rainbutterfly/cve_corpus huggingface dataset:
CVE-2017-0598 
An information disclosure vulnerability in the Framework APIs could enable a local malicious application to bypass operating system protections that isolate application data from other applications. This issue is rated as High because it could be used to gain access to data that the application does not have access to. Product: Android. Versions: 4.4.4, 5.0.2, 5.1.1, 6.0, 6.0.1, 7.0, 7.1.1, 7.1.2. Android ID: A-34128677.
Problem types: description: Information disclosure
Affected products: vendor: Google Inc.
product: Android
Published: 2017-05-12T15:00:00.000Z
CVE-2017-0599 
A remote denial of service vulnerability in libhevc in Mediaserver could enable an attacker to use a specially crafted file to cause a device hang or reboot. This issue is rated as High severity due to the possibility of remote denial of service. Product: Android. Versions: 6.0, 6.0.1, 7.0, 7.1.1, 7.1.2. Android ID: A-34672748.
Problem types: description: Denial of service
Affected products: vendor: Google Inc.
product: Android
Published: 2017-05-12T15:00:00.000Z
CVE-2017-0600 
A remote denial of service vulnerability in libstagefright in Mediaserver could enable an attacker to use a specially crafted file to cause a device hang or reboot. This issue is rated as High severity due to the possibility of remote denial of service. Product: Android. Versions: 4.4.4, 5.0.2, 5.1.1, 6.0, 6.0.1, 7.0, 7.1.1, 7.1.2. Android ID: A-35269635.
Problem types: description: Denial of service
Affected products: vendor: Google Inc.
product: Android
Published: 2017-05-12T15:00:00.000Z
CVE-2017-0601 
An Elevation of Privilege vulnerability in Bluetooth could potentially enable a local malicious application to accept harmful files shared via bluetooth without user permission. This issue is rated as Moderate due to local bypass of user interaction requirements. Product: Android. Versions: 7.0, 7.1.1, 7.1.2. Android ID: A-35258579.
Problem types: description: Elevation of privilege
Affected products: vendor: Google Inc.
product: Android
Published: 2017-05-12T15:00:00.000Z
CVE-2017-0602 
An information disclosure vulnerability in Bluetooth could allow a local malicious application to bypass operating system protections that isolate application data from other applications. This issue is rated as Moderate due to details specific to the vulnerability. Product: Android. Versions: 4.4.4, 5.0.2, 5.1.1, 6.0, 6.0.1, 7.0, 7.1.1, 7.1.2. Android ID: A-34946955.
Problem types: description: Information disclosure
Affected products: vendor: Google Inc.
product: Android
Published: 2017-05-12T15:00:00.000Z
CVE-2017-0603 
A denial of service vulnerability in libstagefright in Mediaserver could enable an attacker to use a specially crafted file to cause a device hang or reboot. This issue is rated as Moderate because it requires an uncommon device configuration. Product: Android. Versions: 4.4.4, 5.0.2, 5.1.1, 6.0, 6.0.1, 7.0, 7.1.1, 7.1.2. Android ID: A-35763994.
Problem types: description: Denial of service
Affected products: vendor: Google Inc.
product: Android
Published: 2017-05-12T15:00:00.000Z
CVE-2017-0604 
An elevation of privilege vulnerability in the kernel Qualcomm power driver could enable a local malicious application to execute arbitrary code within the context of the kernel. This issue is rated as Critical due to the possibility of a local permanent device compromise, which may require reflashing the operating system to repair the device. Product: Android. Versions: N/A. Android ID: A-35392981. References: QC-CR#826589.
Problem types: description: Elevation of privilege
Affected products: vendor: Google Inc.
product: Android
Published: 2017-05-12T15:00:00.000Z
CVE-2017-0606 
An elevation of privilege vulnerability in the Qualcomm sound driver could enable a local malicious application to execute arbitrary code within the context of the kernel. This issue is rated as High because it first requires compromising a privileged process. Product: Android. Versions: Kernel-3.10, Kernel-3.18. Android ID: A-34088848. References: QC-CR#1116015.
Problem types: description: Elevation of privilege
Affected products: vendor: Google Inc.
product: Android
Published: 2017-05-12T15:00:00.000Z
CVE-2017-0607 
An elevation of privilege vulnerability in the Qualcomm sound driver could enable a local malicious application to execute arbitrary code within the context of the kernel. This issue is rated as High because it first requires compromising a privileged process. Product: Android. Versions: Kernel-3.18. Android ID: A-35400551. References: QC-CR#1085928.
