rainbutterfly/cve_corpus huggingface dataset:
CVE-2020-0121 
In updateUidProcState of AppOpsService.java, there is a possible permission bypass due to a logic error. This could lead to local information disclosure of location data with User execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-10Android ID: A-148180766
Problem types: description: Information disclosure
Affected products: vendor: n/a
product: Android
Published: 2020-06-10T17:11:24.000Z
CVE-2020-0122 
In the permission declaration for com.google.android.providers.gsf.permission.WRITE_GSERVICES in AndroidManifest.xml, there is a possible permissions bypass. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-8.0 Android-8.1 Android-9 Android-10Android ID: A-147247775
Problem types: description: Elevation of privilege
Affected products: vendor: n/a
product: Android
Published: 2020-07-17T20:09:18.000Z
CVE-2020-0123 
There is a possible out of bounds write due to an incorrect bounds check.Product: AndroidVersions: Android SoCAndroid ID: A-149871374
Problem types: description: Elevation of privilege
Affected products: vendor: n/a
product: Android
Published: 2020-09-17T15:23:08.000Z
CVE-2020-0124 
In markBootComplete of InstalldNativeService.cpp, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-10Android ID: A-140237592
Problem types: description: Elevation of privilege
Affected products: vendor: n/a
product: Android
Published: 2020-06-11T14:13:27.000Z
CVE-2020-0125 
In mediadrm, there is a possible out of bounds read due to a missing bounds check. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-11Android ID: A-137282168
Problem types: description: Information disclosure
Affected products: vendor: n/a
product: Android
Published: 2020-09-17T20:54:00.000Z
CVE-2020-0126 
In multiple functions in DrmPlugin.cpp, there is a possible use after free due to a race condition. This could lead to local code execution with System execution privileges required. User interaction is not needed for exploitation.Product: AndroidVersions: Android-10Android ID: A-137878930
Problem types: description: Elevation of privilege
Affected products: vendor: n/a
product: Android
Published: 2020-06-11T14:43:47.000Z
CVE-2020-0127 
In AudioStream::decode of AudioGroup.cpp, there is a possible out of bounds read due to a missing bounds check. This could lead to remote information disclosure in the phone process with no additional execution privileges needed. User interaction is needed for exploitation.Product: AndroidVersions: Android-10Android ID: A-140054506
Problem types: description: Information disclosure
Affected products: vendor: n/a
product: Android
Published: 2020-06-11T14:43:47.000Z
CVE-2020-0128 
In addPacket of AMPEG4ElementaryAssembler, there is an out of bounds read due to an integer overflow. This could lead to remote information disclosure with no additional execution privileges required. User interaction is not needed for exploitation.Product: AndroidVersions: Android-10Android ID: A-123940919
Problem types: description: Information disclosure
Affected products: vendor: n/a
product: Android
Published: 2020-06-11T14:43:47.000Z
CVE-2020-0129 
In SetData of btm_ble_multi_adv.cc, there is a possible out-of-bound write due to an incorrect bounds check. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-10Android ID: A-123292010
Problem types: description: Elevation of privilege
Affected products: vendor: n/a
product: Android
Published: 2020-06-11T14:43:48.000Z
CVE-2020-0130 
In screencap, there is a possible command injection due to improper input validation. This could lead to local escalation of privilege in a system process with User execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-11Android ID: A-123230379
Problem types: description: Elevation of privilege
Affected products: vendor: n/a
product: Android
Published: 2020-09-17T20:46:29.000Z
CVE-2020-0131 
In parseChunk of MPEG4Extractor.cpp, there is a possible out of bounds write due to incompletely initialized data. This could lead to remote code execution with no additional execution privileges needed. User interaction is needed for exploitation.Product: AndroidVersions: Android-10Android ID: A-151159638
Problem types: description: Remote code execution
Affected products: vendor: n/a
product: Android
Published: 2020-06-11T14:43:47.000Z
CVE-2020-0132 
In BnAAudioService::onTransact of IAAudioService.cpp, there is a possible out of bounds read due to unsafe deserialization. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-10Android ID: A-139473816
Problem types: description: Information disclosure
Affected products: vendor: n/a
product: Android
Published: 2020-06-11T14:43:47.000Z
CVE-2020-0133 
In MockLocationAppPreferenceController.java, it is possible to mock the GPS location of the device due to a permissions bypass. This could lead to local escalation of privilege with User execution privileges needed. User interaction is needed for exploitation.Product: AndroidVersions: Android-10Android ID: A-145136060
Problem types: description: Elevation of privilege
Affected products: vendor: n/a
product: Android
Published: 2020-06-11T14:43:48.000Z
CVE-2020-0134 
In BnDrm::onTransact of IDrm.cpp, there is a possible information disclosure due to uninitialized data. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-10Android ID: A-146052771
Problem types: description: Information disclosure
Affected products: vendor: n/a
product: Android
Published: 2020-06-11T14:43:47.000Z
CVE-2020-0135 
In dump of RollbackManagerServiceImpl.java, there is a possible backup metadata exposure due to a missing permission check. This could lead to local information disclosure with System execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-10Android ID: A-150949837
Problem types: description: Information disclosure
Affected products: vendor: n/a
