rainbutterfly/cve_corpus huggingface dataset:
CVE-2017-13277 
In ihevcd_fmt_conv of ihevcd_fmt_conv.c, there is a possible out of bounds write due to a missing bounds check. This could lead to remote code execution with no additional execution privileges needed. User interaction is needed for exploitation. Product: Android. Versions: 6.0, 6.0.1, 7.0, 7.1.1, 7.1.2, 8.0, 8.1. Android ID: A-72165027.
Problem types: description: Remote code execution
Affected products: vendor: Google Inc.
product: Android
Published: 2018-04-04T16:00:00.000Z
CVE-2017-13278 
In MediaPlayerService::Client::notify of MediaPlayerService.cpp, there is a possible use after free. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation. Product: Android. Versions: 6.0, 6.0.1, 7.0, 7.1.1, 7.1.2, 8.0, 8.1. Android ID: A-70546581.
Problem types: description: Elevation of privilege
Affected products: vendor: Google Inc.
product: Android
Published: 2018-04-04T16:00:00.000Z
CVE-2017-13279 
In M3UParser::parse of M3UParser.cpp, there is a memory resource exhaustion due to a large loop of pushing items into a vector. This could lead to remote denial of service with no additional execution privileges needed. User interaction is needed for exploitation. Product: Android. Versions: 6.0, 6.0.1, 7.0, 7.1.1, 7.1.2, 8.0, 8.1. Android ID: A-68399439.
Problem types: description: Denial of service
Affected products: vendor: Google Inc.
product: Android
Published: 2018-04-04T16:00:00.000Z
CVE-2017-13280 
In the FrameSequence_gif::FrameSequence_gif function of libframesequence, there is a out of bounds read due to a missing bounds check. This could lead to a remote denial of service with no additional execution privileges needed. User interaction is not needed for exploitation. Product: Android. Versions: 6.0, 6.0.1, 7.0, 7.1.1, 7.1.2, 8.0, 8.1. Android ID: A-71361451.
Problem types: description: Denial of service
Affected products: vendor: Google Inc.
product: Android
Published: 2018-04-04T16:00:00.000Z
CVE-2017-13281 
In avrc_pars_browsing_cmd of avrc_pars_tg.cc, there is a possible stack buffer overflow due to an incorrect bounds check. This could lead to remote code execution with no additional execution privileges needed. User interaction is not needed for exploitation. Product: Android. Versions: 8.0, 8.1. Android ID: A-71603262.
Problem types: description: Remote code execution
Affected products: vendor: Google Inc.
product: Android
Published: 2018-04-04T16:00:00.000Z
CVE-2017-13282 
In avrc_ctrl_pars_vendor_rsp of avrc_pars_ct.cc, there is a possible stack buffer overflow due to a missing bounds check. This could lead to remote code execution with no additional execution privileges needed. User interaction is not needed for exploitation. Product: Android. Versions: 7.0, 7.1.1, 7.1.2, 8.0, 8.1. Android ID: A-71603315.
Problem types: description: Remote code execution
Affected products: vendor: Google Inc.
product: Android
Published: 2018-04-04T16:00:00.000Z
CVE-2017-13283 
In avrc_ctrl_pars_vendor_rsp of bluetooth avrcp_ctrl, there is a possible out of bounds write on the stack due to a missing bounds check. This could lead to remote code execution with no additional execution privileges needed. User interaction is not needed for exploitation. Product: Android. Versions: 7.0, 7.1.1, 7.1.2, 8.0, 8.1. Android ID: A-71603410.
Problem types: description: Remote code execution
Affected products: vendor: Google Inc.
product: Android
Published: 2018-04-04T16:00:00.000Z
CVE-2017-13284 
In config_set_string of config.cc, it is possible to pair a second BT keyboard without user approval due to improper input validation. This could lead to remote escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation. Product: Android. Versions: 6.0, 6.0.1, 7.0, 7.1.1, 7.1.2, 8.0, 8.1. Android ID: A-70808273.
Problem types: description: Elevation of privilege
Affected products: vendor: Google Inc.
product: Android
Published: 2018-04-04T16:00:00.000Z
CVE-2017-13285 
In SvoxSsmlParser and startElement of svox_ssml_parser.cpp, there is a possible out of bounds write due to an uninitialized buffer. This could lead to remote code execution in an unprivileged process with no additional execution privileges needed. User interaction is not needed for exploitation. Product: Android. Versions: 6.0, 6.0.1, 7.0, 7.1.1, 7.1.2, 8.0, 8.1. Android ID: A-69177126.
