rainbutterfly/cve_corpus huggingface dataset:
CVE-2020-0016 
In the Broadcom Nexus firmware, there is an insecure default password. This could lead to local escalation of privilege in the kernel with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android SoCAndroid ID: A-171413483
Problem types: description: Elevation of privilege
Affected products: vendor: n/a
product: Android
Published: 2020-12-14T22:07:14.000Z
CVE-2020-0017 
In multiple places, it was possible for the primary user’s dictionary to be visible to and modifiable by secondary users. This could lead to local information disclosure with no additional execution privileges needed. User interaction is needed for exploitation.Product: AndroidVersions: Android-8.0 Android-8.1 Android-9 Android-10Android ID: A-123232892
Problem types: description: Information disclosure
Affected products: vendor: n/a
product: Android
Published: 2020-02-13T14:20:47.000Z
CVE-2020-0018 
In MotionEntry::appendDescription of InputDispatcher.cpp, there is a possible log information disclosure. This could lead to local disclosure of user input with System execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-8.0 Android-8.1 Android-9 Android-10Android ID: A-139945049
Problem types: description: Information disclosure
Affected products: vendor: n/a
product: Android
Published: 2020-02-13T14:20:59.000Z
CVE-2020-0019 
In the Broadcom Nexus firmware, there is an insecure default password. This could lead to local information disclosure in the kernel with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android SoCAndroid ID: A-171413798
Problem types: description: Information Disclosure
Affected products: vendor: n/a
product: Android
Published: 2020-12-14T22:07:25.000Z
CVE-2020-0020 
In getAttributeRange of ExifInterface.java, there is a possible failure to redact location information from media files due to an incorrect bounds check. This could lead to local information disclosure with User execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-10Android ID: A-143118731
Problem types: description: Information disclosure
Affected products: vendor: n/a
product: Android
Published: 2020-02-13T14:21:09.000Z
CVE-2020-0021 
In removeUnusedPackagesLPw of PackageManagerService.java, there is a possible permanent denial-of-service due to a missing package dependency test. This could lead to remote denial of service with User execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-10Android ID: A-141413692
Problem types: description: Denial of service
Affected products: vendor: n/a
product: Android
Published: 2020-02-13T14:21:25.000Z
CVE-2020-0022 
In reassemble_and_dispatch of packet_fragmenter.cc, there is possible out of bounds write due to an incorrect bounds calculation. This could lead to remote code execution over Bluetooth with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-8.0 Android-8.1 Android-9 Android-10Android ID: A-143894715
Problem types: description: Denial of service
Affected products: vendor: n/a
product: Android
Published: 2020-02-13T14:21:41.000Z
CVE-2020-0023 
In setPhonebookAccessPermission of AdapterService.java, there is a possible disclosure of user contacts over bluetooth due to a missing permission check. This could lead to local information disclosure if a malicious app enables contacts over a bluetooth connection, with User execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-10Android ID: A-145130871
Problem types: description: Information disclosure
Affected products: vendor: n/a
product: Android
Published: 2020-02-13T14:21:52.000Z
CVE-2020-0024 
In onCreate of SettingsBaseActivity.java, there is a possible unauthorized setting modification due to a permissions bypass. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is needed for exploitation.Product: AndroidVersions: Android-8.1 Android-9 Android-10 Android-8.0Android ID: A-137015265
Problem types: description: Elevation of privilege
Affected products: vendor: n/a
product: Android
Published: 2020-05-14T20:08:08.000Z
CVE-2020-0025 
In deletePackageVersionedInternal of PackageManagerService.java, there is a possible way to exit Screen Pinning due to a permissions bypass. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-11Android ID: A-135604684
Problem types: description: Elevation of privilege
Affected products: vendor: n/a
product: Android
Published: 2021-03-10T15:52:13.000Z
CVE-2020-0026 
In Parcel::continueWrite of Parcel.cpp, there is possible memory corruption due to a use after free. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-8.0 Android-8.1 Android-9 Android-10Android ID: A-140419401
Problem types: description: Elevation of privilege
Affected products: vendor: n/a
product: Android
Published: 2020-02-13T14:22:15.000Z
CVE-2020-0027 
In HidRawSensor::batch of HidRawSensor.cpp, there is a possible out of bounds write due to an unexpected switch fallthrough. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-8.0 Android-8.1 Android-9 Android-10Android ID: A-144040966
Problem types: description: Elevation of privilege
Affected products: vendor: n/a
product: Android
