rainbutterfly/cve_corpus huggingface dataset:
CVE-2018-9453 
In avdt_msg_prs_cfg of avdt_msg.cc, there is a possible out of bounds read due to a missing bounds check. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation. Product: Android Versions: Android-6.0 Android-6.0.1 Android-7.0 Android-7.1.1 Android-7.1.2 Android-8.0 Android-8.1 Android ID: A-78288378.
Problem types: description: Information disclosure
Affected products: vendor: Google Inc.
product: Android
Published: 2018-11-06T17:00:00.000Z
CVE-2018-9454 
In bnep_data_ind of bnep_main.cc, there is a possible out of bounds read due to a missing bounds check. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation. Product: Android Versions: Android-6.0 Android-6.0.1 Android-7.0 Android-7.1.1 Android-7.1.2 Android-8.0 Android-8.1 Android ID: A-78286118.
Problem types: description: Information disclosure
Affected products: vendor: Google Inc.
product: Android
Published: 2018-11-06T17:00:00.000Z
CVE-2018-9455 
In sdpu_extract_attr_seq of sdp_utils.cc, there is a possible out of bounds read due to an incorrect bounds check. This could lead to remote denial of service with no additional execution privileges needed. User interaction is not needed for exploitation. Product: Android Versions: Android-6.0 Android-6.0.1 Android-7.0 Android-7.1.1 Android-7.1.2 Android-8.0 Android-8.1 Android ID: A-78136677.
Problem types: description: Denial of service
Affected products: vendor: Google Inc.
product: Android
Published: 2018-11-06T17:00:00.000Z
CVE-2018-9456 
In sdpu_extract_attr_seq of sdp_utils.cc, there is a possible out of bounds read due to an incorrect bounds check. This could lead to remote denial of service with no additional execution privileges needed. User interaction is not needed for exploitation.
Affected products: vendor: Google
product: Android
default_status: unaffected
Published: 2024-11-19T22:19:46.371Z
CVE-2018-9457 
In onCheckedChanged of BluetoothPairingController.java, there is a possible way to retrieve contact information due to a permissions bypass. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation. Product: Android. Versions: Android-8.0 Android-8.1 Android-9. Android ID: A-72872376
Problem types: description: Elevation of privilege
Affected products: vendor: Google Inc.
product: Android
Published: 2018-11-14T18:00:00.000Z
CVE-2018-9458 
In computeFocusedWindow of RootWindowContainer.java, and related functions, there is possible interception of keypresses due to focus being on the wrong window. This could lead to local escalation of privilege revealing the user's keypresses while the screen was locked with no additional execution privileges needed. User interaction is needed for exploitation. Product: Android Versions: Android-8.0 Android-8.1 Android ID: A-71786287.
Problem types: description: Elevation of privilege
Affected products: vendor: Google Inc.
product: Android
Published: 2018-11-06T17:00:00.000Z
CVE-2018-9459 
In Attachment of Attachment.java and getFilePath of EmlAttachmentProvider.java, there is a possible Elevation of Privilege due to a path traversal error. This could lead to a remote escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation. Product: Android Versions: Android-6.0 Android-6.0.1 Android-7.0 Android-7.1.1 Android-7.1.2 Android-8.0 Android-8.1 Android ID: A-66230183.
Problem types: description: Elevation of privilege
Affected products: vendor: Google Inc.
product: Android
Published: 2018-11-06T17:00:00.000Z
CVE-2018-9461 
In onAttachFragment of ShareIntentActivity.java, there is a possible way for an app to read files in the messages app due to a race condition. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.
Affected products: vendor: Google
product: Android
default_status: unaffected
Published: 2025-01-17T23:13:16.156Z
CVE-2018-9462 
In store_cmd of ftm4_pdc.c, there is a possible out of bounds write due to
    an incorrect bounds check. This could lead to local escalation of privilege
    with System execution privileges needed. User interaction is not needed for
    exploitation.
Affected products: vendor: Google
product: Android
default_status: unaffected
Published: 2024-12-04T23:39:05.744Z
CVE-2018-9463 
In sw49408_irq_runtime_engine_debug of touch_sw49408.c, there is a possible
    out of bounds write due to an incorrect bounds check. This could lead to
    local escalation of privilege with System execution privileges needed. User
    interaction is not needed for exploitation.
