rainbutterfly/cve_corpus huggingface dataset:
CVE-2020-0443 
In LocaleList of LocaleList.java, there is a possible forced reboot due to an uncaught exception. This could lead to local denial of service requiring factory reset to restore with User execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-11 Android-8.0 Android-8.1 Android-9 Android-10Android ID: A-152410253
Problem types: description: Denial of service
Affected products: vendor: n/a
product: Android
Published: 2020-11-10T12:47:23.000Z
CVE-2020-0444 
In audit_free_lsm_field of auditfilter.c, there is a possible bad kfree due to a logic error in audit_data_to_entry. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android kernelAndroid ID: A-150693166References: Upstream kernel
Problem types: description: Elevation of privilege
Affected products: vendor: n/a
product: Android
Published: 2020-12-14T21:50:56.000Z
CVE-2020-0445 
There is a possible out of bounds write due to a missing bounds check.Product: AndroidVersions: Android SoCAndroid ID: A-168264527
Problem types: description: Elevation of privilege
Affected products: vendor: n/a
product: Android
Published: 2020-11-10T12:53:18.000Z
CVE-2020-0446 
There is a possible out of bounds write due to a missing bounds check.Product: AndroidVersions: Android SoCAndroid ID: A-168264528
Problem types: description: Elevation of privilege
Affected products: vendor: n/a
product: Android
Published: 2020-11-10T12:53:43.000Z
CVE-2020-0447 
There is a possible out of bounds write due to a missing bounds check.Product: AndroidVersions: Android SoCAndroid ID: A-168251617
Problem types: description: Elevation of privilege
Affected products: vendor: n/a
product: Android
Published: 2020-11-10T12:53:06.000Z
CVE-2020-0448 
In getPhoneAccountsForPackage of TelecomServiceImpl.java, there is a possible way to access a tracking identifier due to a missing permission check. This could lead to local information disclosure of the identifier, which could be used to track an account across devices, with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-8.0 Android-8.1 Android-9 Android-10 Android-11Android ID: A-153995334
Problem types: description: Information disclosure
Affected products: vendor: n/a
product: Android
Published: 2020-11-10T12:48:02.000Z
CVE-2020-0449 
In btm_sec_disconnected of btm_sec.cc, there is a possible memory corruption due to a use after free. This could lead to remote code execution in the Bluetooth server with no additional execution privileges needed. User interaction is needed for exploitation.Product: AndroidVersions: Android-9 Android-10 Android-11 Android-8.0 Android-8.1Android ID: A-162497143
Problem types: description: Remote code execution
Affected products: vendor: n/a
product: Android
Published: 2020-11-10T12:52:32.000Z
CVE-2020-0450 
In rw_i93_sm_format of rw_i93.cc, there is a possible out of bounds read due to uninitialized data. This could lead to remote information disclosure over NFC with no additional execution privileges needed. User interaction is needed for exploitation.Product: AndroidVersions: Android-8.0 Android-8.1 Android-9 Android-10 Android-11Android ID: A-157650336
Problem types: description: Information disclosure
Affected products: vendor: n/a
product: Android
Published: 2020-11-10T12:49:05.000Z
CVE-2020-0451 
In sbrDecoder_AssignQmfChannels2SbrChannels of sbrdecoder.cpp, there is a possible out of bounds write due to a heap buffer overflow. This could lead to remote code execution with no additional execution privileges needed. User interaction is needed for exploitation.Product: AndroidVersions: Android-10 Android-11 Android-9 Android-8.0 Android-8.1Android ID: A-158762825
Problem types: description: Remote code execution
Affected products: vendor: n/a
product: Android
Published: 2020-11-10T12:49:50.000Z
CVE-2020-0452 
In exif_entry_get_value of exif-entry.c, there is a possible out of bounds write due to an integer overflow. This could lead to remote code execution if a third party app used this library to process remote image data with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-8.1 Android-9 Android-10 Android-11 Android-8.0Android ID: A-159625731
Problem types: description: Remote code execution
Affected products: vendor: n/a
product: Android
Published: 2020-11-10T12:50:04.000Z
CVE-2020-0453 
In updateNotification of BeamTransferManager.java, there is a possible permission bypass due to an unsafe PendingIntent. This could lead to local information disclosure with User execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-9 Android-8.0 Android-8.1Android ID: A-159060474
Problem types: description: Information disclosure
Affected products: vendor: n/a
product: Android
Published: 2020-11-10T12:50:23.000Z
CVE-2020-0454 
In callCallbackForRequest of ConnectivityService.java, there is a possible permission bypass due to a missing permission check. This could lead to local information disclosure of the current SSID with User execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-9Android ID: A-161370134
Problem types: description: Information disclosure
Affected products: vendor: n/a
product: Android
Published: 2020-11-10T12:51:28.000Z
CVE-2020-0455 
There is a possible out of bounds write due to a missing bounds check.Product: AndroidVersions: Android SoCAndroid ID: A-170372514
Problem types: description: Elevation of privilege
Affected products: vendor: n/a
product: Android
Published: 2020-12-14T21:53:13.000Z
CVE-2020-0456 
There is a possible out of bounds write due to a missing bounds check.Product: AndroidVersions: Android SoCAndroid ID: A-170378843
