rainbutterfly/cve_corpus huggingface dataset:
CVE-2018-9395 
In mtk_cfg80211_vendor_packet_keep_alive_start and mtk_cfg80211_vendor_set_config of drivers/misc/mediatek/connectivity/wlan/gen2/os/linux/gl_vendor.c, there is a possible OOB write due to a missing bounds check. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation.
Affected products: vendor: Google
product: Android
default_status: unaffected
Published: 2024-12-04T17:20:55.185Z
CVE-2018-9396 
In rpc_msg_handler and related handlers of drivers/misc/mediatek/eccci/port_rpc.c, there is a possible out of bounds write due to an incorrect bounds check. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation.
Affected products: vendor: Google
product: Android
default_status: unaffected
Published: 2024-12-04T21:59:02.879Z
CVE-2018-9397 
In WMT_unlocked_ioctl of MTK WMT device driver, there is a possible OOB
    write due to a missing bounds check. This could lead to local escalation of
    privilege with System execution privileges needed. User interaction is not
    needed for exploitation.
Affected products: vendor: Google
product: Android
default_status: unaffected
Published: 2024-12-04T23:10:14.272Z
CVE-2018-9398 
In fm_set_stat of mediatek FM radio driver, there is a possible OOB write
    due to improper input validation. This could lead to local escalation of
    privilege with System execution privileges needed. User interaction is not
    needed for exploitation.
Affected products: vendor: Google
product: Android
default_status: unaffected
Published: 2024-12-04T23:11:48.916Z
CVE-2018-9399 
In /proc/driver/wmt_dbg driver, there are several possible out of bounds
    writes. These could lead to local escalation of privilege with System
    execution privileges needed. User interaction is not needed for
    exploitation.
Affected products: vendor: Google
product: Android
default_status: unaffected
Published: 2024-12-04T23:13:11.225Z
CVE-2018-9400 
In gt1x_debug_write_proc and gt1x_tool_write of
    drivers/input/touchscreen/mediatek/GT1151/gt1x_generic.c and gt1x_tools.c,
    there is a possible out of bounds write due to a missing bounds check. This
    could lead to local escalation of privilege with System execution privileges
    needed. User interaction is not needed for exploitation.
Affected products: vendor: Google
product: Android
default_status: unaffected
Published: 2024-12-04T23:14:32.596Z
CVE-2018-9401 
In many locations, there is a possible way to access kernel memory in user space due to an incorrect bounds check. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.
Affected products: vendor: Google
product: Android
default_status: unaffected
Published: 2025-01-17T23:17:04.245Z
CVE-2018-9402 
In multiple functions of gl_proc.c, there is a buffer overwrite due to a missing bounds check. This could lead to escalation of privileges in the kernel.
Affected products: vendor: Google
product: Android
default_status: unaffected
Published: 2024-12-04T23:27:42.808Z
CVE-2018-9403 
In the MTK_FLP_MSG_HAL_DIAG_REPORT_DATA_NTF handler of flp2hal_-
    interface.c, there is a possible stack buffer overflow due to a missing
    bounds check. This could lead to local escalation of privilege in a
    privileged process with System execution privileges needed. User interaction
    is not needed for exploitation.
Affected products: vendor: Google
product: Android
default_status: unaffected
Published: 2024-12-04T23:29:24.147Z
CVE-2018-9404 
In oemCallback of ril.cpp, there is a possible out of bounds write due to an
    integer overflow. This could lead to local escalation of privilege with
    System execution privileges needed. User interaction is not needed for
    exploitation.
Affected products: vendor: Google
product: Android
default_status: unaffected
Published: 2024-12-04T23:32:00.249Z
CVE-2018-9405 
In BnDmAgent::onTransact of dm_agent.cpp, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation.
Affected products: vendor: Google
product: Android
default_status: unaffected
Published: 2025-01-17T23:17:44.361Z
CVE-2018-9406 
In NlpService, there is a possible way to obtain location information due to a missing permission check. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.
