rainbutterfly/cve_corpus huggingface dataset:
CVE-2021-0422 
In memory management driver, there is a possible system crash due to a missing bounds check. This could lead to local denial of service with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS05403499; Issue ID: ALPS05381071.
Problem types: description: Denial of Service
Affected products: vendor: n/a
product: MT6580, MT6582E, MT6582H, MT6582T, MT6582W, MT6582_90, MT6589, MT6589TD, MT6592E, MT6592H, MT6592T, MT6592W, MT6592_90, MT6595, MT6731, MT6732, MT6735, MT6737, MT6739, MT6750, MT6750S, MT6752, MT6753, MT6755, MT6755S, MT6757, MT6757C, MT6757CD, MT6757CH, MT6758, MT6761, MT6762, MT6763, MT6765, MT6768, MT6769, MT6771, MT6779, MT6785, MT6795, MT6797, MT6799, MT6833, MT6853, MT6853T, MT6873, MT6875, MT6877, MT6883, MT6885, MT6889, MT6891, MT6893
Published: 2021-09-27T11:20:27.000Z
CVE-2021-0423 
In memory management driver, there is a possible information disclosure due to uninitialized data. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS05403499; Issue ID: ALPS05385714.
Problem types: description: Information Disclosure
Affected products: vendor: n/a
product: MT6580, MT6582E, MT6582H, MT6582T, MT6582W, MT6582_90, MT6589, MT6589TD, MT6592E, MT6592H, MT6592T, MT6592W, MT6592_90, MT6595, MT6731, MT6732, MT6735, MT6737, MT6739, MT6750, MT6750S, MT6752, MT6753, MT6755, MT6755S, MT6757, MT6757C, MT6757CD, MT6757CH, MT6758, MT6761, MT6762, MT6763, MT6765, MT6768, MT6769, MT6771, MT6779, MT6785, MT6795, MT6797, MT6799, MT6833, MT6853, MT6853T, MT6873, MT6875, MT6877, MT6883, MT6885, MT6889, MT6891, MT6893
Published: 2021-09-27T11:20:33.000Z
CVE-2021-0424 
In memory management driver, there is a possible system crash due to a missing bounds check. This could lead to local denial of service with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS05403499; Issue ID: ALPS05393787.
Problem types: description: Denial of Service
Affected products: vendor: n/a
product: MT6580, MT6582E, MT6582H, MT6582T, MT6582W, MT6582_90, MT6589, MT6589TD, MT6592E, MT6592H, MT6592T, MT6592W, MT6592_90, MT6595, MT6731, MT6732, MT6735, MT6737, MT6739, MT6750, MT6750S, MT6752, MT6753, MT6755, MT6755S, MT6757, MT6757C, MT6757CD, MT6757CH, MT6758, MT6761, MT6762, MT6763, MT6765, MT6768, MT6769, MT6771, MT6779, MT6785, MT6795, MT6797, MT6799, MT6833, MT6853, MT6853T, MT6873, MT6875, MT6877, MT6883, MT6885, MT6889, MT6891, MT6893
Published: 2021-09-27T11:20:39.000Z
CVE-2021-0425 
In memory management driver, there is a possible side channel information disclosure. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS05403499; Issue ID: ALPS05400059.
Problem types: description: Information Disclosure
Affected products: vendor: n/a
product: MT6580, MT6582E, MT6582H, MT6582T, MT6582W, MT6582_90, MT6589, MT6589TD, MT6592E, MT6592H, MT6592T, MT6592W, MT6592_90, MT6595, MT6731, MT6732, MT6735, MT6737, MT6739, MT6750, MT6750S, MT6752, MT6753, MT6755, MT6755S, MT6757, MT6757C, MT6757CD, MT6757CH, MT6758, MT6761, MT6762, MT6763, MT6765, MT6768, MT6769, MT6771, MT6779, MT6785, MT6795, MT6797, MT6799, MT6833, MT6853, MT6853T, MT6873, MT6875, MT6877, MT6883, MT6885, MT6889, MT6891, MT6893
Published: 2021-09-27T11:20:45.000Z
CVE-2021-0426 
In parsePrimaryFieldFirstUidAnnotation of LogEvent.cpp, there is a possible out of bounds write due to a heap buffer overflow. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-11Android ID: A-174485572
Problem types: description: Elevation of privilege
Affected products: vendor: n/a
product: Android
Published: 2021-04-13T18:22:52.000Z
CVE-2021-0427 
In parseExclusiveStateAnnotation of LogEvent.cpp, there is a possible out of bounds write due to a heap buffer overflow. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-11Android ID: A-174488848
Problem types: description: Elevation of privilege
Affected products: vendor: n/a
product: Android
Published: 2021-04-13T18:23:14.000Z
CVE-2021-0428 
In getSimSerialNumber of TelephonyManager.java, there is a possible way to read a trackable identifier due to a missing permission check. This could lead to local information disclosure with User execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-10Android ID: A-173421434
Problem types: description: Information disclosure
Affected products: vendor: n/a
product: Android
Published: 2021-04-13T18:20:49.000Z
CVE-2021-0429 
In pollOnce of ALooper.cpp, there is possible memory corruption due to a use after free. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-9 Android-10 Android-11 Android-8.1Android ID: A-175074139
Problem types: description: Elevation of privilege
Affected products: vendor: n/a
product: Android
Published: 2021-04-13T18:23:41.000Z
CVE-2021-0430 
In rw_mfc_handle_read_op of rw_mfc.cc, there is a possible out of bounds write due to a missing bounds check. This could lead to remote code execution via a malicious NFC packet with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-10 Android-11Android ID: A-178725766
Problem types: description: Remote code execution
Affected products: vendor: n/a
product: Android
