rainbutterfly/cve_corpus huggingface dataset:
CVE-2021-0474 
In avrc_msg_cback of avrc_api.cc, there is a possible out of bounds write due to a heap buffer overflow. This could lead to remote code execution with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-11 Android-8.1 Android-9 Android-10Android ID: A-177611958
Problem types: description: Remote code execution
Affected products: vendor: n/a
product: Android
Published: 2021-06-11T16:42:56.000Z
CVE-2021-0475 
In on_l2cap_data_ind of btif_sock_l2cap.cc, there is possible memory corruption due to a use after free. This could lead to remote code execution over Bluetooth with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-11 Android-10Android ID: A-175686168
Problem types: description: Remote code execution
Affected products: vendor: n/a
product: Android
Published: 2021-06-11T16:42:56.000Z
CVE-2021-0476 
In FindOrCreatePeer of btif_av.cc, there is a possible use after free due to a race condition. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-11 Android-9 Android-10Android ID: A-169252501
Problem types: description: Elevation of privilege
Affected products: vendor: n/a
product: Android
Published: 2021-06-11T16:42:55.000Z
CVE-2021-0477 
In notifyScreenshotError of ScreenshotNotificationsController.java, there is a possible permission bypass due to an unsafe PendingIntent. This could lead to local escalation of privilege with User execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-10 Android-11 Android-8.1 Android-9Android ID: A-178189250
Problem types: description: Elevation of privilege
Affected products: vendor: n/a
product: Android
Published: 2021-06-11T16:42:56.000Z
CVE-2021-0478 
In updateDrawable of StatusBarIconView.java, there is a possible permission bypass due to an uncaught exception. This could lead to local escalation of privilege by running foreground services without notifying the user, with User execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-10 Android-11 Android-8.1 Android-9Android ID: A-169255797
Problem types: description: Elevation of privilege
Affected products: vendor: n/a
product: Android
Published: 2021-06-21T16:01:26.000Z
CVE-2021-0480 
In createPendingIntent of SnoozeHelper.java, there is a possible broadcast intent containing a sensitive identifier. This could lead to local information disclosure with no additional execution privileges needed. User interaction is needed for exploitation.Product: AndroidVersions: Android-10 Android-11 Android-8.1 Android-9Android ID: A-174493336
Problem types: description: Information disclosure
Affected products: vendor: n/a
product: Android
Published: 2021-06-11T16:42:56.000Z
CVE-2021-0481 
In onActivityResult of EditUserPhotoController.java, there is a possible access of unauthorized files due to an unexpected URI handler. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is needed for exploitation.Product: AndroidVersions: Android-8.1 Android-9 Android-10 Android-11Android ID: A-172939189
Problem types: description: Elevation of privilege
Affected products: vendor: n/a
product: Android
Published: 2021-06-11T16:42:55.000Z
CVE-2021-0482 
In BinderDiedCallback of MediaCodec.cpp, there is a possible memory corruption due to a use after free. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-11Android ID: A-173791720
Problem types: description: Elevation of privilege
Affected products: vendor: n/a
product: Android
Published: 2021-06-11T16:42:55.000Z
CVE-2021-0483 
In multiple methods of AAudioService, there is a possible use-after-free due to a race condition. This could lead to local escalation of privilege with User execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-10 Android-11Android ID: A-153358911
Problem types: description: Elevation of privilege
Affected products: vendor: n/a
product: Android
Published: 2021-10-22T13:26:49.000Z
CVE-2021-0484 
In readVector of IMediaPlayer.cpp, there is a possible read of uninitialized heap data due to a missing bounds check. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-9 Android-10 Android-11 Android-8.1Android ID: A-173720767
Problem types: description: Information disclosure
Affected products: vendor: n/a
product: Android
Published: 2021-06-11T16:42:55.000Z
CVE-2021-0485 
In getMinimalSize of PipBoundsAlgorithm.java, there is a possible bypass of restrictions on background processes due to a permissions bypass. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-11Android ID: A-174302616
Problem types: description: Elevation of privilege
Affected products: vendor: n/a
product: Android
Published: 2021-06-11T16:42:56.000Z
CVE-2021-0486 
In onPackageAddedInternal of PermissionManagerService.java, there is possible access to external storage due to a permissions bypass. This could lead to local escalation of privilege with User execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-10 Android-11Android ID: A-171430330