Affected products: vendor: Google
product: Android
default_status: unaffected
Published: 2025-01-17T23:16:13.761Z
CVE-2018-9407 
In emmc_rpmb_ioctl of emmc_rpmb.c, there is an Information Disclosure due to a Missing Bounds Check. This could lead to  Information Disclosure of kernel data.
Affected products: vendor: Google
product: Android
default_status: unaffected
Published: 2024-12-04T23:33:27.727Z
CVE-2018-9408 
In m3326_gps_write and m3326_gps_read of gps.s, there is a possible Out Of
    Bounds Read due to a missing bounds check. This could lead to a local
    information disclosure with System execution privileges needed. User
    interaction is not needed for exploitation.
Affected products: vendor: Google
product: Android
default_status: unaffected
Published: 2024-12-04T23:34:59.397Z
CVE-2018-9409 
In HWCSession::SetColorModeById of hwc_session.cpp, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.
Affected products: vendor: Google
product: Android
default_status: unaffected
Published: 2024-11-19T19:26:23.886Z
CVE-2018-9410 
In analyzeAxes of FontUtils.cpp, there is a possible out of bounds read due to a missing bounds check. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation.
Affected products: vendor: Google
product: Android
default_status: unaffected
Published: 2024-11-19T21:04:59.464Z
CVE-2018-9411 
In decrypt of ClearKeyCasPlugin.cpp there is a possible out-of-bounds write due to a missing bounds check. This could lead to remote arbitrary code execution with no additional execution privileges needed. User interaction is needed for exploitation.
Affected products: vendor: Google
product: Android
default_status: unaffected
Published: 2024-11-19T21:06:22.949Z
CVE-2018-9412 
In removeUnsynchronization of ID3.cpp there is a possible resource exhaustion due to improper input validation. This could lead to denial of service with no additional execution privileges needed. User interaction is needed for exploitation.
Affected products: vendor: Google
product: Android
default_status: unaffected
Published: 2024-11-19T21:08:26.491Z
CVE-2018-9413 
In handle_notification_response of btif_rc.cc, there is a possible out of bounds write due to a missing bounds check. This could lead to remote code execution with no additional execution privileges needed. User interaction is needed for exploitation.
Affected products: vendor: Google
product: Android
default_status: unaffected
Published: 2024-12-02T21:03:50.218Z
CVE-2018-9414 
In gattServerSendResponseNative of com_android_bluetooth_gatt.cpp, there is a possible out of bounds stack write due to a missing bounds check. This could lead to local escalation of privilege with User execution privileges needed. User interaction is not needed for exploitation.
Affected products: vendor: Google
product: Android
default_status: unaffected
Published: 2024-12-02T21:09:16.394Z
CVE-2018-9415 
In driver_override_store and driver_override_show of bus.c, there is a possible double free due to improper locking. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Product: Android Versions: Android kernel Android ID: A-69129004 References: Upstream kernel.
Problem types: description: Elevation of privilege
Affected products: vendor: Google Inc.
product: Android
Published: 2018-11-06T17:00:00.000Z
CVE-2018-9416 
In sg_remove_scat of scsi/sg.c, there is a possible memory corruption due to
    an unusual root cause. This could lead to local escalation of privilege with
    System execution privileges needed. User interaction is not needed for
    exploitation.
Affected products: vendor: Google
product: Android
default_status: unaffected
Published: 2024-12-04T23:36:19.267Z
CVE-2018-9417 
In f_hidg_read and hidg_disable of f_hid.c, there is a possible use-after-free due to improper locking. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.
Affected products: vendor: Google
product: Android
default_status: unaffected
Published: 2024-11-19T21:10:08.251Z
CVE-2018-9418 
In handle_app_cur_val_response of dtif_rc.cc, there is a possible stack buffer overflow due to a missing bounds check. This could lead to remote code execution with no additional execution privileges needed. User interaction is not needed for exploitation.
Affected products: vendor: Google
product: Android
default_status: unaffected
Published: 2024-12-02T21:23:20.707Z
CVE-2018-9419 
In l2cble_process_sig_cmd of l2c_ble.cc, there is a possible out of bounds read due to a missing bounds check. This could lead to remote information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation.