Published: 2021-04-13T18:25:42.000Z
CVE-2021-0431 
In avrc_msg_cback of avrc_api.cc, there is a possible out of bounds read due to a missing bounds check. This could lead to remote information disclosure to a paired device with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-11 Android-8.1 Android-9 Android-10Android ID: A-174149901
Problem types: description: Information disclosure
Affected products: vendor: n/a
product: Android
Published: 2021-04-13T18:22:00.000Z
CVE-2021-0432 
In ClearPullerCacheIfNecessary and ForceClearPullerCache of StatsPullerManager.cpp, there is a possible use-after-free due to a race condition. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-11Android ID: A-173552790
Problem types: description: Elevation of privilege
Affected products: vendor: n/a
product: Android
Published: 2021-04-13T18:21:52.000Z
CVE-2021-0433 
In onCreate of DeviceChooserActivity.java, there is a possible way to bypass user consent when pairing a Bluetooth device due to a tapjacking/overlay attack. This could lead to local escalation of privilege and pairing malicious devices with no additional execution privileges needed. User interaction is needed for exploitation.Product: AndroidVersions: Android-8.1 Android-9 Android-10 Android-11Android ID: A-171221090
Problem types: description: Elevation of privilege
Affected products: vendor: n/a
product: Android
Published: 2021-04-13T18:18:49.000Z
CVE-2021-0434 
In onReceive of BluetoothPermissionRequest.java, there is a possible phishing attack allowing a malicious Bluetooth device to acquire permissions based on insufficient information presented to the user in the consent dialog. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is needed for exploitation.Product: AndroidVersions: Android-10 Android-11 Android-9Android ID: A-167403112
Problem types: description: Elevation of privilege
Affected products: vendor: n/a
product: Android
Published: 2021-12-15T18:05:17.000Z
CVE-2021-0435 
In avrc_proc_vendor_command of avrc_api.cc, there is a possible leak of heap data due to uninitialized data. This could lead to remote information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-11 Android-8.1 Android-9 Android-10Android ID: A-174150451
Problem types: description: Information disclosure
Affected products: vendor: n/a
product: Android
Published: 2021-04-13T18:22:06.000Z
CVE-2021-0436 
In CryptoPlugin::decrypt of CryptoPlugin.cpp, there is a possible out of bounds read due to integer overflow. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-8.1 Android-9 Android-10 Android-11Android ID: A-176496160
Problem types: description: Information disclosure
Affected products: vendor: n/a
product: Android
Published: 2021-04-13T18:25:27.000Z
CVE-2021-0437 
In setPlayPolicy of DrmPlugin.cpp, there is a possible double free. This could lead to local escalation of privilege in a privileged process with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-11 Android-8.1 Android-9 Android-10Android ID: A-176168330
Problem types: description: Elevation of privilege
Affected products: vendor: n/a
product: Android
Published: 2021-04-13T18:23:46.000Z
CVE-2021-0438 
In several functions of InputDispatcher.cpp, WindowManagerService.java, and related files, there is a possible tapjacking attack due to an incorrect FLAG_OBSCURED value. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is needed for exploitation.Product: AndroidVersions: Android-8.1 Android-9 Android-10Android ID: A-152064592
Problem types: description: Elevation of privilege
Affected products: vendor: n/a
product: Android
Published: 2021-04-13T18:17:25.000Z
CVE-2021-0439 
In setPowerModeWithHandle of com_android_server_power_PowerManagerService.cpp, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-11Android ID: A-174243830
Problem types: description: Elevation of privilege
Affected products: vendor: n/a
product: Android
Published: 2021-04-13T18:22:44.000Z
CVE-2021-0441 
In onCreate of PermissionActivity.java, there is a possible permission bypass due to Confusing UI. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is needed for exploitation.Product: AndroidVersions: Android-11Android ID: A-174495520
Problem types: description: Elevation of privilege
Affected products: vendor: n/a
product: Android
Published: 2021-07-14T13:43:32.000Z
CVE-2021-0442 
In updateInfo of android_hardware_input_InputApplicationHandle.cpp, there is a possible control of code flow due to a use after free. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-11Android ID: A-174768985
Problem types: description: Elevation of privilege
Affected products: vendor: n/a
product: Android
Published: 2021-04-13T18:23:35.000Z
CVE-2021-0443 
In several functions of ScreenshotHelper.java and related files, there is a possible incorrectly saved screenshot due to a race condition. This could lead to local information disclosure across user profiles with no additional execution privileges needed. User interaction is needed for exploitation.Product: AndroidVersions: Android-8.1 Android-9 Android-10 Android-11Android ID: A-170474245