Problem types: description: Elevation of privilege
Affected products: vendor: n/a
product: Android
Published: 2021-07-14T13:43:26.000Z
CVE-2021-0487 
In onCreate of CalendarDebugActivity.java, there is a possible way to export calendar data to the sdcard without user consent due to a tapjacking/overlay attack. This could lead to local escalation of privilege with User execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-11Android ID: A-174046397
Problem types: description: Elevation of privilege
Affected products: vendor: n/a
product: Android
Published: 2021-06-11T16:42:56.000Z
CVE-2021-0488 
In pb_write of pb_encode.c, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android kernelAndroid ID: A-178754781
Problem types: description: Elevation of privilege
Affected products: vendor: n/a
product: Android
Published: 2021-04-15T12:53:37.000Z
CVE-2021-0489 
In memory management driver, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android SoCAndroid ID: A-183464866
Problem types: description: Elevation of privilege
Affected products: vendor: n/a
product: Android
Published: 2021-06-11T16:42:57.000Z
CVE-2021-0490 
In memory management driver, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android SoCAndroid ID: A-183464868
Problem types: description: Elevation of privilege
Affected products: vendor: n/a
product: Android
Published: 2021-06-11T16:42:57.000Z
CVE-2021-0491 
In memory management driver, there is a possible escalation of privilege due to a missing permission check. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android SoCAndroid ID: A-183461315
Problem types: description: Elevation of privilege
Affected products: vendor: n/a
product: Android
Published: 2021-06-11T16:42:57.000Z
CVE-2021-0492 
In memory management driver, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android SoCAndroid ID: A-183459078
Problem types: description: Elevation of privilege
Affected products: vendor: n/a
product: Android
Published: 2021-06-11T16:42:56.000Z
CVE-2021-0493 
In memory management driver, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android SoCAndroid ID: A-183461317
Problem types: description: Elevation of privilege
Affected products: vendor: n/a
product: Android
Published: 2021-06-11T16:42:57.000Z
CVE-2021-0494 
In memory management driver, there is a possible out of bounds write due to an integer overflow. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android SoCAndroid ID: A-183461318
Problem types: description: Elevation of privilege
Affected products: vendor: n/a
product: Android
Published: 2021-06-11T16:42:57.000Z
CVE-2021-0495 
In memory management driver, there is a possible out of bounds write due to uninitialized data. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android SoCAndroid ID: A-183459083
Problem types: description: Elevation of privilege
Affected products: vendor: n/a
product: Android
Published: 2021-06-11T16:42:57.000Z
CVE-2021-0496 
In memory management driver, there is a possible memory corruption due to a use after free. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android SoCAndroid ID: A-183467912
Problem types: description: Elevation of privilege
Affected products: vendor: n/a
product: Android
Published: 2021-06-11T16:42:57.000Z
CVE-2021-0497 
In memory management driver, there is a possible memory corruption due to a use after free. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android SoCAndroid ID: A-183461320
Problem types: description: Elevation of privilege
Affected products: vendor: n/a
product: Android
Published: 2021-06-11T16:42:57.000Z
CVE-2021-0498 
In memory management driver, there is a possible memory corruption due to a double free. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android SoCAndroid ID: A-183461321
Problem types: description: Elevation of privilege
Affected products: vendor: n/a
product: Android
Published: 2021-06-11T16:42:57.000Z
CVE-2021-0504 
In avrc_pars_browse_rsp of avrc_pars_ct.cc, there is a possible out of bounds read due to a missing bounds check. This could lead to remote information disclosure over Bluetooth with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-11Android ID: A-179162665
Problem types: description: Information disclosure
Affected products: vendor: n/a
product: Android
Published: 2021-06-21T16:01:36.000Z
CVE-2021-0505 
In the Settings app, there is a possible way to disable an always-on VPN due to a missing permission check. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-11Android ID: A-179975048
Problem types: description: Elevation of privilege
Affected products: vendor: n/a
product: Android
Published: 2021-06-21T16:01:37.000Z