Problem types: description: Elevation of privilege
Affected products: vendor: Google Inc.
product: Android
Published: 2017-05-12T15:00:00.000Z
CVE-2017-0608 
An elevation of privilege vulnerability in the Qualcomm sound driver could enable a local malicious application to execute arbitrary code within the context of the kernel. This issue is rated as High because it first requires compromising a privileged process. Product: Android. Versions: Kernel-3.10, Kernel-3.18. Android ID: A-35400458. References: QC-CR#1098363.
Problem types: description: Elevation of privilege
Affected products: vendor: Google Inc.
product: Android
Published: 2017-05-12T15:00:00.000Z
CVE-2017-0609 
An elevation of privilege vulnerability in the Qualcomm sound driver could enable a local malicious application to execute arbitrary code within the context of the kernel. This issue is rated as High because it first requires compromising a privileged process. Product: Android. Versions: Kernel-3.10, Kernel-3.18. Android ID: A-35399801. References: QC-CR#1090482.
Problem types: description: Elevation of privilege
Affected products: vendor: Google Inc.
product: Android
Published: 2017-05-12T15:00:00.000Z
CVE-2017-0610 
An elevation of privilege vulnerability in the Qualcomm sound driver could enable a local malicious application to execute arbitrary code within the context of the kernel. This issue is rated as High because it first requires compromising a privileged process. Product: Android. Versions: Kernel-3.10, Kernel-3.18. Android ID: A-35399404. References: QC-CR#1094852.
Problem types: description: Elevation of privilege
Affected products: vendor: Google Inc.
product: Android
Published: 2017-05-12T15:00:00.000Z
CVE-2017-0611 
An elevation of privilege vulnerability in the Qualcomm sound driver could enable a local malicious application to execute arbitrary code within the context of the kernel. This issue is rated as High because it first requires compromising a privileged process. Product: Android. Versions: Kernel-3.10, Kernel-3.18. Android ID: A-35393841. References: QC-CR#1084210.
Problem types: description: Elevation of privilege
Affected products: vendor: Google Inc.
product: Android
Published: 2017-05-12T15:00:00.000Z
CVE-2017-0612 
An elevation of privilege vulnerability in the Qualcomm Secure Execution Environment Communicator driver could enable a local malicious application to execute arbitrary code within the context of the kernel. This issue is rated as High because it first requires compromising a privileged process. Product: Android. Versions: Kernel-3.18. Android ID: A-34389303. References: QC-CR#1061845.
Problem types: description: Elevation of privilege
Affected products: vendor: Google Inc.
product: Android
Published: 2017-05-12T15:00:00.000Z
CVE-2017-0613 
An elevation of privilege vulnerability in the Qualcomm Secure Execution Environment Communicator driver could enable a local malicious application to execute arbitrary code within the context of the kernel. This issue is rated as High because it first requires compromising a privileged process. Product: Android. Versions: Kernel-3.10, Kernel-3.18. Android ID: A-35400457. References: QC-CR#1086140.
Problem types: description: Elevation of privilege
Affected products: vendor: Google Inc.
product: Android
Published: 2017-05-12T15:00:00.000Z
CVE-2017-0614 
An elevation of privilege vulnerability in the Qualcomm Secure Execution Environment Communicator driver could enable a local malicious application to execute arbitrary code within the context of the kernel. This issue is rated as High because it first requires compromising a privileged process. Product: Android. Versions: Kernel-3.10, Kernel-3.18. Android ID: A-35399405. References: QC-CR#1080290.
Problem types: description: Elevation of privilege
Affected products: vendor: Google Inc.
product: Android
Published: 2017-05-12T15:00:00.000Z
CVE-2017-0615 
An elevation of privilege vulnerability in the MediaTek power driver could enable a local malicious application to execute arbitrary code within the context of the kernel. This issue is rated as High because it first requires compromising a privileged process. Product: Android. Versions: N/A. Android ID: A-34259126. References: M-ALPS03150278.
Problem types: description: Elevation of privilege
Affected products: vendor: Google Inc.
product: Android
Published: 2017-05-12T15:00:00.000Z
CVE-2017-0616 
An elevation of privilege vulnerability in the MediaTek system management interrupt driver could enable a local malicious application to execute arbitrary code within the context of the kernel. This issue is rated as High because it first requires compromising a privileged process. Product: Android. Versions: N/A. Android ID: A-34470286. References: M-ALPS03149160.