Published: 2020-02-13T14:22:27.000Z
CVE-2020-0028 
In notifyNetworkTested and related functions of NetworkMonitor.java, there is a possible bypass of private DNS settings. This could lead to remote information disclosure with no additional execution privileges needed. User interaction is needed for exploitation.Product: AndroidVersions: Android-9Android ID: A-122652057
Problem types: description: Information disclosure
Affected products: vendor: n/a
product: Android
Published: 2020-02-13T14:22:35.000Z
CVE-2020-0029 
In the WifiConfigManager, there is a possible storage of location history which can only be deleted by triggering a factory reset. This could lead to local information disclosure with System execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-10Android ID: A-140065828
Problem types: description: Information disclosure
Affected products: vendor: n/a
product: Android
Published: 2020-03-10T19:55:46.000Z
CVE-2020-0030 
In binder_thread_release of binder.c, there is a possible use after free due to a race condition. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android kernelAndroid ID: A-145286050References: Upstream kernel
Problem types: description: Elevation of privilege
Affected products: vendor: n/a
product: Android
Published: 2020-02-13T14:22:43.000Z
CVE-2020-0031 
In triggerAugmentedAutofillLocked and related functions of Session.java, it is possible for Augmented Autofill to display sensitive information to the user inappropriately. This could lead to local information disclosure with no additional execution privileges needed. User interaction is needed for exploitation.Product: AndroidVersions: Android-10Android ID: A-141703197
Problem types: description: Information disclosure
Affected products: vendor: n/a
product: Android
Published: 2020-03-10T19:55:51.000Z
CVE-2020-0032 
In ih264d_release_display_bufs of ih264d_utils.c, there is a possible out of bounds write due to a heap buffer overflow. This could lead to remote code execution with no additional execution privileges needed. User interaction is needed for exploitation.Product: AndroidVersions: Android-8.0 Android-8.1 Android-9 Android-10Android ID: A-145364230
Problem types: description: Remote code execution
Affected products: vendor: n/a
product: Android
Published: 2020-03-10T19:55:54.000Z
CVE-2020-0033 
In CryptoPlugin::decrypt of CryptoPlugin.cpp, there is a possible out of bounds write due to stale pointer. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-8.0 Android-8.1 Android-9 Android-10Android ID: A-144351324
Problem types: description: Elevation of privilege
Affected products: vendor: n/a
product: Android
Published: 2020-03-10T19:55:57.000Z
CVE-2020-0034 
In vp8_decode_frame of decodeframe.c, there is a possible out of bounds read due to improper input validation. This could lead to remote information disclosure if error correction were turned on, with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-8.0 Android-8.1Android ID: A-62458770
Problem types: description: Information disclosure
Affected products: vendor: n/a
product: Android
Published: 2020-03-10T19:56:04.000Z
CVE-2020-0035 
In query of TelephonyProvider.java, there is a possible access to SIM card info due to a missing permission check. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-8.0 Android-8.1 Android-9Android ID: A-140622024
Problem types: description: Information disclosure
Affected products: vendor: n/a
product: Android
Published: 2020-03-10T19:56:06.000Z
CVE-2020-0036 
In hasPermissions of PermissionMonitor.java, there is a possible access to restricted permissions due to a permissions bypass. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-8.0 Android-8.1 Android-9 Android-10Android ID: A-144679405
Problem types: description: Elevation of privilege
Affected products: vendor: n/a
product: Android
Published: 2020-03-10T19:56:09.000Z
CVE-2020-0037 
In rw_i93_sm_set_read_only of rw_i93.cc, there is a possible out of bounds read due to a missing bounds check. This could lead to remote information disclosure over NFC with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-8.0 Android-8.1 Android-9 Android-10Android ID: A-143106535
Problem types: description: Information disclosure
Affected products: vendor: n/a
product: Android
Published: 2020-03-10T19:56:12.000Z
CVE-2020-0038 
In rw_i93_sm_update_ndef of rw_i93.cc, there is a possible read of uninitialized data due to a missing bounds check. This could lead to remote information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-8.0 Android-8.1 Android-9 Android-10Android ID: A-143109193
Problem types: description: Information disclosure
Affected products: vendor: n/a
product: Android
Published: 2020-03-10T19:56:16.000Z
CVE-2020-0039 
In rw_i93_sm_update_ndef of rw_i93.cc, there is a possible read of uninitialized data due to a missing bounds check. This could lead to remote information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-8.0 Android-8.1 Android-9 Android-10Android ID: A-143155861
Problem types: description: Information disclosure
Affected products: vendor: n/a
product: Android
Published: 2020-03-10T19:56:19.000Z