Affected products: vendor: Google
product: Android
default_status: unaffected
Published: 2024-12-04T23:40:22.862Z
CVE-2018-9464 
In multiple locations, there is a possible way to read protected files due to a missing permission check. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.
Affected products: vendor: Google
product: Android
default_status: unaffected
Published: 2025-01-17T23:14:03.492Z
CVE-2018-9465 
In task_get_unused_fd_flags of binder.c, there is a possible memory corruption due to a use after free. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation. Product: Android Versions: Android kernel Android ID: A-69164715 References: Upstream kernel.
Problem types: description: Elevation of privilege
Affected products: vendor: Google Inc.
product: Android
Published: 2018-11-06T17:00:00.000Z
CVE-2018-9466 
In the xmlSnprintfElementContent function of valid.c, there is a possible out of bounds write. This could lead to remote escalation of privilege in an unprivileged app with no additional execution privileges needed. User interaction is needed for exploitation.
Affected products: vendor: Google
product: Android
default_status: unaffected
Published: 2024-11-19T22:21:20.706Z
CVE-2018-9467 
In the getHost() function of UriTest.java, there is the possibility of incorrect web origin determination. This could lead to incorrect security decisions with no additional execution privileges needed. User interaction is not needed for exploitation.
Affected products: vendor: Google
product: Android
default_status: unaffected
Published: 2024-11-19T23:57:44.584Z
CVE-2018-9468 
In query of DownloadManager.java, there is a possible read/write of arbitrary files due to a permissions bypass. This could lead to local information disclosure and file rewriting with no additional execution privileges needed. User interaction is not needed for exploitation.
Affected products: vendor: Google
product: Android
default_status: unaffected
Published: 2024-11-20T16:51:52.139Z
CVE-2018-9469 
In multiple functions of ShortcutService.java, there is a possible creation of a spoofed shortcut due to a missing permission check. This could lead to local escalation of privilege in a privileged app with no additional execution privileges needed. User interaction is needed for exploitation.
Affected products: vendor: Google
product: Android
default_status: unaffected
Published: 2024-11-20T16:53:36.233Z
CVE-2018-9470 
In bff_Scanner_addOutPos of Scanner.c, there is a possible out-of-bounds write due to an incorrect bounds check. This could lead to remote escalation of privilege in an unprivileged app with no additional execution privileges needed. User interaction is needed for exploitation.
Affected products: vendor: Google
product: Android
default_status: unaffected
Published: 2024-11-20T17:15:09.674Z
CVE-2018-9471 
In the deserialization constructor of NanoAppFilter.java, there is a possible loss of data due to type confusion. This could lead to local escalation of privilege in the system server with no additional execution privileges needed. User interaction is not needed for exploitation.
Affected products: vendor: Google
product: Android
default_status: unaffected
Published: 2024-11-20T17:16:53.353Z
CVE-2018-9472 
In xmlMemStrdupLoc of xmlmemory.c, there is a possible out-of-bounds write due to an integer overflow. This could lead to remote code execution in an unprivileged process with no additional execution privileges needed. User interaction is needed for exploitation.
Affected products: vendor: Google
product: Android
default_status: unaffected
Published: 2024-11-20T17:24:01.971Z
CVE-2018-9473 
In ihevcd_parse_sei_payload of ihevcd_parse_headers.c, there is a possible out-of-bounds write due to an integer overflow. This could lead to remote code execution with no additional execution privileges needed. User interaction is needed for exploitation. Product: Android Versions: Android-8.0 Android ID: A-65484460
Problem types: description: Remote code execution
Affected products: vendor: Google Inc.
product: Android
Published: 2018-10-02T19:00:00.000Z
CVE-2018-9474 
In writeToParcel of MediaPlayer.java, there is a possible serialization/deserialization mismatch due to improper input validation. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.
Affected products: vendor: Google
product: Android
default_status: unaffected
Published: 2024-11-20T17:25:46.569Z
CVE-2018-9475 
In HeadsetInterface::ClccResponse of btif_hf.cc, there is a possible out of bounds stack write due to a missing bounds check. This could lead to remote escalation of privilege via Bluetooth, if the recipient has enabled SIP calls with no additional execution privileges needed. User interaction is not needed for exploitation.