Problem types: description: Elevation of privilege
Affected products: vendor: Google Inc.
product: Android
Published: 2017-05-12T15:00:00.000Z
CVE-2017-0617 
An elevation of privilege vulnerability in the MediaTek video driver could enable a local malicious application to execute arbitrary code within the context of the kernel. This issue is rated as High because it first requires compromising a privileged process. Product: Android. Versions: N/A. Android ID: A-34471002. References: M-ALPS03149173.
Problem types: description: Elevation of privilege
Affected products: vendor: Google Inc.
product: Android
Published: 2017-05-12T15:00:00.000Z
CVE-2017-0618 
An elevation of privilege vulnerability in the MediaTek command queue driver could enable a local malicious application to execute arbitrary code within the context of the kernel. This issue is rated as High because it first requires compromising a privileged process. Product: Android. Versions: N/A. Android ID: A-35100728. References: M-ALPS03161536.
Problem types: description: Elevation of privilege
Affected products: vendor: Google Inc.
product: Android
Published: 2017-05-12T15:00:00.000Z
CVE-2017-0619 
An elevation of privilege vulnerability in the Qualcomm pin controller driver could enable a local malicious application to execute arbitrary code within the context of the kernel. This issue is rated as High because it first requires compromising a privileged process. Product: Android. Versions: Kernel-3.10. Android ID: A-35401152. References: QC-CR#826566.
Problem types: description: Elevation of privilege
Affected products: vendor: Google Inc.
product: Android
Published: 2017-05-12T15:00:00.000Z
CVE-2017-0620 
An elevation of privilege vulnerability in the Qualcomm Secure Channel Manager driver could enable a local malicious application to execute arbitrary code within the context of the kernel. This issue is rated as High because it first requires compromising a privileged process. Product: Android. Versions: Kernel-3.10, Kernel-3.18. Android ID: A-35401052. References: QC-CR#1081711.
Problem types: description: Elevation of privilege
Affected products: vendor: Google Inc.
product: Android
Published: 2017-05-12T15:00:00.000Z
CVE-2017-0621 
An elevation of privilege vulnerability in the Qualcomm camera driver could enable a local malicious application to execute arbitrary code within the context of the kernel. This issue is rated as High because it first requires compromising a privileged process. Product: Android. Versions: Kernel-3.10. Android ID: A-35399703. References: QC-CR#831322.
Problem types: description: Elevation of privilege
Affected products: vendor: Google Inc.
product: Android
Published: 2017-05-12T15:00:00.000Z
CVE-2017-0622 
An elevation of privilege vulnerability in the Goodix touchscreen driver could enable a local malicious application to execute arbitrary code within the context of the kernel. This issue is rated as High because it first requires compromising a privileged process. Product: Android. Versions: Kernel-3.10. Android ID: A-32749036. References: QC-CR#1098602.
Problem types: description: Elevation of privilege
Affected products: vendor: Google Inc.
product: Android
Published: 2017-05-12T15:00:00.000Z
CVE-2017-0623 
An elevation of privilege vulnerability in the HTC bootloader could enable a local malicious application to execute arbitrary code within the context of the bootloader. This issue is rated as High because it first requires compromising a privileged process. Product: Android. Versions: Kernel-3.18. Android ID: A-32512358.
Problem types: description: Elevation of privilege
Affected products: vendor: Google Inc.
product: Android
Published: 2017-05-12T15:00:00.000Z
CVE-2017-0624 
An information disclosure vulnerability in the Qualcomm Wi-Fi driver could enable a local malicious application to access data outside of its permission levels. This issue is rated as High because it could be used to access sensitive data without explicit user permission. Product: Android. Versions: Kernel-3.10, Kernel-3.18. Android ID: A-34327795. References: QC-CR#2005832.
Problem types: description: Information disclosure
Affected products: vendor: Google Inc.
product: Android
Published: 2017-05-12T15:00:00.000Z
CVE-2017-0625 
An information disclosure vulnerability in the MediaTek command queue driver could enable a local malicious application to access data outside of its permission levels. This issue is rated as High because it could be used to access sensitive data without explicit user permission. Product: Android. Versions: N/A. Android ID: A-35142799. References: M-ALPS03161531.
Problem types: description: Information disclosure
Affected products: vendor: Google Inc.
product: Android
Published: 2017-05-12T15:00:00.000Z
CVE-2017-0626 
An information disclosure vulnerability in the Qualcomm crypto engine driver could enable a local malicious application to access data outside of its permission levels. This issue is rated as High because it could be used to access sensitive data without explicit user permission. Product: Android. Versions: Kernel-3.10, Kernel-3.18. Android ID: A-35393124. References: QC-CR#1088050.