CVE-2020-0041 
In binder_transaction of binder.c, there is a possible out of bounds write due to an incorrect bounds check. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android kernelAndroid ID: A-145988638References: Upstream kernel
Problem types: description: Elevation of privilege
Affected products: vendor: n/a
product: Android
Published: 2020-03-10T19:56:22.000Z
CVE-2020-0042 
In fpc_ta_hw_auth_unwrap_key of fpc_ta_hw_auth_qsee.c, there is a possible out of bounds read due to a missing bounds check. This could lead to local information disclosure with System execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android kernelAndroid ID: A-137649599
Problem types: description: Information disclosure
Affected products: vendor: n/a
product: Android
Published: 2020-03-10T19:56:27.000Z
CVE-2020-0043 
In authorize_enrol of fpc_ta_hw_auth.c, there is a possible out of bounds read due to a missing bounds check. This could lead to local information disclosure with System execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android kernelAndroid ID: A-137650218
Problem types: description: Information disclosure
Affected products: vendor: n/a
product: Android
Published: 2020-03-10T19:56:30.000Z
CVE-2020-0044 
In set_nonce of fpc_ta_qc_auth.c, there is a possible out of bounds read due to a missing bounds check. This could lead to local information disclosure with System execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android kernelAndroid ID: A-137650219
Problem types: description: Information disclosure
Affected products: vendor: n/a
product: Android
Published: 2020-03-10T19:56:33.000Z
CVE-2020-0045 
In StatsService::command of StatsService.cpp, there is possible memory corruption due to a race condition. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-10Android ID: A-141243101
Problem types: description: Elevation of privilege
Affected products: vendor: n/a
product: Android
Published: 2020-03-10T20:01:42.000Z
CVE-2020-0046 
In DrmPlugin::releaseSecureStops of DrmPlugin.cpp, there is a possible out of bounds write due to a heap buffer overflow. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-10Android ID: A-137284652
Problem types: description: Elevation of privilege
Affected products: vendor: n/a
product: Android
Published: 2020-03-10T20:03:22.000Z
CVE-2020-0047 
In setMasterMute of AudioService.java, there is a missing permission check. This could lead to local silencing of audio with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-10Android ID: A-141622311
Problem types: description: Elevation of privilege
Affected products: vendor: n/a
product: Android
Published: 2020-03-10T20:03:27.000Z
CVE-2020-0048 
In onTransact of IAudioFlinger.cpp, there is a possible stack information leak due to uninitialized data. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-10Android ID: A-139417189
Problem types: description: Information disclosure
Affected products: vendor: n/a
product: Android
Published: 2020-03-10T20:03:33.000Z
CVE-2020-0049 
In onReadBuffer() of StreamingSource.cpp, there is a possible information disclosure due to uninitialized data. This could lead to remote information disclosure with no additional execution privileges needed. User interaction is needed for exploitation.Product: AndroidVersions: Android-10Android ID: A-140177694
Problem types: description: Information disclosure
Affected products: vendor: n/a
product: Android
Published: 2020-03-10T20:03:38.000Z
CVE-2020-0050 
In nfa_hciu_send_msg of nfa_hci_utils.cc, there is a possible out of bounds write due to improper input validation. This could lead to local escalation of privilege in the NFC server with System execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-10Android ID: A-124521372
Problem types: description: Elevation of privilege
Affected products: vendor: n/a
product: Android
Published: 2020-03-10T20:03:44.000Z
CVE-2020-0051 
In onCreate of SettingsHomepageActivity, there is a possible tapjacking attack. This could lead to local escalation of privilege in Settings with no additional execution privileges needed. User interaction is needed for exploitation.Product: AndroidVersions: Android-10Android ID: A-138442483
Problem types: description: Elevation of privilege
Affected products: vendor: n/a
product: Android
Published: 2020-03-10T20:03:48.000Z
CVE-2020-0052 
In smsSelected of AnswerFragment.java, there is a way to send an SMS from the lock screen due to a permissions bypass. This could lead to local escalation of privilege on the lock screen with no additional execution privileges needed. User interaction is needed for exploitation.Product: AndroidVersions: Android-10Android ID: A-137102479
Problem types: description: Elevation of privilege
Affected products: vendor: n/a
product: Android
Published: 2020-03-10T20:03:57.000Z
CVE-2020-0053 
In convertHidlNanDataPathInitiatorRequestToLegacy, and convertHidlNanDataPathIndicationResponseToLegacy of hidl_struct_util.cpp, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-10Android ID: A-143789898
Problem types: description: Elevation of privilege
