:00:00.000Z
CVE-2018-9361 
In process_l2cap_cmd of l2c_main.cc, there is a possible out of bounds read due to a missing bounds check. This could lead to remote information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation. Product: Android Versions: Android-6.0 Android-6.0.1 Android-7.0 Android-7.1.1 Android-7.1.2 Android-8.0 Android-8.1 Android ID: A-74202041.
Problem types: description: Information disclosure
Affected products: vendor: Google Inc.
product: Android
Published: 2018-11-06T17:00:00.000Z
CVE-2018-9362 
In processMessagePart of InboundSmsHandler.java, there is a possible remote denial of service due to improper input validation. This could lead to remote denial of service with no additional execution privileges needed. User interaction is not needed for exploitation. Product: Android Versions: Android-6.0 Android-6.0.1 Android-7.0 Android-7.1.1 Android-7.1.2 Android-8.0 Android-8.1 Android ID: A-72298611.
Problem types: description: Denial of service
Affected products: vendor: Google Inc.
product: Android
Published: 2018-11-06T17:00:00.000Z
CVE-2018-9363 
In the hidp_process_report in bluetooth, there is an integer overflow. This could lead to an out of bounds write with no additional execution privileges needed. User interaction is not needed for exploitation. Product: Android Versions: Android kernel Android ID: A-65853588 References: Upstream kernel.
Problem types: description: Elevation of privilege
Affected products: vendor: Google Inc.
product: Android
Published: 2018-11-06T17:00:00.000Z
CVE-2018-9364 
In the LG LAF component, there is a special command that allowed modification of certain partitions. This could lead to bypass of secure boot. User interaction is not needed for exploitation.
Affected products: vendor: Google
product: Android
default_status: unaffected
Published: 2024-11-19T19:10:07.411Z
CVE-2018-9365 
In smp_data_received of smp_l2c.cc, there is a possible out of bounds read followed by code execution due to a missing bounds check. This could lead to remote code execution with no additional execution privileges needed. User interaction is needed for exploitation.
Affected products: vendor: Google
product: Andrioid
default_status: unaffected
Published: 2024-11-19T20:44:28.663Z
CVE-2018-9366 
In IMSA_Recv_Thread and VT_IMCB_Thread of ImsaClient.cpp and VideoTelephony.c, there is a possible out of bounds write due to an integer overflow. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.
Affected products: vendor: Google
product: Android
default_status: unaffected
Published: 2024-11-19T19:13:00.352Z
CVE-2018-9367 
In FT_ACDK_CCT_V2_OP_ISP_SET_TUNING_PARAS of Meta_CCAP_Para.cpp, there is a possible out of bounds write due to improper input validation. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.
Affected products: vendor: Google
product: Android
default_status: unaffected
Published: 2024-11-19T19:15:12.182Z
CVE-2018-9368 
In mtkscoaudio debugfs there is a possible arbitrary kernel memory write due to missing bounds check and weakened SELinux policies. This could lead to local escalation of privilege with system  execution privileges needed. User interaction is not needed for exploitation.
Affected products: vendor: Google
product: Android
default_status: unaffected
Published: 2024-11-19T19:16:25.726Z
CVE-2018-9369 
In bootloader there is fastboot command allowing user specified kernel command line arguments. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is needed for exploitation.
Affected products: vendor: Google
product: Android
default_status: unaffected
Published: 2024-11-19T19:17:52.251Z
CVE-2018-9370 
In download.c there is a special mode allowing user to download data into memory and causing possible memory corruptions due to missing bounds check. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is needed for exploitation.
Affected products: vendor: Google
product: Android
default_status: unaffected
Published: 2024-11-19T19:20:49.972Z
CVE-2018-9371 
In the Mediatek Preloader, there are out of bounds reads and writes due to an exposed interface that allows arbitrary peripheral memory mapping with insufficient blacklisting/whitelisting. This could lead to local elevation of privilege, given physical access to the device with no additional execution privileges needed. User interaction is needed for exploitation.
Affected products: vendor: Google
product: Android
default_status: unaffected
Published: 2024-11-19T19:22:26.550Z
CVE-2018-9372 
In cmd_flash_mmc_sparse_img of dl_commands.c, there is a possible out of bounds write due to a missing bounds check. This could lead to a local escalation of privilege in the bootloader with no additional execution privileges needed. User interaction is not needed for exploitation.
Affected products: vendor: Google
product: Android
default_status: unaffected
Published: 2024-11-19T19:23:55.561Z
CVE-2018-9373 
In TdlsexRxFrameHandle of the MTK WLAN driver, there is a possible out of bounds write due to a missing bounds check. This could lead to remote escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.
Affected products: vendor: Google
product: Android
default_status: unaffected
Published: 2025-01-28T16:52:42.889Z
CVE-2018-9374 
In installPackageLI of PackageManagerService.java, there is a possible permissions bypass. This could lead to local escalation of privilege with User execution privileges needed. User interaction is not needed for exploitation.
Affected products: vendor: Google
product: Android
default_status: unaffected
Published: 2024-11-27T23:42:11.151Z
CVE-2018-9375 
In multiple functions of UserDictionaryProvider.java, there is a possible way to add and delete words in the user dictionary due to a confused deputy. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.
Affected products: vendor: Google
product: Android
default_status: unaffected
Published: 2025-01-17T23:07:14.793Z
CVE-2018-9376 
In rpc_msg_handler and related handlers of drivers/misc/mediatek/eccci/port_rpc.c, there is a possible out of bounds write due to an incorrect bounds check. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation.
Affected products: vendor: Google
product: Android
default_status: unaffected
Published: 2024-12-02T20:59:25.345Z
CVE-2018-9377 
In getIntentForIntentSender of ActivityManagerService.java, there is a possible way to access user metadata due to a pending intent. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.