Problem types: description: Elevation of privilege
Affected products: vendor: n/a
product: Android
Published: 2020-12-14T22:05:37.000Z
CVE-2020-0457 
There is a possible out of bounds write due to a missing bounds check.Product: AndroidVersions: Android SoCAndroid ID: A-170367562
Problem types: description: Elevation of privilege
Affected products: vendor: n/a
product: Android
Published: 2020-12-14T21:53:01.000Z
CVE-2020-0458 
In SPDIFEncoder::writeBurstBufferBytes and related methods of SPDIFEncoder.cpp, there is a possible out of bounds write due to an integer overflow. This could lead to remote code execution with no additional execution privileges needed. User interaction is needed for exploitation.Product: AndroidVersions: Android-9 Android-10 Android-8.0 Android-8.1Android ID: A-160265164
Problem types: description: Remote code execution
Affected products: vendor: n/a
product: Android
Published: 2020-12-14T21:51:26.000Z
CVE-2020-0459 
In sendConfiguredNetworkChangedBroadcast of WifiConfigManager.java, there is a possible leak of sensitive WiFi configuration data due to a missing permission check. This could lead to local information disclosure of WiFi network names with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-8.1 Android-9 Android-10 Android-8.0Android ID: A-159373687
Problem types: description: Information disclosure
Affected products: vendor: n/a
product: Android
Published: 2020-12-14T21:51:14.000Z
CVE-2020-0460 
In createNameCredentialDialog of CertInstaller.java, there exists the possibility of improperly installed certificates due to a logic error. This could lead to remote information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-11Android ID: A-163413737
Problem types: description: Information disclosure
Affected products: vendor: n/a
product: Android
Published: 2020-12-14T21:52:01.000Z
CVE-2020-0463 
In sdp_server_handle_client_req of sdp_server.cc, there is a possible out of bounds read due to a missing bounds check. This could lead to remote information disclosure from the bluetooth server with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-10 Android-11 Android-8.0 Android-8.1 Android-9Android ID: A-169342531
Problem types: description: Information disclosure
Affected products: vendor: n/a
product: Android
Published: 2020-12-14T21:52:45.000Z
CVE-2020-0464 
In resolv_cache_lookup of res_cache.cpp, there is a possible side channel information disclosure. This could lead to local information disclosure of accessed web resources with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-10Android ID: A-150371903
Problem types: description: Information disclosure
Affected products: vendor: n/a
product: Android
Published: 2020-12-14T21:50:44.000Z
CVE-2020-0465 
In various methods of hid-multitouch.c, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android kernelAndroid ID: A-162844689References: Upstream kernel
Problem types: description: Elevation of privilege
Affected products: vendor: n/a
product: Android
Published: 2020-12-14T21:51:48.000Z
CVE-2020-0466 
In do_epoll_ctl and ep_loop_check_proc of eventpoll.c, there is a possible use after free due to a logic error. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android kernelAndroid ID: A-147802478References: Upstream kernel
Problem types: description: Elevation of privilege
Affected products: vendor: n/a
product: Android
Published: 2020-12-14T21:50:04.000Z
CVE-2020-0467 
In onUserStopped of Vpn.java, there is a possible resetting of user preferences due to a logic issue. This could lead to local information disclosure of secure network traffic over a non-VPN link with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-10 Android-11 Android-8.1 Android-9Android ID: A-168500792
Problem types: description: Information disclosure
Affected products: vendor: n/a
product: Android
Published: 2020-12-14T21:52:20.000Z
CVE-2020-0468 
In listen() and related functions of TelephonyRegistry.java, there is a possible permissions bypass of location permissions due to a missing permission check. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-10 Android-11Android ID: A-158484422
Problem types: description: Information disclosure
Affected products: vendor: n/a
product: Android
Published: 2020-12-14T21:51:06.000Z
CVE-2020-0469 
In addEscrowToken of LockSettingsService.java, there is a possible loss of the synthetic password due to logic error. This could lead to local denial of service with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-11Android ID: A-168692734
Problem types: description: Denial of service
Affected products: vendor: n/a
product: Android
Published: 2020-12-14T21:52:31.000Z
CVE-2020-0470 
In extend_frame_highbd of restoration.c, there is a possible out of bounds write due to a heap buffer overflow. This could lead to remote information disclosure with no additional execution privileges needed. User interaction is needed for exploitation.Product: AndroidVersions: Android-11 Android-10Android ID: A-166268541
Problem types: description: Information disclosure
Affected products: vendor: n/a
product: Android
Published: 2020-12-14T21:52:10.000Z
CVE-2020-0471 
In reassemble_and_dispatch of packet_fragmenter.cc, there is a possible way to inject packets into an encrypted Bluetooth connection due to improper input validation. This could lead to remote escalation of privilege between two Bluetooth devices by a proximal attacker, with no additional execution privileges needed. User interaction is not needed for exploitation. Product: Android; Versions: Android-8.0, Android-8.1, Android-9, Android-10, Android-11; Android ID: A-169327567.