Affected products: vendor: Google
product: Android
default_status: unaffected
Published: 2024-11-20T17:27:37.227Z
CVE-2018-9476 
In avrc_pars_browsing_cmd of avrc_pars_tg.cc, there is a possible use-after-free due to improper locking. This could lead to remote escalation of privilege in the Bluetooth service with no additional execution privileges needed. User interaction is not needed for exploitation. Product: Android Versions: Android-8.0 Android-8.1 Android ID: A-109699112
Problem types: description: Elevation of privilege
Affected products: vendor: Google Inc.
product: Android
Published: 2018-10-02T19:00:00.000Z
CVE-2018-9477 
In the development options section of the Settings app, there is a possible authentication bypass due to a missing permission check. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is needed for exploitation.
Affected products: vendor: Google
product: Android
default_status: unaffected
Published: 2024-11-20T17:28:44.954Z
CVE-2018-9478 
In process_service_attr_req and process_service_search_attr_req of sdp_server.cc, there is an out of bounds write due to a missing bounds check. This could lead to remote code execution with no additional execution privileges needed.  User interaction is not needed for exploitation.
Affected products: vendor: Google
product: Android
default_status: unaffected
Published: 2024-11-20T17:30:49.093Z
CVE-2018-9479 
In process_service_attr_req and process_service_search_attr_req of sdp_server.cc, there is an out of bounds write due to a missing bounds check. This could lead to remote code execution with no additional execution privileges needed.  User interaction is not needed for exploitation.
Affected products: vendor: Google
product: Android
default_status: unaffected
Published: 2024-11-20T17:37:56.046Z
CVE-2018-9480 
In bta_hd_get_report_act of bta_hd_act.cc, there is a possible out-of-bounds read due to improper input validation. This could lead to remote information disclosure in the Bluetooth service with no additional execution privileges needed. User interaction is not needed for exploitation.
Affected products: vendor: Google
product: Android
default_status: unaffected
Published: 2024-11-20T17:39:03.431Z
CVE-2018-9481 
In bta_hd_set_report_act of bta_hd_act.cc, there is a possible out-of-bounds read due to an integer overflow. This could lead to remote information disclosure in the Bluetooth service with no additional execution privileges needed. User interaction is not needed for exploitation.
Affected products: vendor: Google
product: Android
default_status: unaffected
Published: 2024-11-20T17:40:25.846Z
CVE-2018-9482 
In intr_data_copy_cb of btif_hd.cc, there is a possible out of bounds read due to an integer overflow. This could lead to local information disclosure in the Bluetooth service with no additional execution privileges needed. User interaction is not needed for exploitation.
Affected products: vendor: Google
product: Android
default_status: unaffected
Published: 2024-11-20T17:41:49.187Z
CVE-2018-9483 
In bta_dm_remove_sec_dev_entry of bta_dm_act.cc, there is a possible out of bounds read due to a use after free. This could lead to remote information disclosure over bluetooth with no additional execution privileges needed. User interaction is not needed for exploitation.
Affected products: vendor: Google
product: Android
default_status: unaffected
Published: 2024-11-20T17:43:28.756Z
CVE-2018-9484 
In l2cu_send_peer_config_rej of l2c_utils.cc, there is a possible out of bounds read due to a missing bounds check. This could lead to remote information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation.
Affected products: vendor: Google
product: Android
default_status: unaffected
Published: 2024-11-20T17:45:25.547Z
CVE-2018-9485 
In l2cble_process_sig_cmd of l2c_ble.cc, there is a possible out of bounds read due to a missing bounds check. This could lead to remote information disclosure over bluetooth with no additional execution privileges needed. User interaction is not needed for exploitation.
Affected products: vendor: Google
product: Android
default_status: unaffected
Published: 2024-11-20T17:47:28.369Z
CVE-2018-9486 
In hidh_l2cif_data_ind of hidh_conn.cc, there is a possible out of bounds read due to a missing bounds check. This could lead to local information disclosure over bluetooth with no additional execution privileges needed. User interaction is not needed for exploitation.
Affected products: vendor: Google
product: Android
default_status: unaffected
Published: 2024-11-20T17:49:09.777Z
CVE-2018-9487 
In setVpnForcedLocked of Vpn.java, there is a possible blocking of internet traffic through vpn due to a bad uid check. This could lead to local denial of service with no additional execution privileges needed. User interaction is needed for exploitation.
