rainbutterfly/cve_corpus huggingface dataset:
CVE-2020-0068 
In crus_afe_get_param of msm-cirrus-playback.c, there is a possible out of bounds read due to an integer overflow. This could lead to local information disclosure with System execution privileges needed. User interaction is not needed for exploitation.Product: Android. Versions: Android kernel. Android ID: A-139354541
Problem types: description: Information disclosure
Affected products: vendor: n/a
product: Android
Published: 2020-04-17T18:04:40.000Z
CVE-2020-0069 
In the ioctl handlers of the Mediatek Command Queue driver, there is a possible out of bounds write due to insufficient input sanitization and missing SELinux restrictions. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android kernelAndroid ID: A-147882143References: M-ALPS04356754
Problem types: description: Elevation of privilege
Affected products: vendor: n/a
product: Android
Published: 2020-03-10T19:56:37.000Z
CVE-2020-0070 
In rw_t2t_update_lock_attributes of rw_t2t_ndef.cc, there is a possible out of bounds write due to a missing bounds check. This could lead to remote code execution over NFC with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-8.0 Android-8.1 Android-9 Android-10Android ID: A-148159613
Problem types: description: Remote code execution
Affected products: vendor: n/a
product: Android
Published: 2020-04-17T18:19:57.000Z
CVE-2020-0071 
In rw_t2t_extract_default_locks_info of rw_t2t_ndef.cc, there is a possible out of bounds write due to a missing bounds check. This could lead to remote code execution over NFC with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-8.0 Android-8.1 Android-9 Android-10Android ID: A-147310721
Problem types: description: Remote code execution
Affected products: vendor: n/a
product: Android
Published: 2020-04-17T18:20:12.000Z
CVE-2020-0072 
In rw_t2t_handle_tlv_detect_rsp of rw_t2t_ndef.cc, there is a possible out of bounds write due to a missing bounds check. This could lead to remote code execution over NFC with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-8.0 Android-8.1 Android-9 Android-10Android ID: A-147310271
Problem types: description: Remote code execution
Affected products: vendor: n/a
product: Android
Published: 2020-04-17T18:20:21.000Z
CVE-2020-0073 
In rw_t2t_handle_tlv_detect_rsp of rw_t2t_ndef.cc, there is a possible out of bounds write due to a missing bounds check. This could lead to remote code execution over NFC with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-8.0 Android-8.1 Android-9 Android-10Android ID: A-147309942
Problem types: description: Remote code execution
Affected products: vendor: n/a
product: Android
Published: 2020-04-17T18:20:28.000Z
CVE-2020-0074 
In verifyIntentFiltersIfNeeded of PackageManagerService.java, there is a possible settings bypass allowing an app to become the default handler for arbitrary domains. This could lead to local escalation of privilege with User execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-11 Android-8.0 Android-8.1 Android-9 Android-10Android ID: A-146204120
Problem types: description: Elevation of privilege
Affected products: vendor: n/a
product: Android
Published: 2020-09-17T15:21:14.000Z
CVE-2020-0075 
In set_shared_key of the FPC IRIS TrustZone app, there is a possible out of bounds read due to a missing bounds check. This could lead to local information disclosure with System execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android kernelAndroid ID: A-146057864
Problem types: description: Information disclosure
Affected products: vendor: n/a
product: Android
Published: 2020-04-17T18:21:14.000Z
CVE-2020-0076 
In get_auth_result of the FPC IRIS TrustZone app, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android kernelAndroid ID: A-146056878
Problem types: description: Elevation of privilege
Affected products: vendor: n/a
product: Android
Published: 2020-04-17T18:21:06.000Z
CVE-2020-0077 
In authorize_enroll of the FPC IRIS TrustZone app, there is a possible out of bounds read due to a missing bounds check. This could lead to local information disclosure with System execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android kernelAndroid ID: A-146055840
Problem types: description: Information disclosure
Affected products: vendor: n/a
product: Android
Published: 2020-04-17T18:21:21.000Z
CVE-2020-0078 
In releaseSecureStops of DrmPlugin.cpp, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-9 Android-10Android ID: A-144766455
Problem types: description: Elevation of privilege
Affected products: vendor: n/a
product: Android
Published: 2020-04-17T18:19:36.000Z
CVE-2020-0079 
In decrypt_1_2 of CryptoPlugin.cpp, there is a possible out of bounds write due to stale pointer. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-9 Android-10Android ID: A-144506242
Problem types: description: Elevation of privilege
Affected products: vendor: n/a
product: Android
Published: 2020-04-17T18:19:43.000Z
CVE-2020-0080 
In onOpActiveChanged and related methods of AppOpsControllerImpl.java, there is a possible way to display an app overlaying other apps without the notification icon that it's overlaying. This could lead to local escalation of privilege with User execution privileges needed. User interaction is needed for exploitation.Product: AndroidVersions: Android-10Android ID: A-144092031