Problem types: description: Elevation of privilege
Affected products: vendor: n/a
product: Android
Published: 2021-01-11T21:47:56.000Z
CVE-2020-0473 
In updateIncomingFileConfirmNotification of BluetoothOppNotification.java, there is a possible permissions bypass. This could lead to local escalation of privilege allowing an attacker with physical possession of the device to transfer files to it over Bluetooth, with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-11Android ID: A-160691486
Problem types: description: Elevation of privilege
Affected products: vendor: n/a
product: Android
Published: 2020-12-15T15:53:42.000Z
CVE-2020-0474 
In HalCamera::requestNewFrame of HalCamera.cpp, there is a possible use-after-free due to a race condition. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-11Android ID: A-169282240
Problem types: description: Elevation of privilege
Affected products: vendor: n/a
product: Android
Published: 2020-12-15T15:53:48.000Z
CVE-2020-0475 
In createInputConsumer of WindowManagerService.java, there is a possible way to block and intercept input events due to a missing permission check. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is needed for exploitation.Product: AndroidVersions: Android-11Android ID: A-162324374
Problem types: description: Elevation of privilege
Affected products: vendor: n/a
product: Android
Published: 2020-12-15T15:54:06.000Z
CVE-2020-0476 
In onNotificationRemoved of Assistant.java, there is a possible leak of sensitive information to logs. This could lead to local information disclosure with System execution privileges required. User interaction is not needed for exploitation.Product: AndroidVersions: Android-11Android ID: A-162014574
Problem types: description: Information disclosure
Affected products: vendor: n/a
product: Android
Published: 2020-12-15T15:54:15.000Z
CVE-2020-0477 
In sendLinkConfigurationChangedBroadcast of ClientModeImpl.java, there is a possible information disclosure due to a missing permission check. This could lead to local information disclosure of the current network configuration with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-11Android ID: A-162246414
Problem types: description: Information disclosure
Affected products: vendor: n/a
product: Android
Published: 2020-12-15T15:54:24.000Z
CVE-2020-0478 
In extend_frame_lowbd of restoration.c, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is needed for exploitation.Product: AndroidVersions: Android-11Android ID: A-150780418
Problem types: description: Elevation of privilege
Affected products: vendor: n/a
product: Android
Published: 2020-12-15T15:54:33.000Z
CVE-2020-0479 
In callUnchecked of DocumentsProvider.java, there is a possible permissions bypass. This could lead to local escalation of privilege allowing a malicious app to access files available to the DocumentProvider without user permission, with no additional execution privileges needed. User interaction is needed for exploitation.Product: AndroidVersions: Android-11Android ID: A-157294893
Problem types: description: Elevation of privilege
Affected products: vendor: n/a
product: Android
Published: 2020-12-15T15:54:41.000Z
CVE-2020-0480 
In callUnchecked of DocumentsProvider.java, there is a possible permissions bypass due to a missing permission check. This could lead to local escalation of privilege allowing a caller to copy, move, or delete files accessible to DocumentsProvider with no additional execution privileges needed. User interaction is needed for exploitation.Product: AndroidVersions: Android-11Android ID: A-157320716
Problem types: description: Elevation of privilege
Affected products: vendor: n/a
product: Android
Published: 2020-12-15T15:54:49.000Z
CVE-2020-0481 
In AndroidManifest.xml, there is a possible permissions bypass. This could lead to local escalation of privilege allowing a non-system app to send a broadcast it shouldn't have permissions to send, with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-11Android ID: A-157472962
Problem types: description: Elevation of privilege
Affected products: vendor: n/a
product: Android
Published: 2020-12-15T15:54:56.000Z
CVE-2020-0482 
In command of IncidentService.cpp, there is a possible out of bounds read due to an incorrect bounds check. This could lead to local information disclosure with System execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-11Android ID: A-150706572
Problem types: description: Information disclosure
Affected products: vendor: n/a
product: Android
Published: 2020-12-15T15:55:05.000Z
CVE-2020-0483 
In DrmManagerService::~DrmManagerService() of DrmManagerService.cpp, there is a possible memory corruption due to a use after free. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-11Android ID: A-155647761
Problem types: description: Elevation of privilege
Affected products: vendor: n/a
product: Android
Published: 2020-12-15T15:55:12.000Z
CVE-2020-0484 
In destroyResources of ComposerClient.h, there is possible memory corruption due to a use after free. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-11Android ID: A-155769496
