rainbutterfly/cve_corpus huggingface dataset:
CVE-2021-0935 
In ip6_xmit of ip6_output.c, there is a possible out of bounds write due to a use after free. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android kernelAndroid ID: A-168607263References: Upstream kernel
Problem types: description: Elevation of privilege
Affected products: vendor: n/a
product: Android
Published: 2021-10-25T13:20:25.000Z
CVE-2021-0936 
In acc_read of f_accessory.c, there is a possible memory corruption due to a use after free. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android kernelAndroid ID: A-173789633References: Upstream kernel
Problem types: description: Elevation of privilege
Affected products: vendor: n/a
product: Android
Published: 2021-10-25T13:20:45.000Z
CVE-2021-0938 
In memzero_explicit of compiler-clang.h, there is a possible bypass of defense in depth due to uninitialized data. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android kernelAndroid ID: A-171418586References: Upstream kernel
Problem types: description: Information disclosure
Affected products: vendor: n/a
product: Android
Published: 2021-10-25T13:20:39.000Z
CVE-2021-0939 
In set_default_passthru_cfg of passthru.c, there is a possible out of bounds read due to a missing bounds check. This could lead to local information disclosure with System execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android kernelAndroid ID: A-186026549References: N/A
Problem types: description: Information disclosure
Affected products: vendor: n/a
product: Android
Published: 2021-10-25T13:20:51.000Z
CVE-2021-0940 
In TBD of TBD, there is a possible out of bounds write due to improper locking. This could lead to local escalation of privilege in the kernel with System execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android kernelAndroid ID: A-171315276References: N/A
Problem types: description: Elevation of privilege
Affected products: vendor: n/a
product: Android
Published: 2021-10-25T13:20:31.000Z
CVE-2021-0941 
In bpf_skb_change_head of filter.c, there is a possible out of bounds read due to a use after free. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android kernelAndroid ID: A-154177719References: Upstream kernel
Problem types: description: Elevation of privilege
Affected products: vendor: n/a
product: Android
Published: 2021-10-25T13:20:17.000Z
CVE-2021-0942 
The path in this case is a little bit convoluted. The end result is that via an ioctl an untrusted app can control the ui32PageIndex offset in the expression:sPA.uiAddr = page_to_phys(psOSPageArrayData->pagearray[ui32PageIndex]);With the current PoC this crashes as an OOB read. However, given that the OOB read value is ending up as the address field of a struct I think i seems plausible that this could lead to an OOB write if the attacker is able to cause the OOB read to pull an interesting kernel address. Regardless if this is a read or write, it is a High severity issue in the kernel.Product: AndroidVersions: Android SoCAndroid ID: A-238904312
Problem types: description: Elevation of privilege
Affected products: vendor: n/a
product: Android
Published: 2022-09-13T19:13:39.000Z
CVE-2021-0943 
In MMU_MapPages of TBD, there is a possible out of bounds write due to improper input validation. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android SoCAndroid ID: A-238916921
Problem types: description: Elevation of privilege
Affected products: vendor: n/a
product: Android
Published: 2022-09-13T19:14:19.000Z
CVE-2021-0945 
In _PMRCreate of the PowerVR kernel driver, a missing bounds check means it is possible to overwrite heap memory via PhysmemNewRamBackedPMR. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.
Problem types: description: Elevation of privilege
Affected products: vendor: n/a
product: Android
Published: 2023-06-15T00:00:00.000Z
CVE-2021-0946 
The method PVRSRVBridgePMRPDumpSymbolicAddr allocates puiMemspaceNameInt on the heap, fills the contents of the buffer via PMR_PDumpSymbolicAddr, and then copies the buffer to userspace. The method PMR_PDumpSymbolicAddr may fail, and if it does the buffer will be left uninitialized and despite the error will still be copied to userspace. Kernel leak of uninitialized heap data with no privs required.Product: AndroidVersions: Android SoCAndroid ID: A-236846966
Problem types: description: Information disclosure
Affected products: vendor: n/a
product: Android
Published: 2022-08-24T13:38:55.000Z
CVE-2021-0947 
The method PVRSRVBridgeTLDiscoverStreams allocates puiStreamsInt on the heap, fills the contents of the buffer via TLServerDiscoverStreamsKM, and then copies the buffer to userspace. The method TLServerDiscoverStreamsKM may fail for several reasons including invalid sizes. If this method fails the buffer will be left uninitialized and despite the error will still be copied to userspace. Kernel leak of uninitialized heap data with no privs required.Product: AndroidVersions: Android SoCAndroid ID: A-236838960
Problem types: description: Information disclosure
Affected products: vendor: n/a
product: Android
Published: 2022-08-24T13:40:05.000Z
CVE-2021-0948 
The PVRSRVBridgeGetMultiCoreInfo ioctl in the PowerVR kernel driver can return uninitialized kernel memory to user space. The contents of this memory could contain sensitive information.