Problem types: description: Information disclosure
Affected products: vendor: n/a
product: Android
Published: 2021-04-13T18:17:58.000Z
CVE-2021-0444 
In onActivityResult of QuickContactActivity.java, there is an unnecessary return of an intent. This could lead to local information disclosure of contact data with no additional execution privileges needed. User interaction is needed for exploitation.Product: AndroidVersions: Android-11 Android-8.1 Android-9 Android-10Android ID: A-178825358
Problem types: description: Information disclosure
Affected products: vendor: n/a
product: Android
Published: 2021-04-13T18:26:18.000Z
CVE-2021-0445 
In start of WelcomeActivity.java, there is a possible residual profile due to a confused deputy. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-11 Android-9Android ID: A-172322502
Problem types: description: Elevation of privilege
Affected products: vendor: n/a
product: Android
Published: 2021-04-13T18:20:19.000Z
CVE-2021-0446 
In ImportVCardActivity, there is a possible way to bypass user consent due to a tapjacking/overlay attack. This could lead to local escalation of privilege with User execution privileges needed. User interaction is needed for exploitation.Product: AndroidVersions: Android-11Android ID: A-172252122
Problem types: description: Elevation of privilege
Affected products: vendor: n/a
product: Android
Published: 2021-04-13T18:19:27.000Z
CVE-2021-0449 
In the Titan M chip firmware, there is a possible disclosure of stack memory due to uninitialized data. This could lead to local information disclosure with System execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android kernelAndroid ID: A-175117965
Problem types: description: Information disclosure
Affected products: vendor: n/a
product: Android
Published: 2021-03-10T16:13:36.000Z
CVE-2021-0450 
In the Titan M chip firmware, there is a possible disclosure of stack memory due to uninitialized data. This could lead to local information disclosure with System execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android kernelAndroid ID: A-175117880
Problem types: description: Information disclosure
Affected products: vendor: n/a
product: Android
Published: 2021-03-10T16:13:50.000Z
CVE-2021-0451 
In the Titan M chip firmware, there is a possible disclosure of stack memory due to uninitialized data. This could lead to local information disclosure with System execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android kernelAndroid ID: A-175117871
Problem types: description: Information disclosure
Affected products: vendor: n/a
product: Android
Published: 2021-03-10T16:14:17.000Z
CVE-2021-0452 
In the Titan M chip firmware, there is a possible disclosure of stack memory due to uninitialized data. This could lead to local information disclosure with System execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android kernelAndroid ID: A-175117261
Problem types: description: Information disclosure
Affected products: vendor: n/a
product: Android
Published: 2021-03-10T16:14:37.000Z
CVE-2021-0453 
In the Titan-M chip firmware, there is a possible disclosure of stack memory due to uninitialized data. This could lead to local information disclosure with System execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android kernelAndroid ID: A-175117199
Problem types: description: Information disclosure
Affected products: vendor: n/a
product: Android
Published: 2021-03-10T16:14:53.000Z
CVE-2021-0454 
In the Citadel chip firmware, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android kernelAndroid ID: A-175117047
Problem types: description: Elevation of privilege
Affected products: vendor: n/a
product: Android
Published: 2021-03-10T16:15:11.000Z
CVE-2021-0455 
In the Citadel chip firmware, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android kernelAndroid ID: A-175116439
Problem types: description: Elevation of privilege
Affected products: vendor: n/a
product: Android
Published: 2021-03-10T16:15:25.000Z
CVE-2021-0456 
In the Citadel chip firmware, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android kernelAndroid ID: A-174769927
Problem types: description: Elevation of privilege
Affected products: vendor: n/a
product: Android
Published: 2021-03-10T16:15:40.000Z
CVE-2021-0457 
In the FingerTipS touch screen driver, there is a possible out of bounds write due to a heap buffer overflow. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android kernelAndroid ID: A-157155375
Problem types: description: Elevation of privilege
Affected products: vendor: n/a
product: Android
Published: 2021-03-10T16:15:58.000Z
CVE-2021-0458 
In the FingerTipS touch screen driver, there is a possible out of bounds read due to an integer overflow. This could lead to local information disclosure with System execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android kernelAndroid ID: A-157156744
Problem types: description: Elevation of privilege
Affected products: vendor: n/a
product: Android
Published: 2021-03-10T16:17:15.000Z
CVE-2021-0459 