CVE-2021-0506 
In ActivityPicker.java, there is a possible bypass of user interaction in intent resolution due to a tapjacking/overlay attack. This could lead to local escalation of privilege with User execution privileges needed. User interaction is needed for exploitation.Product: AndroidVersions: Android-10 Android-11 Android-8.1 Android-9Android ID: A-181962311
Problem types: description: Elevation of privilege
Affected products: vendor: n/a
product: Android
Published: 2021-06-21T16:01:40.000Z
CVE-2021-0507 
In handle_rc_metamsg_cmd of btif_rc.cc, there is a possible out of bounds write due to a missing bounds check. This could lead to remote code execution over Bluetooth with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-11 Android-8.1 Android-9 Android-10Android ID: A-181860042
Problem types: description: Remote code execution
Affected products: vendor: n/a
product: Android
Published: 2021-06-21T16:01:39.000Z
CVE-2021-0508 
In various functions of DrmPlugin.cpp, there is a possible use after free due to a race condition. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-8.1 Android-9 Android-10 Android-11Android ID: A-176444154
Problem types: description: Elevation of privilege
Affected products: vendor: n/a
product: Android
Published: 2021-06-21T16:01:32.000Z
CVE-2021-0509 
In various functions of CryptoPlugin.cpp, there is a possible use after free due to a race condition. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-9 Android-10 Android-11 Android-8.1Android ID: A-176444161
Problem types: description: Elevation of privilege
Affected products: vendor: n/a
product: Android
Published: 2021-06-21T16:01:32.000Z
CVE-2021-0510 
In decrypt_1_2 of CryptoPlugin.cpp, there is a possible out of bounds write due to an integer overflow. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-9 Android-10 Android-11 Android-8.1Android ID: A-176444622
Problem types: description: Elevation of privilege
Affected products: vendor: n/a
product: Android
Published: 2021-06-21T16:01:33.000Z
CVE-2021-0511 
In Dex2oat of dex2oat.cc, there is a possible way to inject bytecode into an app due to improper input validation. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-9 Android-10 Android-11Android ID: A-178055795
Problem types: description: Elevation of privilege
Affected products: vendor: n/a
product: Android
Published: 2021-06-21T16:01:34.000Z
CVE-2021-0512 
In __hidinput_change_resolution_multipliers of hid-input.c, there is a possible out of bounds write due to a heap buffer overflow. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android kernelAndroid ID: A-173843328References: Upstream kernel
Problem types: description: Elevation of privilege
Affected products: vendor: n/a
product: Android
Published: 2021-06-21T16:01:27.000Z
CVE-2021-0513 
In deleteNotificationChannel and related functions of NotificationManagerService.java, there is a possible permission bypass due to improper state validation. This could lead to local escalation of privilege via hidden services with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-9 Android-10 Android-11 Android-8.1Android ID: A-156090809
Problem types: description: Elevation of privilege
Affected products: vendor: n/a
product: Android
Published: 2021-06-21T16:01:25.000Z
CVE-2021-0514 
In several functions of the V8 library, there is a possible use after free due to a race condition. This could lead to remote code execution in an unprivileged process with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-10 Android-9 Android-11 Android-8.1Android ID: A-162604069
Problem types: description: Remote code execution
Affected products: vendor: n/a
product: Android
Published: 2021-07-14T13:43:13.000Z
CVE-2021-0515 
In Factory::CreateStrictFunctionMap of factory.cc, there is a possible out of bounds write due to an incorrect bounds check. This could lead to remote code execution in an unprivileged process with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-9 Android-10 Android-11 Android-8.1Android ID: A-167389063
Problem types: description: Remote code execution
Affected products: vendor: n/a
product: Android
Published: 2021-07-14T13:43:19.000Z
CVE-2021-0516 
In p2p_process_prov_disc_req of p2p_pd.c, there is a possible out of bounds read and write due to a use after free. This could lead to remote escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-11 Android-8.1 Android-9 Android-10Android ID: A-181660448
Problem types: description: Elevation of privilege
Affected products: vendor: n/a
product: Android
Published: 2021-06-21T16:01:38.000Z
CVE-2021-0517 