Problem types: description: Remote code execution
Affected products: vendor: Google Inc.
product: Android
Published: 2018-04-04T16:00:00.000Z
CVE-2017-13286 
In writeToParcel and readFromParcel of OutputConfiguration.java, there is a permission bypass due to mismatched serialization. This could lead to a local escalation of privilege where the user can start an activity with system privileges, with no additional execution privileges needed. User interaction is not needed for exploitation. Product: Android. Versions: 8.0, 8.1. Android ID: A-69683251.
Problem types: description: Elevation of privilege
Affected products: vendor: Google Inc.
product: Android
Published: 2018-04-04T16:00:00.000Z
CVE-2017-13287 
In createFromParcel of VerifyCredentialResponse.java, there is a possible invalid parcel read due to improper input validation. This could lead to local escalation of privilege if mPayload in writeToParcel were null, with no additional execution privileges needed. User interaction is not needed for exploitation. Product: Android. Versions: 6.0.1, 7.0, 7.1.1, 7.1.2, 8.0, 8.1. Android ID: A-71714464.
Problem types: description: Elevation of privilege
Affected products: vendor: Google Inc.
product: Android
Published: 2018-04-04T16:00:00.000Z
CVE-2017-13288 
In writeToParcel and readFromParcel of PeriodicAdvertisingReport.java, there is a permission bypass due to a 64/32bit int mismatch. This could lead to a local escalation of privilege where the user can start an activity with system privileges, with no additional execution privileges needed. User interaction is not needed for exploitation. Product: Android. Versions: 8.0, 8.1. Android ID: A-69634768.
Problem types: description: Elevation of privilege
Affected products: vendor: Google Inc.
product: Android
Published: 2018-04-04T16:00:00.000Z
CVE-2017-13289 
In writeToParcel and createFromParcel of RttManager.java, there is a permission bypass due to a write size mismatch. This could lead to a local escalation of privileges where the user can start an activity with system privileges, with no additional execution privileges needed. User interaction is not needed for exploitation. Product: Android. Versions: 6.0, 6.0.1, 7.0, 7.1.1, 7.1.2, 8.0, 8.1. Android ID: A-70398564.
Problem types: description: Elevation of privilege
Affected products: vendor: Google Inc.
product: Android
Published: 2018-04-04T16:00:00.000Z
CVE-2017-13290 
In sdp_server_handle_client_req of sdp_server.cc, there is an out of bounds read due to a missing bounds check. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation. Product: Android. Versions: 6.0, 6.0.1, 7.0, 7.1.1, 7.1.2, 8.0, 8.1. Android ID: A-69384124.
Problem types: description: Information disclosure
Affected products: vendor: Google Inc.
product: Android
Published: 2018-04-04T16:00:00.000Z
CVE-2017-13291 
In avrc_ctrl_pars_vendor_rsp of avrc_pars_ct.cc, there is a possible NULL pointer dereference due to missing bounds checks. This could lead to remote denial of service with no additional execution privileges needed. User interaction is not needed for exploitation. Product: Android. Versions: 7.0, 7.1.1, 7.1.2, 8.0, 8.1. Android ID: A-71603553.
Problem types: description: Denial of service
Affected products: vendor: Google Inc.
product: Android
Published: 2018-04-04T16:00:00.000Z
CVE-2017-13292 
In wl_get_assoc_ies of wl_cfg80211.c, there is a possible out of bounds write due to an incorrect bounds check. This could lead to remote code execution with no additional execution privileges needed. User interaction is not needed for exploitation. Product: Android. Versions: Android kernel. Android ID: A-70722061. References: B-V2018010201.
Problem types: description: Remote code execution
Affected products: vendor: Google Inc.
product: Android
Published: 2018-04-04T16:00:00.000Z
CVE-2017-13293 
In the nfc_hci_cmd_received() function of core.c, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege in the kernel with no additional execution privileges needed. User interaction is not needed for exploitation. Product: Android. Versions: Android kernel. Android ID: A-62679701.
Problem types: description: Elevation of privilege
Affected products: vendor: Google Inc.
product: Android
Published: 2018-04-04T16:00:00.000Z
CVE-2017-13294 
A information disclosure vulnerability in the Android framework (aosp email application). Product: Android. Versions: 6.0, 6.0.1, 7.0, 7.1.1, 7.1.2, 8.0, 8.1. Android ID: A-71814449.