Problem types: description: Information disclosure
Affected products: vendor: Google
product: Android
default_status: unaffected
Published: 2023-07-12T23:16:21.465Z
CVE-2021-0951 
In DevmemIntHeapAcquire of TBD, there is a possible arbitrary code execution due to an integer overflow. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android SoCAndroid ID: A-242345085
Problem types: description: Elevation of privilege
Affected products: vendor: n/a
product: Android
Published: 2022-10-11T00:00:00.000Z
CVE-2021-0952 
In doCropPhoto of PhotoSelectionHandler.java, there is a possible permission bypass due to a confused deputy. This could lead to local information disclosure of user's contacts with no additional execution privileges needed. User interaction is needed for exploitation.Product: AndroidVersions: Android-10 Android-11 Android-12 Android-9Android ID: A-195748381
Problem types: description: Information disclosure
Affected products: vendor: n/a
product: Android
Published: 2021-12-15T18:05:45.000Z
CVE-2021-0953 
In setOnClickActivityIntent of SearchWidgetProvider.java, there is a possible way to access contacts and history bookmarks without permission due to an unsafe PendingIntent. This could lead to local escalation of privilege with User execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-10 Android-11 Android-12 Android-9Android ID: A-184046278
Problem types: description: Elevation of privilege
Affected products: vendor: n/a
product: Android
Published: 2021-12-15T18:05:41.000Z
CVE-2021-0954 
In ResolverActivity, there is a possible user interaction bypass due to a tapjacking/overlay attack. This could lead to local escalation of privilege with User execution privileges needed. User interaction is needed for exploitation.Product: AndroidVersions: Android-10 Android-11Android ID: A-143559931
Problem types: description: Elevation of privilege
Affected products: vendor: n/a
product: Android
Published: 2021-12-15T18:05:39.000Z
CVE-2021-0955 
In pf_write_buf of FuseDaemon.cpp, there is possible memory corruption due to a race condition. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-11Android ID: A-192085766
Problem types: description: Elevation of privilege
Affected products: vendor: n/a
product: Android
Published: 2021-12-15T18:05:43.000Z
CVE-2021-0956 
In NfcTag::discoverTechnologies (activation) of NfcTag.cpp, there is a possible out of bounds write due to an incorrect bounds check. This could lead to remote escalation of privilege with no additionalSystem execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-11 Android-12Android ID: A-189942532
Problem types: description: Elevation of privilege
Affected products: vendor: n/a
product: Android
Published: 2021-12-15T18:05:42.000Z
CVE-2021-0957 
In NotificationStackScrollLayout of NotificationStackScrollLayout.java, there is a possible way to bypass Factory Reset Protections. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-10 Android-11 Android-12Android ID: A-193149550
Problem types: description: Elevation of privilege
Affected products: vendor: n/a
product: Android
Published: 2022-03-16T14:04:05.000Z
CVE-2021-0958 
In update of km_compat.cpp, there is a possible loss of potentially sensitive data due to a logic error in the code. This could lead to local denial of service with User execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-11 Android-12Android ID: A-200041882
Problem types: description: Denial of service
Affected products: vendor: n/a
product: Android
Published: 2021-12-15T18:05:51.000Z
CVE-2021-0959 
In jit_memory_region.cc, there is a possible bypass of memory restrictions due to a logic error in the code. This could lead to local escalation of privilege with User execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-12Android ID: A-200284993
Problem types: description: Elevation of privilege
Affected products: vendor: n/a
product: Android
Published: 2022-01-14T19:10:49.000Z
CVE-2021-0961 
In quota_proc_write of xt_quota2.c, there is a possible way to read kernel memory due to uninitialized data. This could lead to local information disclosure with System execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android kernelAndroid ID: A-196046570References: Upstream kernel
Problem types: description: Information disclosure
Affected products: vendor: n/a
product: Android
Published: 2021-12-15T18:05:46.000Z
CVE-2021-0963 
In onCreate of KeyChainActivity.java, there is a possible way to use an app certificate stored in keychain due to a tapjacking/overlay attack. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is needed for exploitation.Product: AndroidVersions: Android-10 Android-11 Android-12 Android-9Android ID: A-199754277
Problem types: description: Elevation of privilege
Affected products: vendor: n/a
product: Android
Published: 2021-12-15T18:05:49.000Z
CVE-2021-0964 
In C2SoftMP3::process() of C2SoftMp3Dec.cpp, there is a possible out of bounds write due to a heap buffer overflow. This could lead to remote information disclosure with no additional execution privileges needed. User interaction is needed for exploitation.Product: AndroidVersions: Android-10 Android-11 Android-12 Android-9Android ID: A-193363621