Problem types: description: Information disclosure
Affected products: vendor: Google Inc.
product: Android
Published: 2017-05-12T15:00:00.000Z
CVE-2017-0627 
An information disclosure vulnerability in the kernel UVC driver could enable a local malicious application to access data outside of its permission levels. This issue is rated as Moderate because it first requires compromising a privileged process. Product: Android. Versions: Kernel-3.10, Kernel-3.18. Android ID: A-33300353.
Problem types: description: Information disclosure
Affected products: vendor: Google Inc.
product: Android
Published: 2017-05-12T15:00:00.000Z
CVE-2017-0628 
An information disclosure vulnerability in the Qualcomm camera driver could enable a local malicious application to access data outside of its permission levels. This issue is rated as Moderate because it first requires compromising a privileged process. Product: Android. Versions: Kernel-3.10, Kernel-3.18. Android ID: A-34230377. References: QC-CR#1086833.
Problem types: description: Information disclosure
Affected products: vendor: Google Inc.
product: Android
Published: 2017-05-12T15:00:00.000Z
CVE-2017-0629 
An information disclosure vulnerability in the Qualcomm camera driver could enable a local malicious application to access data outside of its permission levels. This issue is rated as Moderate because it first requires compromising a privileged process. Product: Android. Versions: Kernel-3.10, Kernel-3.18. Android ID: A-35214296. References: QC-CR#1086833.
Problem types: description: Information disclosure
Affected products: vendor: Google Inc.
product: Android
Published: 2017-05-12T15:00:00.000Z
CVE-2017-0630 
An information disclosure vulnerability in the kernel trace subsystem could enable a local malicious application to access data outside of its permission levels. This issue is rated as Moderate because it first requires compromising a privileged process. Product: Android. Versions: Kernel-3.10, Kernel-3.18. Android ID: A-34277115.
Problem types: description: Information disclosure
Affected products: vendor: Google Inc.
product: Android
Published: 2017-05-12T15:00:00.000Z
CVE-2017-0631 
An information disclosure vulnerability in the Qualcomm camera driver could enable a local malicious application to access data outside of its permission levels. This issue is rated as Moderate because it first requires compromising a privileged process. Product: Android. Versions: Kernel-3.10, Kernel-3.18. Android ID: A-35399756. References: QC-CR#1093232.
Problem types: description: Information disclosure
Affected products: vendor: Google Inc.
product: Android
Published: 2017-05-12T15:00:00.000Z
CVE-2017-0632 
An information disclosure vulnerability in the Qualcomm sound codec driver could enable a local malicious application to access data outside of its permission levels. This issue is rated as Moderate because it first requires compromising a privileged process. Product: Android. Versions: Kernel-3.10. Android ID: A-35392586. References: QC-CR#832915.
Problem types: description: Information disclosure
Affected products: vendor: Google Inc.
product: Android
Published: 2017-05-12T15:00:00.000Z
CVE-2017-0633 
An information disclosure vulnerability in the Broadcom Wi-Fi driver could enable a local malicious component to access data outside of its permission levels. This issue is rated as Moderate because it first requires compromising a privileged process. Product: Android. Versions: Kernel-3.10, Kernel-3.18. Android ID: A-36000515. References: B-RB#117131.
Problem types: description: Information disclosure
Affected products: vendor: Google Inc.
product: Android
Published: 2017-05-12T15:00:00.000Z
CVE-2017-0634 
An information disclosure vulnerability in the Synaptics touchscreen driver could enable a local malicious application to access data outside of its permission levels. This issue is rated as Moderate because it first requires compromising a privileged process. Product: Android. Versions: Kernel-3.18. Android ID: A-32511682.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-05-12T15:00:00.000Z
CVE-2017-0635 
A remote denial of service vulnerability in HevcUtils.cpp in libstagefright in Mediaserver could enable an attacker to use a specially crafted file to cause a device hang or reboot. This issue is rated as Low due to details specific to the vulnerability. Product: Android. Versions: 7.0, 7.1.1, 7.1.2. Android ID: A-35467107.
Problem types: description: Denial of service
Affected products: vendor: Google Inc.
product: Android
Published: 2017-05-12T15:00:00.000Z
CVE-2017-0636 
An elevation of privilege vulnerability in the MediaTek command queue driver could enable a local malicious application to execute arbitrary code within the context of the kernel. This issue is rated as High because it first requires compromising a privileged process. Product: Android. Versions: N/A. Android ID: A-35310230. References: M-ALPS03162263.