Problem types: description: Elevation of privilege
Affected products: vendor: n/a
product: Android
Published: 2020-04-17T18:19:01.000Z
CVE-2020-0081 
In finalize of AssetManager.java, there is possible memory corruption due to a double free. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-8.0 Android-8.1 Android-9 Android-10Android ID: A-144028297
Problem types: description: Elevation of privilege
Affected products: vendor: n/a
product: Android
Published: 2020-04-17T18:19:12.000Z
CVE-2020-0082 
In ExternalVibration of ExternalVibration.java, there is a possible activation of an arbitrary intent due to unsafe deserialization. This could lead to local escalation of privilege to system_server with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-10Android ID: A-140417434
Problem types: description: Elevation of privilege
Affected products: vendor: n/a
product: Android
Published: 2020-04-17T18:19:29.000Z
CVE-2020-0083 
In setRequirePmfInternal of sta_network.cpp, there is a possible default value being improperly applied due to a logic error. This could lead to remote denial of service with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-10Android ID: A-142797954
Problem types: description: Denial of service
Affected products: vendor: n/a
product: Android
Published: 2020-03-10T20:01:06.000Z
CVE-2020-0084 
In several functions of NotificationManagerService.java, there are missing permission checks. This could lead to local escalation of privilege by creating fake system notifications with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-10Android ID: A-143339775
Problem types: description: Elevation of privilege
Affected products: vendor: n/a
product: Android
Published: 2020-03-10T20:03:14.000Z
CVE-2020-0085 
In setBluetoothTethering of PanService.java, there is a possible permission bypass due to a missing permission check. This could lead to local escalation of privilege to activate tethering with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-10Android ID: A-134487438
Problem types: description: Elevation of privilege
Affected products: vendor: n/a
product: Android
Published: 2020-03-10T20:03:53.000Z
CVE-2020-0086 
In readCString of Parcel.cpp, there is a possible out of bounds write due to an integer overflow. This could lead to arbitrary code execution if IntSan were not enabled, which it is by default. No additional execution privileges are required. User interaction is not needed for exploitation. Product: Android Versions: Android-10 Android ID: A-131859347
Problem types: description: Elevation of privilege
Affected products: vendor: n/a
product: Android
Published: 2020-03-15T21:15:47.000Z
CVE-2020-0087 
In getProcessPss of ActivityManagerService.java, there is a possible side channel information disclosure. This could lead to local information disclosure with no additional execution privileges needed. User interaction is needed for exploitation.Product: AndroidVersions: Android-10Android ID: A-127989044
Problem types: description: Information disclosure
Affected products: vendor: n/a
product: Android
Published: 2020-03-10T20:03:17.000Z
CVE-2020-0088 
In parseTrackFragmentRun of MPEG4Extractor.cpp, there is possible resource exhaustion due to improper input validation. This could lead to remote denial of service with no additional execution privileges needed. User interaction is needed for exploitation.Product: AndroidVersions: Android-10Android ID: A-124389881
Problem types: description: Denial of service
Affected products: vendor: n/a
product: Android
Published: 2020-03-15T21:16:41.000Z
CVE-2020-0089 
In the audio server, there is a missing permission check. This could lead to local escalation of privilege regarding audio settings with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-11Android ID: A-137015603
Problem types: description: Elevation of privilege
Affected products: vendor: n/a
product: Android
Published: 2020-09-18T14:52:32.000Z
CVE-2020-0090 
An improper authorization in the receiver component of Email.Product: AndroidVersions: Android SoCAndroid ID: A-149813048
Problem types: description: improper authorization
Affected products: vendor: n/a
product: Android
Published: 2020-05-14T20:12:22.000Z
CVE-2020-0091 
In mnld, an incorrect configuration in driver_cfg of mnld for meta factory mode.Product: AndroidVersions: Android SoCAndroid ID: A-149808700
Problem types: description: incorrect configuration
Affected products: vendor: n/a
product: Android
Published: 2020-05-14T20:12:15.000Z
CVE-2020-0092 
In setHideSensitive of NotificationStackScrollLayout.java, there is a possible disclosure of sensitive notification content due to a permissions bypass. This could lead to local information disclosure with no additional execution privileges needed. User interaction is needed for exploitation.Product: AndroidVersions: Android-10Android ID: A-145135488
Problem types: description: Information disclosure
Affected products: vendor: n/a
product: Android
Published: 2020-05-14T20:08:49.000Z