Problem types: description: Information disclosure
Affected products: vendor: n/a
product: Android
Published: 2021-12-15T18:05:43.000Z
CVE-2021-0965 
In AndroidManifest.xml of Settings, there is a possible pairing of a Bluetooth device without user's consent due to a missing permission check. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-10 Android-11 Android-12 Android-9Android ID: A-194300867
Problem types: description: Elevation of privilege
Affected products: vendor: n/a
product: Android
Published: 2021-12-15T18:05:44.000Z
CVE-2021-0966 
In code generated by BuildParcelFields of generate_cpp.cpp, there is a possible way for a crafted parcelable to reveal uninitialized memory of a target process due to uninitialized data. This could lead to local information disclosure across Binder transactions with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-11 Android-12Android ID: A-198346478
Problem types: description: Information disclosure
Affected products: vendor: n/a
product: Android
Published: 2021-12-15T18:05:48.000Z
CVE-2021-0967 
In vorbis_book_decodev_set of codebook.c, there is a possible out of bounds write due to a missing bounds check. This could lead to remote information disclosure with no additional execution privileges needed. User interaction is needed for exploitation.Product: AndroidVersions: Android-10 Android-11 Android-12 Android-9Android ID: A-199065614
Problem types: description: Remote code execution
Affected products: vendor: n/a
product: Android
Published: 2021-12-15T18:05:49.000Z
CVE-2021-0968 
In osi_malloc and osi_calloc of allocator.cc, there is a possible out of bounds write due to an integer overflow. This could lead to remote code execution with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-10 Android-11 Android-12 Android-9Android ID: A-197868577
Problem types: description: Remote code execution
Affected products: vendor: n/a
product: Android
Published: 2021-12-15T18:05:47.000Z
CVE-2021-0969 
In getTitle of AccessPoint.java, there is a possible unhandled exception due to a missing null check. This could lead to remote denial of service if a proximal Wi-Fi AP provides invalid information with no additional execution privileges needed. User interaction is needed for exploitation.Product: AndroidVersions: Android-10 Android-11Android ID: A-199922685
Problem types: description: Denial of service
Affected products: vendor: n/a
product: Android
Published: 2021-12-15T18:05:50.000Z
CVE-2021-0970 
In createFromParcel of GpsNavigationMessage.java, there is a possible Parcel serialization/deserialization mismatch. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-10 Android-11 Android-12 Android-9Android ID: A-196970023
Problem types: description: Elevation of privilege
Affected products: vendor: n/a
product: Android
Published: 2021-12-15T18:05:46.000Z
CVE-2021-0971 
In MPEG4Source::read of MPEG4Extractor.cpp, there is a possible out of bounds write due to a missing bounds check. This could lead to remote information disclosure with no additional execution privileges needed. User interaction is needed for exploitation.Product: AndroidVersions: Android-10 Android-11 Android-12 Android-9Android ID: A-188893559
Problem types: description: Information disclosure
Affected products: vendor: n/a
product: Android
Published: 2021-12-15T18:05:41.000Z
CVE-2021-0973 
In isFileUri of UriUtil.java, there is a possible way to bypass ignoring file://URI attachment due to improper handling of case sensitivity. This could lead to local information disclosure with no additional execution privileges needed. User interaction is needed for exploitation.Product: AndroidVersions: Android-12Android ID: A-197328178
Problem types: description: Information disclosure
Affected products: vendor: n/a
product: Android
Published: 2021-12-15T18:06:48.000Z
CVE-2021-0975 
In USB Manager, there is a possible way to determine whether an app is installed, without query permissions, due to side channel information disclosure. This could lead to local information disclosure of installed packages with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-13Android ID: A-180104273
Problem types: description: Information disclosure
Affected products: vendor: n/a
product: Android
Published: 2022-08-11T15:06:48.000Z
CVE-2021-0976 
In toBARK of floor0.c, there is a possible out of bounds read due to a missing bounds check. This could lead to remote information disclosure with no additional execution privileges needed. User interaction is needed for exploitation.Product: AndroidVersions: Android-12Android ID: A-199680600
Problem types: description: Information disclosure
Affected products: vendor: n/a
product: Android
Published: 2021-12-15T18:06:53.000Z
CVE-2021-0977 
In phNxpNHal_DtaUpdate of phNxpNciHal_dta.cc, there is a possible out of bounds write due to an incorrect bounds check. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-12Android ID: A-183487770