Problem types: description: Elevation of privilege
Affected products: vendor: Google Inc.
product: Android
Published: 2017-06-14T13:00:00.000Z
CVE-2017-0637 
A remote code execution vulnerability in libhevc in Mediaserver could enable an attacker using a specially crafted file to cause memory corruption during media file and data processing. This issue is rated as Critical due to the possibility of remote code execution within the context of the Mediaserver process.Product: Android. Versions: 5.0.2, 5.1.1, 6.0, 6.0.1, 7.0, 7.1.1, 7.1.2. Android ID: A-34064500.
Problem types: description: Remote code execution
Affected products: vendor: Google Inc.
product: Android
Published: 2017-06-14T13:00:00.000Z
CVE-2017-0638 
A remote code execution vulnerability in System UI component could enable an attacker using a specially crafted file to execute arbitrary code within the context of an unprivileged process. This issue is rated as High because it is a remote arbitrary code execution in an unprivileged process. Product: Android. Versions: 7.1.1, 7.1.2. Android ID: A-36368305.
Problem types: description: Remote code execution
Affected products: vendor: Google Inc.
product: Android
Published: 2017-06-14T13:00:00.000Z
CVE-2017-0639 
An information disclosure vulnerability in Bluetooth component could enable a local malicious application to access data outside of its permission levels. This issue is rated as High because it is a general bypass for operating system protections that isolate application data from other applications. Product: Android. Versions: 4.4.4, 5.0.2, 5.1.1, 6.0, 6.0.1, 7.0, 7.1.1, 7.1.2. Android ID: A-35310991.
Problem types: description: Information disclosure
Affected products: vendor: Google Inc.
product: Android
Published: 2017-06-14T13:00:00.000Z
CVE-2017-0640 
A remote denial of service vulnerability in Mediaserver could enable an attacker to use a specially crafted file to cause a device hang or reboot. This issue is rated as High severity due to the possibility of remote denial of service. Product: Android. Versions: 6.0, 6.0.1, 7.0, 7.1.1. Android ID: A-33129467.
Problem types: description: Denial of service
Affected products: vendor: Google Inc.
product: Android
Published: 2017-06-14T13:00:00.000Z
CVE-2017-0641 
A remote denial of service vulnerability in libvpx in Mediaserver could enable an attacker to use a specially crafted file to cause a device hang or reboot. This issue is rated as High severity due to the possibility of remote denial of service. Product: Android. Versions: 4.4.4, 5.0.2, 5.1.1, 6.0, 6.0.1, 7.0, 7.1.1, 7.1.2. Android ID: A-34360591.
Problem types: description: Denial of service
Affected products: vendor: Google Inc.
product: Android
Published: 2017-06-14T13:00:00.000Z
CVE-2017-0642 
A remote denial of service vulnerability in libhevc in Mediaserver could enable an attacker to use a specially crafted file to cause a device hang or reboot. This issue is rated as High severity due to the possibility of remote denial of service. Product: Android. Versions: 5.0.2, 5.1.1, 6.0, 6.0.1, 7.0, 7.1.1, 7.1.2. Android ID: A-34819017.
Problem types: description: Denial of service
Affected products: vendor: Google Inc.
product: Android
Published: 2017-06-14T13:00:00.000Z
CVE-2017-0643 
A remote denial of service vulnerability in Mediaserver could enable an attacker to use a specially crafted file to cause a device hang or reboot. This issue is rated as High severity due to the possibility of remote denial of service. Product: Android. Versions: 5.0.2, 5.1.1, 6.0, 6.0.1, 7.0, 7.1.1. Android ID: A-35645051.
Problem types: description: Denial of service
Affected products: vendor: Google Inc.
product: Android
Published: 2017-06-14T13:00:00.000Z
CVE-2017-0644 
A remote denial of service vulnerability in Mediaserver could enable an attacker to use a specially crafted file to cause a device hang or reboot. This issue is rated as High severity due to the possibility of remote denial of service. Product: Android. Versions: 4.4.4, 5.0.2, 5.1.1, 6.0, 6.0.1. Android ID: A-35472997.
Problem types: description: Denial of service
Affected products: vendor: Google Inc.
product: Android
Published: 2017-06-14T13:00:00.000Z
CVE-2017-0645 
An elevation of privilege vulnerability in Bluetooth could enable a local malicious application to access data outside of its permission levels. This issue is rated as Moderate because it is a local bypass of user interaction requirements. Product: Android. Versions: 6.0.1, 7.0, 7.1.1, 7.1.2. Android ID: A-35385327.
Problem types: description: Elevation of privilege
Affected products: vendor: Google Inc.
product: Android
Published: 2017-06-14T13:00:00.000Z