In fts_driver_test_write of fts_proc.c, there is a possible out of bounds read due to a missing bounds check. This could lead to local information disclosure with System execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android kernelAndroid ID: A-157154534
Problem types: description: Information disclosure
Affected products: vendor: n/a
product: Android
Published: 2021-03-10T16:17:30.000Z
CVE-2021-0460 
In the FingerTipS touch screen driver, there is a possible out of bounds read due to an integer overflow. This could lead to local information disclosure with System execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android kernelAndroid ID: A-156739245
Problem types: description: Information disclosure
Affected products: vendor: n/a
product: Android
Published: 2021-03-10T16:17:43.000Z
CVE-2021-0461 
In iaxxx_core_sensor_change_state of iaxxx-module.c, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android kernelAndroid ID: A-175124074
Problem types: description: Elevation of privilege
Affected products: vendor: n/a
product: Android
Published: 2021-03-10T16:18:03.000Z
CVE-2021-0462 
In the NXP NFC firmware, there is a possible insecure firmware update due to a logic error. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android kernelAndroid ID: A-168799695
Problem types: description: Elevation of privilege
Affected products: vendor: n/a
product: Android
Published: 2021-03-10T16:18:15.000Z
CVE-2021-0463 
In convertToHidl of convert.cpp, there is a possible out of bounds read due to uninitialized data from ReturnFrameworkMessage. This could lead to local information disclosure with no additional execution privileges needed. User interaction is needed for exploitation.Product: AndroidVersions: Android kernelAndroid ID: A-154867068
Problem types: description: Information disclosure
Affected products: vendor: n/a
product: Android
Published: 2021-03-10T16:18:35.000Z
CVE-2021-0464 
In sound_trigger_event_alloc of platform.h, there is a possible out of bounds write due to a heap buffer overflow. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android kernelAndroid ID: A-167663878
Problem types: description: Elevation of privilege
Affected products: vendor: n/a
product: Android
Published: 2021-03-10T16:18:47.000Z
CVE-2021-0465 
In GenerateFaceMask of face.cc, there is a possible out of bounds write due to an incorrect bounds check. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android kernelAndroid ID: A-172005755
Problem types: description: Elevation of privilege
Affected products: vendor: n/a
product: Android
Published: 2021-03-10T16:18:58.000Z
CVE-2021-0466 
In startIpClient of ClientModeImpl.java, there is a possible identifier which could be used to track a device. This could lead to remote information disclosure to a proximal attacker, with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-10Android ID: A-154114734
Problem types: description: Information disclosure
Affected products: vendor: n/a
product: Android
Published: 2021-06-11T16:42:55.000Z
CVE-2021-0467 
In Chromecast bootROM, there is a possible out of bounds write due to an incorrect bounds check. This could lead to local escalation of privilege in the bootloader, with physical USB access, with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android SoCAndroid ID: A-174490700
Problem types: description: Elevation of privilege
Affected products: vendor: n/a
product: Android
Published: 2021-06-14T19:35:54.000Z
CVE-2021-0468 
In LK, there is a possible escalation of privilege due to an insecure default value. This could lead to local escalation of privilege for an attacker who has physical access to the device with no additional execution privileges needed. User interaction is needed for exploitation.Product: AndroidVersions: Android SoCAndroid ID: A-180427272
Problem types: description: Elevation of privilege
Affected products: vendor: n/a
product: Android
Published: 2021-04-13T18:26:23.000Z
CVE-2021-0471 
In decrypt_1_2 of CryptoPlugin.cpp, there is a possible out of bounds read due to an integer overflow. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-9 Android-10 Android-11 Android-8.1Android ID: A-176444786
Problem types: description: Information disclosure
Affected products: vendor: n/a
product: Android
Published: 2021-04-13T18:24:45.000Z
CVE-2021-0472 
In shouldLockKeyguard of LockTaskController.java, there is a possible way to exit App Pinning without a PIN due to a permissions bypass. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-11 Android-9 Android-10Android ID: A-176801033
Problem types: description: Elevation of privilege
Affected products: vendor: n/a
product: Android
Published: 2021-06-11T16:42:56.000Z
CVE-2021-0473 
In rw_t3t_process_error of rw_t3t.cc, there is a possible double free due to uninitialized data. This could lead to remote code execution over NFC with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-9 Android-10 Android-11 Android-8.1Android ID: A-179687208
Problem types: description: Remote code execution
Affected products: vendor: n/a
product: Android
Published: 2021-06-11T16:42:56.000Z