Affected products: vendor: Google
product: Android
default_status: unaffected
Published: 2024-11-20T17:50:13.832Z
CVE-2018-9488 
In the SELinux permissions of crash_dump.te, there is a permissions bypass due to a missing restriction. This could lead to a local escalation of privilege, with System privileges needed. User interaction is not needed for exploitation. Product: Android Versions: Android-8.0 Android-8.1 Android-9.0 Android ID: A-110107376.
Problem types: description: Elevation of privilege
Affected products: vendor: Google Inc.
product: Android
Published: 2018-11-06T17:00:00.000Z
CVE-2018-9489 
When wifi is switched, function sendNetworkStateChangeBroadcast of WifiStateMachine.java broadcasts an intent including detailed wifi network information. This could lead to information disclosure with no execution privileges needed. User interaction is not needed for exploitation. Product: Android Versions: Android-7.0 Android-7.1.1 Android-7.1.2 Android-8.0 Android-8.1 Android-9.0 Android ID: A-77286245.
Problem types: description: Information Disclosure
Affected products: vendor: Google Inc.
product: Android
Published: 2018-11-06T17:00:00.000Z
CVE-2018-9490 
In CollectValuesOrEntriesImpl of elements.cc, there is possible remote code execution due to type confusion. This could lead to remote escalation of privilege with no additional execution privileges needed. User interaction is needed for exploitation. Product: Android. Versions: Android-7.0 Android-7.1.1 Android-7.1.2 Android-8.0 Android-8.1 Android-9.0 Android ID: A-111274046
Problem types: description: Elevation of privilege
Affected products: vendor: Google Inc.
product: Android
Published: 2018-10-02T19:00:00.000Z
CVE-2018-9491 
In AMediaCodecCryptoInfo_new of NdkMediaCodec.cpp, there is a possible out-of-bounds write due to an integer overflow. This could lead to remote code execution in external apps with no additional execution privileges needed. User interaction is needed for exploitation. Product: Android Versions: Android-7.0 Android-7.1.1 Android-7.1.2 Android-8.0 Android-8.1 Android-9.0 Android ID: A-111603051
Problem types: description: Remote code execution
Affected products: vendor: Google Inc.
product: Android
Published: 2018-10-02T19:00:00.000Z
CVE-2018-9492 
In checkGrantUriPermissionLocked of ActivityManagerService.java, there is a possible permissions bypass. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation. Product: Android Versions: Android-8.0 Android-8.1 Android-9.0 Android ID: A-111934948
Problem types: description: Elevation of privilege
Affected products: vendor: Google Inc.
product: Android
Published: 2018-10-02T19:00:00.000Z
CVE-2018-9493 
In the content provider of the download manager, there is a possible SQL injection due to improper input validation. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation. Product: Android Versions: Android-7.0 Android-7.1.1 Android-7.1.2 Android-8.0 Android-8.1 Android-9.0 Android ID: A-111085900
Problem types: description: Information disclosure
Affected products: vendor: Google Inc.
product: Android
Published: 2018-10-02T19:00:00.000Z
CVE-2018-9496 
In ixheaacd_real_synth_fft_p3 of ixheaacd_esbr_fft.c there is a possible out of bounds write due to a missing bounds check. This could lead to remote code execution with no additional execution privileges needed. User interaction is needed for exploitation. Product: Android Versions: Android-9.0 Android ID: A-110769924
Problem types: description: Remote code execution
Affected products: vendor: Google Inc.
product: Android
Published: 2018-10-02T19:00:00.000Z
CVE-2018-9497 
In impeg2_fmt_conv_yuv420p_to_yuv420sp_uv_av8 of impeg2_format_conv.s there is a possible out of bounds write due to missing bounds check. This could lead to remote code execution with no additional execution privileges needed. User interaction is needed for exploitation. Product: Android Versions: Android-7.0 Android-7.1.1 Android-7.1.2 Android-8.0 Android-8.1 Android-9.0 Android ID: A-74078669
Problem types: description: Remote code execution
Affected products: vendor: Google Inc.
product: Android
Published: 2018-10-02T19:00:00.000Z
CVE-2018-9498 
In SkSampler::Fill of SkSampler.cpp, there is a possible out of bounds write due to an integer overflow. This could lead to remote code execution with no additional execution privileges needed. User interaction is needed for exploitation. Product: Android Versions: Android-7.0 Android-7.1.1 Android-7.1.2 Android-8.0 Android-8.1 Android ID: A-78354855
Problem types: description: Remote code execution
Affected products: vendor: Google Inc.