Problem types: description: Information disclosure
Affected products: vendor: Google Inc.
product: Android
Published: 2018-04-04T16:00:00.000Z
CVE-2017-13295 
A denial of service vulnerability in the Android framework (package installer). Product: Android. Versions: 6.0, 6.0.1, 7.0, 7.1.1, 7.1.2, 8.0, 8.1. Android ID: A-62537081.
Problem types: description: Denial of service
Affected products: vendor: Google Inc.
product: Android
Published: 2018-04-04T16:00:00.000Z
CVE-2017-13296 
A information disclosure vulnerability in the Android media framework (libavc). Product: Android. Versions: 6.0, 6.0.1, 7.0, 7.1.1, 7.1.2, 8.0, 8.1. Android ID: A-70897454.
Problem types: description: Information disclosure
Affected products: vendor: Google Inc.
product: Android
Published: 2018-04-04T16:00:00.000Z
CVE-2017-13297 
A information disclosure vulnerability in the Android media framework (libhevc). Product: Android. Versions: 6.0, 6.0.1, 7.0, 7.1.1, 7.1.2, 8.0, 8.1. Android ID: A-71766721.
Problem types: description: Information disclosure
Affected products: vendor: Google Inc.
product: Android
Published: 2018-04-04T16:00:00.000Z
CVE-2017-13298 
A information disclosure vulnerability in the Android media framework (libhavc). Product: Android. Versions: 6.0, 6.0.1, 7.0, 7.1.1, 7.1.2, 8.0, 8.1. Android ID: A-72117051.
Problem types: description: Information disclosure
Affected products: vendor: Google Inc.
product: Android
Published: 2018-04-04T16:00:00.000Z
CVE-2017-13299 
A other vulnerability in the Android media framework (libavc). Product: Android. Versions: 6.0, 6.0.1, 7.0, 7.1.1, 7.1.2, 8.0, 8.1. Android ID: A-70897394.
Problem types: description: Denial of service
Affected products: vendor: Google Inc.
product: Android
Published: 2018-04-04T16:00:00.000Z
CVE-2017-13300 
A denial of service vulnerability in the Android media framework (libhevc). Product: Android. Versions: 6.0, 6.0.1. Android ID: A-71567394.
Problem types: description: Denial of service
Affected products: vendor: Google Inc.
product: Android
Published: 2018-04-04T16:00:00.000Z
CVE-2017-13301 
A denial of service vulnerability in the Android system (system ui). Product: Android. Versions: 8.0. Android ID: A-66498711.
Problem types: description: Denial of service
Affected products: vendor: Google Inc.
product: Android
Published: 2018-04-04T16:00:00.000Z
CVE-2017-13302 
A denial of service vulnerability in the Android system (system ui). Product: Android. Versions: 8.0. Android ID: A-69969749.
Problem types: description: Denial of service
Affected products: vendor: Google Inc.
product: Android
Published: 2018-04-04T16:00:00.000Z
CVE-2017-13303 
A information disclosure vulnerability in the Broadcom bcmdhd driver. Product: Android. Versions: Android kernel. Android ID: A-71359108. References: B-V2018010501.
Problem types: description: Information disclosure
Affected products: vendor: Google Inc.
product: Android
Published: 2018-04-04T16:00:00.000Z
CVE-2017-13304 
A information disclosure vulnerability in the Upstream kernel mnh_sm driver. Product: Android. Versions: Android kernel. Android ID: A-70576999.
Problem types: description: Information disclosure
Affected products: vendor: Google Inc.
product: Android
Published: 2018-04-04T16:00:00.000Z
CVE-2017-13305 
A information disclosure vulnerability in the Upstream kernel encrypted-keys. Product: Android. Versions: Android kernel. Android ID: A-70526974.
Problem types: description: Information disclosure
Affected products: vendor: Google Inc.
product: Android
Published: 2018-04-04T16:00:00.000Z
CVE-2017-13306 
A elevation of privilege vulnerability in the Upstream kernel mnh driver. Product: Android. Versions: Android kernel. Android ID: A-70295063.
Problem types: description: Elevation of privilege
Affected products: vendor: Google Inc.
product: Android
Published: 2018-04-04T16:00:00.000Z
CVE-2017-13307 
A elevation of privilege vulnerability in the Upstream kernel pci sysfs. Product: Android. Versions: Android kernel. Android ID: A-69128924.