Affected products: vendor: Google
product: Android
default_status: unaffected
Published: 2024-11-19T21:11:45.990Z
CVE-2018-9420 
In BnCameraService::onTransact of CameraService.cpp, there is a possible information disclosure due to uninitialized data. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation.
Affected products: vendor: Google
product: Android
default_status: unaffected
Published: 2024-11-19T21:20:13.958Z
CVE-2018-9421 
In writeInplace of Parcel.cpp, there is a possible information leak across processes, using Binder, due to uninitialized data. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation.
Affected products: vendor: Google
product: Android
default_status: unaffected
Published: 2024-11-19T21:22:12.436Z
CVE-2018-9422 
In get_futex_key of futex.c, there is a use-after-free due to improper locking. This could lead to local escalation of privilege with no additional privileges needed. User interaction is not needed for exploitation. Product: Android Versions: Android kernel Android ID: A-74250718 References: Upstream kernel.
Problem types: description: Elevation of privilege
Affected products: vendor: Google Inc.
product: Android
Published: 2018-11-06T17:00:00.000Z
CVE-2018-9423 
In ihevcd_parse_slice_header of ihevcd_parse_slice_header.c there is a possible out of bound read due to missing bounds check. This could lead to denial of service with no additional execution privileges needed. User interaction is needed for exploitation.
Affected products: vendor: Google
product: Android
default_status: unaffected
Published: 2024-12-02T21:26:58.452Z
CVE-2018-9424 
In CryptoPlugin::decrypt of CryptoPlugin.cpp, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.
Affected products: vendor: Google
product: Android
default_status: unaffected
Published: 2024-11-19T21:23:35.724Z
CVE-2018-9425 
In Platform, there is a possible bypass of user interaction requirements due to missing permission checks. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation. Product: AndroidVersions: Android-10Android ID: A-73884967
Problem types: description: Elevation of privilege
Affected products: vendor: n/a
product: Android
Published: 2019-09-27T18:05:19.000Z
CVE-2018-9426 
In  RsaKeyPairGenerator::getNumberOfIterations of RSAKeyPairGenerator.java, an incorrect implementation could cause weak RSA key pairs being generated. This could lead to crypto vulnerability with no additional execution privileges needed. User interaction is not needed for exploitation. Bulletin Fix: The fix is designed to correctly implement the key generation according to FIPS standard.
Affected products: vendor: Google
product: Android
default_status: unaffected
Published: 2024-12-02T21:30:27.265Z
CVE-2018-9427 
In CopyToOMX of OMXNodeInstance.cpp there is a possible out-of-bounds write due to an incorrect bounds check. This could lead to remote arbitrary code execution with no additional execution privileges needed. User interaction is needed for exploitation. Product: Android Versions: Android-8.0 Android-8.1 Android ID: A-77486542.
Problem types: description: Remote code execution
Affected products: vendor: Google Inc.
product: Android
Published: 2018-11-06T17:00:00.000Z
CVE-2018-9428 
In startDevice of AAudioServiceStreamBase.cpp there is a possible out of bounds write due to a use after free. This could lead to local arbitrary code execution with no additional execution privileges needed. User interaction is needed for exploitation.  https://source.android.com/security/bulletin/2018-07-01
Affected products: vendor: Google
product: Android
default_status: unaffected
Published: 2024-11-19T21:25:02.634Z
CVE-2018-9429 
In buildImageItemsIfPossible of ItemTable.cpp there is a possible out of bound read due to uninitialized data. This could lead to information disclosure with no additional execution privileges needed. User interaction is needed for exploitation.
Affected products: vendor: Google
product: Android
default_status: unaffected
Published: 2024-12-02T21:33:42.242Z
CVE-2018-9430 
In prop2cfg of btif_storage.cc, there is a possible out of bounds write due to an incorrect bounds check. This could lead to remote code execution with no additional execution privileges needed. User interaction is not needed for exploitation.
Affected products: vendor: Google
product: Android
default_status: unaffected
Published: 2024-12-02T21:36:48.335Z
CVE-2018-9431 
In OSUInfo of OSUInfo.java, there is a possible escalation of privilege due to improper input validation. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.