product: Android
Published: 2018-10-02T19:00:00.000Z
CVE-2018-9499 
In readVector of iCrypto.cpp, there is a possible invalid read due to uninitialized data. This could lead to local information disclosure from the DRM server with no additional execution privileges needed. User interaction is not needed for exploitation. Product: Android Versions: Android-7.0 Android-7.1.1 Android-7.1.2 Android-8.0 Android-8.1 Android-9.0 Android ID: A-79218474
Problem types: description: Information disclosure
Affected products: vendor: Google Inc.
product: Android
Published: 2018-10-02T19:00:00.000Z
CVE-2018-9501 
In the SetupWizard, there is a possible Factory Reset Protection bypass due to a permissions bypass. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation. Product: Android Versions: Android-7.0 Android-7.1.1 Android-7.1.2 Android-8.0 Android-8.1 Android-9.0 Android ID: A-110034419
Problem types: description: Elevation of privilege
Affected products: vendor: Google Inc.
product: Android
Published: 2018-10-02T19:00:00.000Z
CVE-2018-9502 
In rfc_process_mx_message of rfc_ts_frames.cc, there is a possible out-of-bounds read due to a missing bounds check. This could lead to remote information disclosure in the Bluetooth service with no additional execution privileges needed. User interaction is not needed for exploitation. Product: Android Versions: Android-7.0 Android-7.1.1 Android-7.1.2 Android-8.0 Android-8.1 Android-9.0 Android ID: A-111936792
Problem types: description: Information disclosure
Affected products: vendor: Google Inc.
product: Android
Published: 2018-10-02T19:00:00.000Z
CVE-2018-9503 
In rfc_process_mx_message of rfc_ts_frames.cc, there is a possible out of bounds read due to a missing bounds check. This could lead to remote information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation. Product: Android Versions: Android-7.0 Android-7.1.1 Android-7.1.2 Android-8.0 Android-8.1 Android-9.0 Android ID: A-80432928
Problem types: description: Information disclosure
Affected products: vendor: Google Inc.
product: Android
Published: 2018-10-02T19:00:00.000Z
CVE-2018-9504 
In sdp_copy_raw_data of sdp_discovery.cc, there is a possible out of bounds write due to an incorrect bounds check. This could lead to remote code execution over bluetooth with no additional execution privileges needed. User interaction is not needed for exploitation. Product: Android Versions: Android-7.0 Android-7.1.1 Android-7.1.2 Android-8.0 Android-8.1 Android-9.0 Android ID: A-110216176
Problem types: description: Remote code execution
Affected products: vendor: Google Inc.
product: Android
Published: 2018-10-02T19:00:00.000Z
CVE-2018-9505 
In mca_ccb_hdl_req of mca_cact.cc, there is a possible out of bounds read due to a missing bounds check. This could lead to remote information disclosure over Bluetooth with no additional execution privileges needed. User interaction is not needed for exploitation. Product: Android Versions: Android-7.0 Android-7.1.1 Android-7.1.2 Android-8.0 Android-8.1 Android-9.0 Android ID: A-110791536
Problem types: description: Information disclosure
Affected products: vendor: Google Inc.
product: Android
Published: 2018-10-02T19:00:00.000Z
CVE-2018-9506 
In avrc_msg_cback of avrc_api.cc, there is a possible out-of-bound read due to a missing bounds check. This could lead to remote information disclosure over Bluetooth with no additional execution privileges needed. User interaction is not needed for exploitation. Product: Android Versions: Android-7.0 Android-7.1.1 Android-7.1.2 Android-8.0 Android-8.1 Android-9.0 Android ID: A-111803925
Problem types: description: Information disclosure
Affected products: vendor: Google Inc.
product: Android
Published: 2018-10-02T19:00:00.000Z
CVE-2018-9507 
In bta_av_proc_meta_cmd of bta_av_act.cc, there is a possible out of bounds read due to an incorrect bounds check. This could lead to remote information disclosure over Bluetooth with no additional execution privileges needed. User interaction is not needed for exploitation. Product: Android Versions: Android-7.0 Android-7.1.1 Android-7.1.2 Android-8.0 Android-8.1 Android-9.0 Android ID: A-111893951
Problem types: description: Information disclosure
Affected products: vendor: Google Inc.
product: Android
Published: 2018-10-02T19:00:00.000Z