Problem types: description: Elevation of privilege
Affected products: vendor: n/a
product: Android
Published: 2020-12-15T15:55:20.000Z
CVE-2020-0485 
In areFunctionsSupported of UsbBackend.java, there is a possible access to tethering from a guest account due to a missing permission check. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-11Android ID: A-166125765
Problem types: description: Elevation of privilege
Affected products: vendor: n/a
product: Android
Published: 2020-12-15T15:55:27.000Z
CVE-2020-0486 
In openAssetFileListener of ContactsProvider2.java, there is a possible permission bypass due to an insecure default value. This could lead to local escalation of privilege to change contact data with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-11Android ID: A-150857116
Problem types: description: Elevation of privilege
Affected products: vendor: n/a
product: Android
Published: 2020-12-15T15:55:47.000Z
CVE-2020-0488 
In ihevc_inter_pred_chroma_copy_ssse3 of ihevc_inter_pred_filters_ssse3_intr.c, there is a possible information disclosure due to uninitialized data. This could lead to remote information disclosure with no additional execution privileges needed. User interaction is needed for exploitation.Product: AndroidVersions: Android-11Android ID: A-158484516
Problem types: description: Information disclosure
Affected products: vendor: n/a
product: Android
Published: 2020-12-15T15:56:05.000Z
CVE-2020-0489 
In Parse_data of eas_mdls.c, there is a possible out of bounds write due to a missing bounds check. This could lead to remote code execution in the media extractor with no additional execution privileges needed. User interaction is needed for exploitation.Product: AndroidVersions: Android-11Android ID: A-151096540
Problem types: description: Remote code execution
Affected products: vendor: n/a
product: Android
Published: 2020-12-15T15:56:15.000Z
CVE-2020-0490 
In floor1_info_unpack of floor1.c, there is a possible out of bounds read due to a missing bounds check. This could lead to remote information disclosure with no additional execution privileges needed. User interaction is needed for exploitation.Product: AndroidVersions: Android-11Android ID: A-155560008
Problem types: description: Information disclosure
Affected products: vendor: n/a
product: Android
Published: 2020-12-15T15:56:22.000Z
CVE-2020-0491 
In readBlock of MatroskaExtractor.cpp, there is a possible denial of service due to resource exhaustion. This could lead to remote denial of service with no additional execution privileges needed. User interaction is needed for exploitation.Product: AndroidVersions: Android-11Android ID: A-156819528
Problem types: description: Denial of service
Affected products: vendor: n/a
product: Android
Published: 2020-12-15T15:56:28.000Z
CVE-2020-0492 
In BitstreamFillCache of bitstream.cpp, there is a possible out of bounds read due to a heap buffer overflow. This could lead to remote information disclosure with no additional execution privileges needed. User interaction is needed for exploitation.Product: AndroidVersions: Android-11Android ID: A-154058264
Problem types: description: Information disclosure
Affected products: vendor: n/a
product: Android
Published: 2020-12-15T15:56:38.000Z
CVE-2020-0493 
In CPDF_SampledFunc::v_Call of cpdf_sampledfunc.cpp, there is a possible out of bounds read due to improper input validation. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-11Android ID: A-150615407
Problem types: description: Information disclosure
Affected products: vendor: n/a
product: Android
Published: 2020-12-15T15:56:46.000Z
CVE-2020-0494 
In ih264d_parse_ave of ih264d_sei.c, there is a possible out of bounds read due to a heap buffer overflow. This could lead to remote information disclosure with no additional execution privileges needed. User interaction is needed for exploitation.Product: AndroidVersions: Android-11Android ID: A-152895390
Problem types: description: Information disclosure
Affected products: vendor: n/a
product: Android
Published: 2020-12-15T15:56:53.000Z
CVE-2020-0495 
In decode_Huffman of JBig2_SddProc.cpp, there is a possible out of bounds write due to an integer overflow. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-11Android ID: A-155473137
Problem types: description: Information disclosure
Affected products: vendor: n/a
product: Android
Published: 2020-12-15T15:57:02.000Z
CVE-2020-0496 
In CPDF_RenderStatus::LoadSMask of cpdf_renderstatus.cpp, there is a possible memory corruption due to a use-after free. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-11Android ID: A-149481220
Problem types: description: Information disclosure
Affected products: vendor: n/a
product: Android
Published: 2020-12-15T15:57:09.000Z
CVE-2020-0497 
In canUseBiometric of BiometricServiceBase, there is a missing permission check. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-11Android ID: A-158481661
Problem types: description: Information disclosure
Affected products: vendor: n/a
product: Android
Published: 2020-12-15T15:57:29.000Z