In updateCapabilities of ConnectivityService.java, there is a possible incorrect network state determination due to a logic error in the code. This could lead to biasing of networking tasks to occur on non-VPN networks, which could lead to remote information disclosure, with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-11Android ID: A-179053823
Problem types: description: Information disclosure
Affected products: vendor: n/a
product: Android
Published: 2021-06-21T16:01:35.000Z
CVE-2021-0518 
In Wi-Fi, there is a possible leak of location-sensitive data due to a missing permission check. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-13Android ID: A-176541017
Problem types: description: Information disclosure
Affected products: vendor: n/a
product: Android
Published: 2021-07-14T13:44:28.000Z
CVE-2021-0519 
In BITSTREAM_FLUSH of ih264e_bitstream.h, there is a possible out of bounds write due to a heap buffer overflow. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-10 Android-11 Android-8.1 Android-9Android ID: A-176533109
Problem types: description: Information disclosure
Affected products: vendor: n/a
product: Android
Published: 2021-08-17T18:28:07.000Z
CVE-2021-0520 
In several functions of MemoryFileSystem.cpp and related files, there is a possible use after free due to a race condition. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-11 Android-10Android ID: A-176237595
Problem types: description: Elevation of privilege
Affected products: vendor: n/a
product: Android
Published: 2021-06-21T16:01:31.000Z
CVE-2021-0521 
In getAllPackages of PackageManagerService, there is a possible information disclosure due to a missing permission check. This could lead to local information disclosure of cross-user permissions with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-11 Android-8.1 Android-9 Android-10Android ID: A-174661955
Problem types: description: Information disclosure
Affected products: vendor: n/a
product: Android
Published: 2021-06-21T16:01:30.000Z
CVE-2021-0522 
In ConnectionHandler::SdpCb of connection_handler.cc, there is a possible out of bounds read due to a use after free. This could lead to remote information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-11 Android-9 Android-10Android ID: A-174182139
Problem types: description: Information disclosure
Affected products: vendor: n/a
product: Android
Published: 2021-06-21T16:01:29.000Z
CVE-2021-0523 
In onCreate of WifiScanModeActivity.java, there is a possible way to enable Wi-Fi scanning without user consent due to a tapjacking/overlay attack. This could lead to local escalation of privilege with User execution privileges needed. User interaction is needed for exploitation.Product: AndroidVersions: Android-10 Android-11Android ID: A-174047492
Problem types: description: Elevation of privilege
Affected products: vendor: n/a
product: Android
Published: 2021-06-21T16:01:28.000Z
CVE-2021-0524 
In isServiceDistractionOptimized of CarPackageManagerService.java, there is a possible disclosure of installed packages due to side channel information disclosure. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-12Android ID: A-180418334
Problem types: description: Information disclosure
Affected products: vendor: n/a
product: Android
Published: 2022-02-11T17:40:58.000Z
CVE-2021-0525 
In memory management driver, there is a possible out of bounds write due to a use after free. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android SoCAndroid ID: A-185193929
Problem types: description: Elevation of privilege
Affected products: vendor: n/a
product: Android
Published: 2021-06-21T16:01:41.000Z
CVE-2021-0526 
In memory management driver, there is a possible out of bounds write due to uninitialized data. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android SoCAndroid ID: A-185195264
Problem types: description: Elevation of privilege
Affected products: vendor: n/a
product: Android
Published: 2021-06-21T16:01:43.000Z
CVE-2021-0527 
In memory management driver, there is a possible memory corruption due to a use after free. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android SoCAndroid ID: A-185193931
Problem types: description: Elevation of privilege
Affected products: vendor: n/a
product: Android
Published: 2021-06-21T16:01:41.000Z
CVE-2021-0528 
In memory management driver, there is a possible memory corruption due to a double free. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android SoCAndroid ID: A-185195266
Problem types: description: Elevation of privilege
Affected products: vendor: n/a
product: Android
Published: 2021-06-21T16:01:44.000Z
CVE-2021-0529 
In memory management driver, there is a possible memory corruption due to improper locking. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android SoCAndroid ID: A-185195268
Problem types: description: Elevation of privilege
Affected products: vendor: n/a
product: Android
Published: 2021-06-21T16:01:45.000Z