Problem types: description: Elevation of privilege
Affected products: vendor: Google Inc.
product: Android
Published: 2018-04-04T16:00:00.000Z
CVE-2017-13308 
In tscpu_write_GPIO_out and mtkts_Abts_write of mtk_ts_Abts.c, there is a possible buffer overflow in an sscanf due to improper input validation. This could lead to a local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation.
Affected products: vendor: Google
product: Android
default_status: unaffected
Published: 2024-12-05T22:05:21.894Z
CVE-2017-13309 
In readEncryptedData of ConscryptEngine.java, there is a possible plaintext leak due to improperly used crypto. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation.
Affected products: vendor: Google
product: Android
default_status: unaffected
Published: 2024-11-15T20:52:13.398Z
CVE-2017-13310 
In createFromParcel of ViewPager.java, there is a possible read/write serialization issue leading to a permissions bypass. This could lead to local escalation of privilege where an app can start an activity with system privileges with no additional execution privileges needed. User interaction is not needed for exploitation.
Affected products: vendor: Google
product: Android
default_status: unaffected
Published: 2024-11-15T21:36:53.028Z
CVE-2017-13311 
In the read() function of ProcessStats.java, there is a possible read/write serialization issue leading to a permissions bypass. This could lead to local escalation of privilege where an app can start an activity with system privileges with no additional execution privileges needed. User interaction is not needed for exploitation.
Affected products: vendor: Google
product: Android
default_status: unaffected
Published: 2024-11-15T21:46:33.040Z
CVE-2017-13312 
In createFromParcel of MediaCas.java, there is a possible parcel read/write mismatch due to improper input validation. This could lead to local escalation of privilege where an app can start an activity with system privileges with no additional execution privileges needed. User interaction is not needed for exploitation.
Affected products: vendor: Google
product: Android
default_status: unaffected
Published: 2024-11-15T21:54:40.228Z
CVE-2017-13313 
In ElementaryStreamQueue::dequeueAccessUnitMPEG4Video of ESQueue.cpp, there is a possible infinite loop leading to resource exhaustion due to an incorrect bounds check. This could lead to remote denial of service with no additional execution privileges needed. User interaction is needed for exploitation.
Affected products: vendor: Google
product: Android
default_status: unaffected
Published: 2024-11-15T22:00:33.699Z
CVE-2017-13314 
In setAllowOnlyVpnForUids of NetworkManagementService.java, there is a possible security settings bypass due to a missing permission check. This could lead to local escalation of privilege allowing users to access non-VPN networks, when they are supposed to be restricted to the VPN networks, with no additional execution privileges needed. User interaction is not needed for exploitation.
Affected products: vendor: Google
product: Android
default_status: unaffected
Published: 2024-11-15T21:57:39.845Z
CVE-2017-13315 
In writeToParcel and createFromParcel of DcParamObject.java, there is a permission bypass due to a write size mismatch. This could lead to an elevation of privileges where the user can start an activity with system privileges, with no additional execution privileges needed. User interaction is not needed for exploitation.
Affected products: vendor: Google
product: Android
default_status: unaffected
Published: 2024-11-19T17:50:22.454Z
CVE-2017-13316 
In checkPermissions of RecognitionService.java, there is a possible permissions bypass due to a missing permission check. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.
Affected products: vendor: Google
product: Android
default_status: unaffected
Published: 2024-11-27T19:18:27.489Z
CVE-2017-13317 
In HeifDecoderImpl::getScanline of HeifDecoderImpl.cpp, there is a possible out of bounds read due to improper input validation. This could lead to remote information disclosure with no additional execution privileges needed. User interaction is needed for exploitation.
Affected products: vendor: Google
product: Android
default_status: unaffected
Published: 2025-01-28T16:50:03.206Z
CVE-2017-13318 
In HeifDataSource::readAt of HeifDecoderImpl.cpp, there is a possible out of bounds read due to an integer overflow. This could lead to remote information disclosure with no additional execution privileges needed. User interaction is needed for exploitation.
Affected products: vendor: Google
product: Android
default_status: unaffected
Published: 2025-01-28T16:51:05.070Z
CVE-2017-13319 
In pvmp3_get_main_data_size of pvmp3_get_main_data_size.cpp, there is a possible buffer overread due to a missing bounds check. This could lead to remote information disclosure of global static variables with no additional execution privileges needed. User interaction is not needed for exploitation.
Affected products: vendor: Google
product: Android
default_status: unaffected
Published: 2024-11-27T19:55:01.605Z
CVE-2017-13320 
In impeg2d_bit_stream_flush() of libmpeg2dec there is a possible OOB read due to a missing bounds check. This could lead to Remote DoS with no additional execution privileges needed. User interaction is needed for exploitation.