Affected products: vendor: Google
product: Android
default_status: unaffected
Published: 2024-12-02T21:39:18.222Z
CVE-2018-9432 
In createPhonebookDialogView and createMapDialogView of BluetoothPermissionActivity.java, there is a possible permissions bypass. This could lead to local escalation of privilege due to hiding and bypassing the user's ability to disable access to contacts, with no additional execution privileges needed. User interaction is needed for exploitation.
Affected products: vendor: Google
product: Android
default_status: unaffected
Published: 2024-11-19T21:26:51.877Z
CVE-2018-9433 
In ArrayConcatVisitor of builtins-array.cc, there is a possible type confusion due to improper input validation. This could lead to remote code execution with no additional execution privileges needed. User interaction is needed for exploitation.
Affected products: vendor: Google
product: Android
default_status: unaffected
Published: 2024-11-19T21:28:32.065Z
CVE-2018-9434 
In multiple functions of Parcel.cpp, there is a possible way to bypass address space layout randomization. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.
Affected products: vendor: Google
product: Android
default_status: unaffected
Published: 2025-01-17T23:11:16.145Z
CVE-2018-9435 
In gatt_process_error_rsp of gatt_cl.cc, there is a possible out of bound read due to a missing bounds check. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation.
Affected products: vendor: Google
product: Android
default_status: unaffected
Published: 2024-12-02T22:12:22.069Z
CVE-2018-9436 
In bnep_data_ind of bnep_main.cc, there is a possible out of bounds read due to a missing bounds check. This could lead to remote information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation. Product: Android Versions: Android-6.0 Android-6.0.1 Android-7.0 Android-7.1.1 Android-7.1.2 Android-8.0 Android-8.1 Android ID: A-79164722.
Problem types: description: Information disclosure
Affected products: vendor: Google Inc.
product: Android
Published: 2018-11-06T17:00:00.000Z
CVE-2018-9437 
In getstring of ID3.cpp there is a possible out-of-bounds read due to a missing bounds check. This could lead to remote denial of service with no additional execution privileges needed. User interaction is needed for exploitation. Product: Android Versions: Android-6.0 Android-6.0.1 Android-7.0 Android-7.1.1 Android-7.1.2 Android-8.0 Android-8.1 Android ID: A-78656554.
Problem types: description: Information disclosure
Affected products: vendor: Google Inc.
product: Android
Published: 2018-11-06T17:00:00.000Z
CVE-2018-9438 
When a device connects only over WiFi VPN, the device may not receive security updates due to some incorrect checks. This could lead to a local denial of service of security updates with no additional execution privileges needed. User interaction is needed for exploitation. Product: Android Versions: Android-8.1 Android ID: A-78644887.
Problem types: description: Denial of service
Affected products: vendor: Google Inc.
product: Android
Published: 2018-11-06T17:00:00.000Z
CVE-2018-9439 
In __unregister_prot_hook and packet_release of af_packet.c, there is a
    possible use-after-free due to improper locking. This could lead to local
    escalation of privilege in the kernel with System execution privileges
    needed. User interaction is not needed for exploitation.
Affected products: vendor: Google
product: Android
default_status: unaffected
Published: 2024-12-04T23:37:42.619Z
CVE-2018-9440 
In parse of M3UParser.cpp there is a possible resource exhaustion due to improper input validation. This could lead to denial of service with no additional execution privileges needed. User interaction is needed for exploitation.
Affected products: vendor: Google
product: Android
default_status: unaffected
Published: 2024-11-19T22:18:01.261Z
CVE-2018-9441 
In sdp_copy_raw_data of sdp_discovery.cc, there is a possible out of bounds read due to an incorrect bounds check. This could lead to local information disclosure with no additional execution privileges needed. User interaction is needed for exploitation.
Affected products: vendor: Google
product: Android
default_status: unaffected
Published: 2024-12-03T00:02:26.901Z
CVE-2018-9444 
In ih264d_video_decode of ih264d_api.c there is a possible resource exhaustion due to an infinite loop. This could lead to remote temporary device denial of service (remote hang or reboot) with no additional execution privileges needed. User interaction is needed for exploitation. Product: Android Versions: Android-6.0 Android-6.0.1 Android-7.0 Android-7.1.1 Android-7.1.2 Android ID: A-63521984.