Affected products: vendor: n/a
product: Android
Published: 2020-03-10T20:04:03.000Z
CVE-2020-0054 
In WifiNetworkSuggestionsManager of WifiNetworkSuggestionsManager.java, there is a possible permission revocation due to a missing permission check. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-10Android ID: A-146642727
Problem types: description: Elevation of privilege
Affected products: vendor: n/a
product: Android
Published: 2020-03-10T20:04:11.000Z
CVE-2020-0055 
In l2c_link_process_num_completed_pkts of l2c_link.cc, there is a possible out of bounds read due to a missing bounds check. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-10Android ID: A-141617601
Problem types: description: Information disclosure
Affected products: vendor: n/a
product: Android
Published: 2020-03-10T20:04:18.000Z
CVE-2020-0056 
In btu_hcif_connection_comp_evt of btu_hcif.cc, there is a possible out of bounds read due to a missing bounds check. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-10Android ID: A-141619686
Problem types: description: Information disclosure
Affected products: vendor: n/a
product: Android
Published: 2020-03-10T20:04:26.000Z
CVE-2020-0057 
In btm_process_inq_results of btm_inq.cc, there is a possible out of bounds read due to a missing bounds check. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-10Android ID: A-141620271
Problem types: description: Information disclosure
Affected products: vendor: n/a
product: Android
Published: 2020-03-10T20:04:32.000Z
CVE-2020-0058 
In l2c_rcv_acl_data of l2c_main.cc, there is a possible out of bounds read due to an incorrect bounds check. This could lead to local information disclosure with System execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-10Android ID: A-141745011
Problem types: description: Information disclosure
Affected products: vendor: n/a
product: Android
Published: 2020-03-10T20:00:37.000Z
CVE-2020-0059 
In btm_ble_batchscan_filter_track_adv_vse_cback of btm_ble_batchscan.cc, there is a possible out of bounds read due to a missing bounds check. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-10Android ID: A-142543524
Problem types: description: Information disclosure
Affected products: vendor: n/a
product: Android
Published: 2020-03-10T20:00:50.000Z
CVE-2020-0060 
In query of SmsProvider.java and MmsSmsProvider.java, there is a possible permission bypass due to SQL injection. This could lead to local information disclosure with System execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-10Android ID: A-143229845
Problem types: description: Information disclosure
Affected products: vendor: n/a
product: Android
Published: 2020-03-10T20:00:59.000Z
CVE-2020-0061 
In Pixel Recorder, there is a possible permissions bypass allowing arbitrary apps to record audio. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android kernelAndroid ID: A-145504977
Problem types: description: Information disclosure
Affected products: vendor: n/a
product: Android
Published: 2020-03-10T20:01:13.000Z
CVE-2020-0062 
In Euicc, there is a possible information disclosure due to an included test Certificate. This could lead to remote information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android kernelAndroid ID: A-143232031
Problem types: description: Information disclosure
Affected products: vendor: n/a
product: Android
Published: 2020-03-10T20:03:03.000Z
CVE-2020-0063 
In SurfaceFlinger, it is possible to override UI confirmation screen protected by the TEE. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is needed for exploitation.Product: AndroidVersions: Android kernelAndroid ID: A-143128911
Problem types: description: Elevation of privilege
Affected products: vendor: n/a
product: Android
Published: 2020-03-10T20:02:08.000Z
CVE-2020-0064 
An improper authorization while processing the provisioning data.Product: AndroidVersions: Android SoCAndroid ID: A-149866855
Problem types: description: improper authorization
Affected products: vendor: n/a
product: Android
Published: 2020-05-14T20:12:32.000Z
CVE-2020-0065 
An improper authorization in the receiver component of the Android Suite Daemon.Product: AndroidVersions: Android SoCAndroid ID: A-149813448
Problem types: description: improper authorization
Affected products: vendor: n/a
product: Android
Published: 2020-05-14T20:12:27.000Z
CVE-2020-0066 
In the netlink driver, there is a possible out of bounds write due to a race condition. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android kernelAndroid ID: A-65025077
Problem types: description: Elevation of privilege
Affected products: vendor: n/a
product: Android
Published: 2020-03-10T20:02:44.000Z
CVE-2020-0067 
In f2fs_xattr_generic_list of xattr.c, there is a possible out of bounds read due to a missing bounds check. This could lead to local information disclosure with System execution privileges needed. User interaction is not required for exploitation.Product: Android. Versions: Android kernel. Android ID: A-120551147.
Problem types: description: Information disclosure
Affected products: vendor: n/a
product: Android
Published: 2020-04-17T18:03:45.000Z