Affected products: vendor: Google
product: Android
default_status: unaffected
Published: 2024-11-27T21:24:30.387Z
CVE-2017-13321 
In SensorService::isDataInjectionEnabled of frameworks/native/services/sensorservice/SensorService.cpp, there is a possible out of bounds read due to a missing bounds check. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation.
Affected products: vendor: Google
product: Android
default_status: unaffected
Published: 2024-11-27T21:28:34.817Z
CVE-2017-13322 
In endCallForSubscriber of PhoneInterfaceManager.java, there is a possible way to prevent access to emergency services due to a logic error in the code. This could lead to a local denial of service with no additional execution privileges needed.  User interaction is not needed for exploitation.
Affected products: vendor: Google
product: Android
default_status: unaffected
Published: 2025-01-17T23:06:15.618Z
CVE-2017-13323 
In String16 of String16.cpp, there is a possible out of bounds write due to an integer overflow. This could lead to local escalation of privilege in an unprivileged process with no additional execution privileges needed. User interaction is not needed for exploitation.
Affected products: vendor: Google
product: Android
default_status: unaffected
Published: 2024-11-27T21:35:53.233Z
CVE-2017-13648 
In GraphicsMagick 1.3.26, a memory leak vulnerability was found in the function ReadMATImage in coders/mat.c.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-08-23T21:00:00.000Z
CVE-2017-13649 
UnrealIRCd 4.0.13 and earlier creates a PID file after dropping privileges to a non-root account, which might allow local users to kill arbitrary processes by leveraging access to this non-root account for PID file modification before a root script executes a "kill `cat /pathname`" command. NOTE: the vendor indicates that there is no common or recommended scenario in which a root script would execute this kill command.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-08-23T21:00:00.000Z
CVE-2017-13652 
NetApp OnCommand Insight version 7.3.0 and versions prior to 7.2.0 are susceptible to clickjacking attacks which could cause a user to perform an unintended action in the user interface.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-07-31T16:00:00.000Z
CVE-2017-13658 
In ImageMagick before 6.9.9-3 and 7.x before 7.0.6-3, there is a missing NULL check in the ReadMATImage function in coders/mat.c, leading to a denial of service (assertion failure and application exit) in the DestroyImageInfo function in MagickCore/image.c.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-08-24T06:00:00.000Z
CVE-2017-13663 
Encryption key exposure in firmware in iSmartAlarm CubeOne version 2.2.4.8 and earlier allows attackers to decrypt log files via an exposed key.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-12-01T17:00:00.000Z
CVE-2017-13664 
Password file exposure in firmware in iSmartAlarm CubeOne version 2.2.4.8 and earlier allows attackers to execute arbitrary commands with administrative privileges by retrieving credentials from this file.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-12-01T17:00:00.000Z
CVE-2017-13666 
An integer underflow vulnerability exists in pixel-a.asm, the x86 assembly code for planeClipAndMax() in MulticoreWare x265 through 2.5, as used in libbpg and other products. A small height value can cause an integer underflow, which leads to a crash. This is a different vulnerability than CVE-2017-8906.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-08-24T06:00:00.000Z
CVE-2017-13667 
OX Software GmbH OX App Suite 7.8.4 and earlier is affected by: SSRF.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-05-23T17:28:41.000Z
CVE-2017-13668 
OX Software GmbH OX App Suite 7.8.4 and earlier is affected by: Cross Site Scripting (XSS).
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-05-23T15:15:31.000Z
CVE-2017-13669 
SQL Injection exists in NexusPHP 1.5.beta5.20120707 via the setanswered parameter to staffbox.php.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-08-24T17:00:00.000Z
CVE-2017-13670 
In BlackCat CMS 1.2, remote authenticated users can upload any file via the media upload function in backend/media/ajax_upload.php, as demonstrated by a ZIP archive that contains a .php file.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-08-31T04:00:00.000Z
CVE-2017-13671 
app/View/Helper/CommandHelper.php in MISP before 2.4.79 has persistent XSS via comments. It only impacts the users of the same instance because the comment field is not part of the MISP synchronisation.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-08-24T19:00:00.000Z
CVE-2017-13672 
QEMU (aka Quick Emulator), when built with the VGA display emulator support, allows local guest OS privileged users to cause a denial of service (out-of-bounds read and QEMU process crash) via vectors involving display update.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-09-01T13:00:00.000Z