Problem types: description: Denial of service
Affected products: vendor: Google Inc.
product: Android
Published: 2018-11-06T17:00:00.000Z
CVE-2018-9445 
In readMetadata of Utils.cpp, there is a possible path traversal bug due to a confused deputy. This could lead to local escalation of privilege when mounting a USB device with no additional execution privileges needed. User interaction is not needed for exploitation. Product: Android Versions: Android-6.0 Android-6.0.1 Android-7.0 Android-7.1.1 Android-7.1.2 Android-8.0 Android-8.1 Android ID: A-80436257.
Problem types: description: Elevation of privilege
Affected products: vendor: Google Inc.
product: Android
Published: 2018-11-06T17:00:00.000Z
CVE-2018-9446 
In smp_br_state_machine_event of smp_br_main.cc, there is a possible out of bounds write due to memory corruption. This could lead to remote code execution with no additional execution privileges needed. User interaction is not needed for exploitation. Product: Android Versions: Android-6.0 Android-6.0.1 Android-7.0 Android-7.1.1 Android-7.1.2 Android-8.0 Android-8.1 Android ID: A-80145946.
Problem types: description: Remote code execution
Affected products: vendor: Google Inc.
product: Android
Published: 2018-11-06T17:00:00.000Z
CVE-2018-9447 
In onCreate of EmergencyCallbackModeExitDialog.java, there is a possible way to crash the emergency callback mode due to a missing null check. This could lead to local denial of service with no additional execution privileges needed. User interaction is not needed for exploitation.
Affected products: vendor: Google
product: Android
default_status: unaffected
Published: 2025-01-17T23:12:29.500Z
CVE-2018-9448 
In avct_bcb_msg_ind of avct_bcb_act.cc, there is a possible out of bounds read due to a missing bounds check. This could lead to remote information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation. Product: Android Versions: Android-8.0 Android-8.1 Android ID: A-79944113.
Problem types: description: Information disclosure
Affected products: vendor: Google Inc.
product: Android
Published: 2018-11-06T17:00:00.000Z
CVE-2018-9449 
In process_service_search_attr_rsp of sdp_discovery.cc, there is a possible out of bound read due to a missing bounds check. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation.
Affected products: vendor: Google
product: Android
default_status: unaffected
Published: 2024-12-03T00:08:47.209Z
CVE-2018-9450 
In avrc_proc_vendor_command of avrc_api.cc, there is a possible out of bounds write due to a missing bounds check. This could lead to remote code execution with no additional execution privileges needed. User interaction is not needed for exploitation. Product: Android Versions: Android-6.0 Android-6.0.1 Android-7.0 Android-7.1.1 Android-7.1.2 Android-8.0 Android-8.1 Android ID: A-79541338.
Problem types: description: Remote code execution
Affected products: vendor: Google Inc.
product: Android
Published: 2018-11-06T17:00:00.000Z
CVE-2018-9451 
In DynamicRefTable::load of ResourceTypes.cpp, there is a possible out of bounds read due to a missing bounds check. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation. Product: Android Versions: Android-6.0 Android-6.0.1 Android-7.0 Android-7.1.1 Android-7.1.2 Android-8.0 Android-8.1 Android ID: A-79488511.
Problem types: description: Information disclosure
Affected products: vendor: Google Inc.
product: Android
Published: 2018-11-06T17:00:00.000Z
CVE-2018-9452 
In getOffsetForHorizontal of Layout.java, there is a possible application hang due to a slow width calculation. This could lead to remote denial of service if a contact with many hidden unicode characters were sent to the device and used by a local app, with no additional execution privileges needed. User interaction is needed for exploitation. Product: Android Versions: Android-7.0 Android-7.1.1 Android-7.1.2 Android-8.0 Android-8.1 Android-9.0 Android ID: A-78464361
Problem types: description: Denial of service
Affected products: vendor: Google Inc.
product: Android
Published: 2018-10-02T19:00:00.000Z