Affected products: vendor: Google
product: Android
default_status: unaffected
Published: 2024-11-28T00:23:14.763Z
CVE-2018-9378 
In BnAudioPolicyService::onTransact of IAudioPolicyService.cpp, there is a possible information disclosure due to uninitialized data. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation.
Affected products: vendor: Google
product: Android
default_status: unaffected
Published: 2025-01-28T16:53:30.767Z
CVE-2018-9379 
In multiple functions of MiniThumbFile.java, there is a possible way to view the thumbnails of deleted photos due to a confused deputy. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation.
Affected products: vendor: Google
product: Android
default_status: unaffected
Published: 2025-01-17T23:09:39.761Z
CVE-2018-9380 
In l2c_lcc_proc_pdu of l2c_fcr.cc, there is a possible out of bounds write due to improper input validation. This could lead to remote escalation of privilege with no additional execution privileges needed. User interaction is needed for exploitation.
Affected products: vendor: Google
product: Android
default_status: unaffected
Published: 2024-12-02T19:54:27.063Z
CVE-2018-9381 
In gatts_process_read_by_type_req of gatt_sr.c, there is a possible information disclosure due to uninitialized data. This could lead to remote information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation.
Affected products: vendor: Google
product: Android
default_status: unaffected
Published: 2024-12-02T19:56:28.890Z
CVE-2018-9382 
In multiple functions of WifiServiceImpl.java, there is a possible way to activate Wi-Fi hotspot from a non-owner profile due to a missing permission check. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.
Affected products: vendor: Google
product: Android
default_status: unaffected
Published: 2025-01-17T23:10:28.749Z
CVE-2018-9383 
In asn1_ber_decoder of asn1_decoder.c, there is a possible out of bounds read due to a missing bounds check. This could lead to local information disclosure with System execution privileges needed. User interaction is not needed for exploitation.
Affected products: vendor: Google
product: Android
default_status: unaffected
Published: 2025-01-17T23:03:54.771Z
CVE-2018-9384 
In multiple locations, there is a possible way to bypass KASLR due to an unusual root cause. This could lead to local information disclosure with System execution privileges needed. User interaction is not needed for exploitation.
Affected products: vendor: Google
product: Android
default_status: unaffected
Published: 2025-01-17T23:04:49.336Z
CVE-2018-9385 
In driver_override_store of bus.c, there is a possible out of bounds write due to an incorrect bounds check. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Product: Android Versions: Android kernel Android ID: A-74128061 References: Upstream kernel.
Problem types: description: Elevation of privilege
Affected products: vendor: Google Inc.
product: Android
Published: 2018-11-06T17:00:00.000Z
CVE-2018-9386 
In reboot_block_command of htc reboot_block driver, there is a possible
    stack buffer overflow due to a missing bounds check. This could lead to
    local escalation of privilege with System execution privileges needed. User
    interaction is not needed for exploitation.
Affected products: vendor: Google
product: Android
default_status: unaffected
Published: 2024-12-05T22:20:40.144Z
CVE-2018-9387 
In multiple functions of mnh-sm.c, there is a possible way to trigger a heap overflow due to an integer overflow. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.
Affected products: vendor: Google
product: Android
default_status: unaffected
Published: 2025-01-17T23:14:44.749Z
CVE-2018-9388 
In store_upgrade and store_cmd of drivers/input/touchscreen/stm/ftm4_pdc.c, there are out of bound writes due to missing bounds checks or integer underflows. These could lead to escalation of privilege.
Affected products: vendor: Google
product: Android
default_status: unaffected
Published: 2024-12-05T22:22:17.968Z
CVE-2018-9389 
In ip6_append_data of ip6_output.c, there is a possible way to achieve code execution due to a heap buffer overflow. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.
Affected products: vendor: Google
product: Android
default_status: unaffected
Published: 2025-01-17T23:15:26.974Z
CVE-2018-9390 
In procfile_write of gl_proc.c, there is a possible out of  bounds read of a
    function pointer due to an incorrect bounds check. This could lead to local
    escalation of privilege with System execution privileges needed. User
    interaction is not needed for exploitation.
Affected products: vendor: Google
product: Android
default_status: unaffected
Published: 2024-12-05T22:23:33.742Z
CVE-2018-9391 
In update_gps_sv and output_vzw_debug of
    vendor/mediatek/proprietary/hardware/connectivity/gps/gps_hal/src/gpshal_wor
    ker.c, there is a possible out of bounds write due to a missing bounds
    check. This could lead to local escalation of privilege with System
    execution privileges needed. User interaction is not needed for
    exploitation.
Affected products: vendor: Google
product: Android
default_status: unaffected
Published: 2024-12-05T22:25:10.215Z
CVE-2018-9392 
In get_binary of vendor/mediatek/proprietary/hardware/connectivity/gps/gps_hal/src/data_coder.c, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation.
Affected products: vendor: Google
product: Android
default_status: unaffected
Published: 2024-12-04T17:15:26.490Z
CVE-2018-9393 
In procfile_write of drivers/misc/mediatek/connectivity/wlan/gen2/os/linux/gl_proc.c, there is a possible OOB write due to a missing bounds check. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation.
Affected products: vendor: Google
product: Android
default_status: unaffected
Published: 2024-12-04T17:17:25.388Z
CVE-2018-9394 
In mtk_p2p_wext_set_key of drivers/misc/mediatek/connectivity/wlan/gen2/os/linux/gl_p2p.c, there is a possible OOB write due to improper input validation. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation.
Affected products: vendor: Google
product: Android
default_status: unaffected
Published: 2024-12-04T17:19:10.992Z