Problem types: description: Elevation of privilege
Affected products: vendor: n/a
product: Android
Published: 2021-12-15T18:06:05.000Z
CVE-2021-0978 
In getSerialForPackage of DeviceIdentifiersPolicyService.java, there is a possible way to determine whether an app is installed, without query permissions, due to side channel information disclosure. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-12Android ID: A-192587406
Problem types: description: Information disclosure
Affected products: vendor: n/a
product: Android
Published: 2021-12-15T18:06:24.000Z
CVE-2021-0979 
In isRequestPinItemSupported of ShortcutService.java, there is a possible cross-user leak of packages in which the default launcher supports requests to create pinned shortcuts due to a permissions bypass. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-12Android ID: A-191772737
Problem types: description: Information disclosure
Affected products: vendor: n/a
product: Android
Published: 2021-12-15T18:06:19.000Z
CVE-2021-0981 
In enqueueNotificationInternal of NotificationManagerService.java, there is a possible way to run a foreground service without showing a notification due to improper input validation. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-10 Android-11Android ID: A-191981182
Problem types: description: Elevation of privilege
Affected products: vendor: n/a
product: Android
Published: 2021-12-15T18:06:20.000Z
CVE-2021-0982 
In getOrganizationNameForUser of DevicePolicyManagerService.java, there is a possible organization name disclosure due to a missing permission check. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-12Android ID: A-192368508
Problem types: description: Information disclosure
Affected products: vendor: n/a
product: Android
Published: 2021-12-15T18:06:22.000Z
CVE-2021-0983 
In createAdminSupportIntent of DevicePolicyManagerService.java, there is a possible disclosure of information about installed device/profile owner package name due to side channel information disclosure. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-12LAndroid ID: A-192245204
Problem types: description: Information disclosure
Affected products: vendor: n/a
product: Android
Published: 2021-12-15T18:06:21.000Z
CVE-2021-0984 
In onNullBinding of ManagedServices.java, there is a possible permission bypass due to an incorrectly unbound service. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-12Android ID: A-192475653
Problem types: description: Elevation of privilege
Affected products: vendor: n/a
product: Android
Published: 2021-12-15T18:06:23.000Z
CVE-2021-0985 
In onReceive of AlertReceiver.java, there is a possible way to dismiss system dialog due to a missing permission check. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-12Android ID: A-190403923
Problem types: description: Elevation of privilege
Affected products: vendor: n/a
product: Android
Published: 2021-12-15T18:06:15.000Z
CVE-2021-0986 
In hasGrantedPolicy of DevicePolicyManagerService.java, there is a possible information disclosure about the device owner, profile owner, or device admin due to a logic error in the code. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-12Android ID: A-192247339
Problem types: description: Information disclosure
Affected products: vendor: n/a
product: Android
Published: 2021-12-15T18:06:22.000Z
CVE-2021-0987 
In getNeighboringCellInfo of PhoneInterfaceManager.java, there is a possible way to determine whether an app is installed, without query permissions, due to side channel information disclosure. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-12Android ID: A-190619791
Problem types: description: Information disclosure
Affected products: vendor: n/a
product: Android
Published: 2021-12-15T18:06:17.000Z
CVE-2021-0988 
In getLaunchedFromUid and getLaunchedFromPackage of ActivityClientController.java, there is a possible way to determine whether an app is installed, without query permissions, due to side channel information disclosure. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-12Android ID: A-191954233
Problem types: description: Information disclosure
Affected products: vendor: n/a
product: Android
Published: 2021-12-15T18:06:20.000Z
CVE-2021-0989 
In hasManageOngoingCallsPermission of TelecomServiceImpl.java, there is a possible way to determine whether an app is installed, without query permissions, due to side channel information disclosure. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-12Android ID: A-194105812
Problem types: description: Information disclosure
Affected products: vendor: n/a
product: Android
Published: 2021-12-15T18:06:34.000Z
CVE-2021-0990 
In getDeviceId of PhoneSubInfoController.java, there is a possible way to determine whether an app is installed, without query permissions, due to side channel information disclosure. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-12Android ID: A-185591180
Problem types: description: Information disclosure
Affected products: vendor: n/a
product: Android
Published: 2021-12-15T18:06:09.000Z