CVE-2020-0093 
In exif_data_save_data_entry of exif-data.c, there is a possible out of bounds read due to a missing bounds check. This could lead to local information disclosure with no additional execution privileges needed. User interaction is needed for exploitation.Product: AndroidVersions: Android-8.0 Android-8.1 Android-9 Android-10Android ID: A-148705132
Problem types: description: Information disclosure
Affected products: vendor: n/a
product: Android
Published: 2020-05-14T20:10:39.000Z
CVE-2020-0094 
In setImageHeight and setImageWidth of ExifUtils.cpp, there is a possible out of bounds write due to an incorrect bounds check. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-9 Android-10Android ID: A-148223871
Problem types: description: Elevation of privilege
Affected products: vendor: n/a
product: Android
Published: 2020-05-14T20:10:26.000Z
CVE-2020-0096 
In startActivities of ActivityStartController.java, there is a possible escalation of privilege due to a confused deputy. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-8.0 Android-8.1 Android-9Android ID: A-145669109
Problem types: description: Elevation of privilege
Affected products: vendor: n/a
product: Android
Published: 2020-05-14T20:09:51.000Z
CVE-2020-0097 
In various methods of PackageManagerService.java, there is a possible permission bypass due to a missing condition for system apps. This could lead to local escalation of privilege with User privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-9 Android-10Android ID: A-145981139
Problem types: description: Elevation of privilege
Affected products: vendor: n/a
product: Android
Published: 2020-05-14T20:09:59.000Z
CVE-2020-0098 
In navigateUpToLocked of ActivityStack.java, there is a possible permission bypass due to a confused deputy. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-10 Android-8.0 Android-8.1 Android-9Android ID: A-144285917
Problem types: description: Elevation of privilege
Affected products: vendor: n/a
product: Android
Published: 2020-05-14T20:08:31.000Z
CVE-2020-0099 
In addWindow of WindowManagerService.java, there is a possible window overlay attack due to an insecure default value. This could lead to local escalation of privilege via tapjacking with no additional execution privileges needed. User interaction is needed for exploitation.Product: AndroidVersions: Android-8.0 Android-8.1 Android-9 Android-10Android ID: A-141745510
Problem types: description: Elevation of privilege
Affected products: vendor: n/a
product: Android
Published: 2020-12-14T21:49:26.000Z
CVE-2020-0100 
In onTransact of IHDCP.cpp, there is a possible out of bounds read due to incorrect error handling. This could lead to local information disclosure of data from a privileged process with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-8.1 Android-8.0Android ID: A-150156584
Problem types: description: Information disclosure
Affected products: vendor: n/a
product: Android
Published: 2020-05-14T20:12:37.000Z
CVE-2020-0101 
In BnCrypto::onTransact of ICrypto.cpp, there is a possible information disclosure due to uninitialized data. This could lead to local information disclosure with System execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-8.0 Android-8.1 Android-9 Android-10Android ID: A-144767096
Problem types: description: Information disclosure
Affected products: vendor: n/a
product: Android
Published: 2020-05-14T20:08:43.000Z
CVE-2020-0102 
In GattServer::SendResponse of gatt_server.cc, there is a possible out of bounds write due to an incorrect bounds check. This could lead to local escalation of privilege with User execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-8.0 Android-8.1 Android-9 Android-10Android ID: A-143231677
Problem types: description: Elevation of privilege
Affected products: vendor: n/a
product: Android
Published: 2020-05-14T20:08:17.000Z
CVE-2020-0103 
In a2dp_aac_decoder_cleanup of a2dp_aac_decoder.cc, there is a possible invalid free due to memory corruption. This could lead to remote code execution with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-10 Android-9Android ID: A-148107188
Problem types: description: Remote code execution
Affected products: vendor: n/a
product: Android
Published: 2020-05-14T20:10:14.000Z
CVE-2020-0104 
In onShowingStateChanged of KeyguardStateMonitor.java, there is a possible inappropriate read due to a logic error. This could lead to local information disclosure of keyguard-protected data with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-9 Android-10Android ID: A-144430870
Problem types: description: Information disclosure
Affected products: vendor: n/a
product: Android
Published: 2020-05-14T20:08:37.000Z
CVE-2020-0105 
In onKeyguardVisibilityChanged of key_store_service.cpp, there is a missing permission check. This could lead to local escalation of privilege, allowing apps to use keyguard-bound keys when the screen is locked, with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-9 Android-10Android ID: A-144285084
Problem types: description: Elevation of privilege
Affected products: vendor: n/a
product: Android
Published: 2020-05-14T20:08:24.000Z
CVE-2020-0106 
In getCellLocation of PhoneInterfaceManager.java, there is a possible permission bypass due to a missing SDK version check. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-10Android ID: A-148414207
Problem types: description: Information disclosure
Affected products: vendor: n/a
product: Android
Published: 2020-05-14T20:10:32.000Z
CVE-2020-0107 
In getUiccCardsInfo of PhoneInterfaceManager.java, there is a possible permissions bypass due to improper input validation. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-10Android ID: A-146570216
Problem types: description: Information disclosure
Affected products: vendor: n/a
product: Android
Published: 2020-07-17T20:08:17.000Z
CVE-2020-0108 
In postNotification of ServiceRecord.java, there is a possible bypass of foreground process restrictions due to an uncaught exception. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-10 Android-8.1 Android-9Android ID: A-140108616
Problem types: description: Elevation of privilege
Affected products: vendor: n/a
product: Android
Published: 2020-08-11T19:25:49.000Z
CVE-2020-0109 
In simulatePackageSuspendBroadcast of NotificationManagerService.java, there is a missing permission check. This could lead to local escalation of privilege by creating fake system notifications with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-9 Android-10Android ID: A-148059175
Problem types: description: Elevation of privilege
Affected products: vendor: n/a
product: Android
Published: 2020-05-14T20:10:08.000Z
CVE-2020-0110 
In psi_write of psi.c, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android kernelAndroid ID: A-148159562References: Upstream kernel
Problem types: description: Elevation of privilege
Affected products: vendor: n/a
product: Android
Published: 2020-05-14T20:10:20.000Z
CVE-2020-0113 
In sendCaptureResult of Camera3OutputUtils.cpp, there is a possible out of bounds read due to a use after free. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-10 Android-9Android ID: A-150944913
Problem types: description: Information disclosure
Affected products: vendor: n/a
product: Android
Published: 2020-06-10T17:12:05.000Z
CVE-2020-0114 
In onCreateSliceProvider of KeyguardSliceProvider.java, there is a possible confused deputy due to a PendingIntent error. This could lead to local escalation of privilege that allows actions performed as the System UI, with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-10Android ID: A-147606347
Problem types: description: Elevation of privilege
Affected products: vendor: n/a
product: Android
Published: 2020-06-10T17:10:57.000Z
CVE-2020-0115 
In verifyIntentFiltersIfNeeded of PackageManagerService.java, there is a possible settings bypass allowing an app to become the default handler for arbitrary domains. This could lead to local escalation of privilege with User execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-8.1 Android-9 Android-10 Android-8.0Android ID: A-150038428
Problem types: description: Elevation of privilege
Affected products: vendor: n/a
product: Android
Published: 2020-06-10T17:11:32.000Z
CVE-2020-0116 
In checkSystemLocationAccess of LocationAccessPolicy.java, there is a possible bypass of user profile isolation due to a permissions bypass. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-10Android ID: A-151330809
Problem types: description: Information disclosure
Affected products: vendor: n/a
product: Android
Published: 2020-06-10T17:12:22.000Z
CVE-2020-0117 
In aes_cmac of aes_cmac.cc, there is a possible out of bounds write due to an integer overflow. This could lead to remote code execution in the bluetooth server with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-8.1 Android-9 Android-10 Android-8.0Android ID: A-151155194
Problem types: description: Remote code execution
Affected products: vendor: n/a
product: Android
Published: 2020-06-10T17:12:15.000Z
CVE-2020-0118 
In addListener of RegionSamplingThread.cpp, there is a possible out of bounds write due to improper input validation. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is needed for exploitation.Product: AndroidVersions: Android-10Android ID: A-150904694
Problem types: description: Elevation of privilege
Affected products: vendor: n/a
product: Android
Published: 2020-06-10T17:11:49.000Z
CVE-2020-0119 
In addOrUpdateNetworkInternal and related functions of WifiConfigManager.java, there is a possible man in the middle attack due to improper certificate validation. This could lead to remote information disclosure with no additional execution privileges needed. User interaction is needed for exploitation.Product: AndroidVersions: Android-10Android ID: A-150500247
Problem types: description: Information disclosure
Affected products: vendor: n/a
product: Android
Published: 2020-06-10T17:11:42.000Z
CVE-2020-0120 
In notifyErrorForPendingRequests of QCamera3HWI.cpp, there is a possible out of bounds write due to a heap buffer overflow. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-10Android ID: A-149995442
Problem types: description: Elevation of privilege
Affected products: vendor: n/a
product: Android
Published: 2020-07-17T19:51:53.000Z