product: Android
Published: 2020-06-11T14:43:47.000Z
CVE-2020-0136 
In multiple locations of Parcel.cpp, there is a possible out-of-bounds write due to an integer overflow. This could lead to local escalation of privilege in the system server with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-10Android ID: A-120078455
Problem types: description: Elevation of privilege
Affected products: vendor: n/a
product: Android
Published: 2020-06-11T14:43:48.000Z
CVE-2020-0137 
In setIPv6AddrGenMode of NetworkManagementService.java, there is a possible bypass of networking permissions due to a missing permission check. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-10Android ID: A-141920289
Problem types: description: Elevation of privilege
Affected products: vendor: n/a
product: Android
Published: 2020-06-11T14:43:48.000Z
CVE-2020-0138 
In get_element_attr_rsp of btif_rc.cc, there is a possible out of bounds write due to a missing bounds check. This could lead to remote code execution if bluetoothtbd were used, which it isn't in typical Android platforms, with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-10Android ID: A-142878416
Problem types: description: Remote code execution
Affected products: vendor: n/a
product: Android
Published: 2020-06-11T14:43:48.000Z
CVE-2020-0139 
In NDEF_MsgValidate of ndef_utils.c, there is a possible out of bounds read due to an integer overflow. This could lead to local information disclosure if a malformed NFC tag is provided by the firmware. System execution privileges are needed and user interaction is not needed for exploitation.Product: AndroidVersions: Android-10Android ID: A-145520471
Problem types: description: Information disclosure
Affected products: vendor: n/a
product: Android
Published: 2020-06-11T14:43:49.000Z
CVE-2020-0140 
In rw_i93_sm_detect_ndef of rw_i93.c, there is a possible information disclosure due to a missing bounds check. This could lead to remote information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-10Android ID: A-146053215
Problem types: description: Information disclosure
Affected products: vendor: n/a
product: Android
Published: 2020-06-11T14:43:49.000Z
CVE-2020-0141 
In OutputBuffersArray::realloc of CCodecBuffers.cpp, there is a possible heap disclosure due to a race condition. This could lead to remote information disclosure with System execution privileges needed. User interaction is needed for exploitation.Product: AndroidVersions: Android-10Android ID: A-142544793
Problem types: description: Information disclosure
Affected products: vendor: n/a
product: Android
Published: 2020-06-11T14:43:47.000Z
CVE-2020-0142 
In rw_i93_sm_format of rw_i93.c, there is a possible information disclosure due to a missing bounds check. This could lead to remote information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-10Android ID: A-146435761
Problem types: description: Information disclosure
Affected products: vendor: n/a
product: Android
Published: 2020-06-11T14:43:49.000Z
CVE-2020-0143 
In nfa_dm_ndef_find_next_handler of nfa_dm_ndef.c, there is a possible out of bounds read due to a missing bounds check. This could lead to local information disclosure of heap data via compromised device firmware with System execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-10Android ID: A-145597277
Problem types: description: Information disclosure
Affected products: vendor: n/a
product: Android
Published: 2020-06-11T14:43:49.000Z
CVE-2020-0144 
In btm_proc_sp_req_evt of btm_sec.cc, there is a possible out of bounds read due to a missing bounds check. This could lead to local information disclosure via compromised device firmware with System execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-10Android ID: A-142543497
Problem types: description: Information disclosure
Affected products: vendor: n/a
product: Android
Published: 2020-06-11T14:43:49.000Z
CVE-2020-0145 
In btm_simple_pair_complete of btm_sec.cc, there is a possible out of bounds read due to a missing bounds check. This could lead to local information disclosure via compromised device firmware with System execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-10Android ID: A-142544079
Problem types: description: Information disclosure
Affected products: vendor: n/a
product: Android
Published: 2020-06-11T14:43:49.000Z
CVE-2020-0146 
In btu_hcif_hardware_error_evt of btu_hcif.cc, there is a possible out of bounds read due to a missing bounds check. This could lead to local information disclosure via compromised device firmware with System execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-10Android ID: A-142546561
Problem types: description: Information disclosure
Affected products: vendor: n/a
product: Android
Published: 2020-06-11T14:43:49.000Z
CVE-2020-0147 
In btu_hcif_esco_connection_chg_evt of btu_hcif.cc, there is a possible out of bounds read due to a missing bounds check. This could lead to local information disclosure via compromised device firmware with System execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-10Android ID: A-142638392
Problem types: description: Information disclosure
Affected products: vendor: n/a
product: Android
Published: 2020-06-11T14:43:49.000Z
CVE-2020-0148 
In btu_hcif_pin_code_request_evt, btu_hcif_link_key_request_evt, and btu_hcif_link_key_notification_evt of btu_hcif.cc, there is a possible out of bounds read due to a missing bounds check. This could lead to local information disclosure via compromised device firmware with System execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-10Android ID: A-142638492
Problem types: description: Information disclosure
Affected products: vendor: n/a
product: Android
Published: 2020-06-11T14:43:49.000Z
CVE-2020-0149 
In btu_hcif_mode_change_evt of btu_hcif.cc, there is a possible out of bounds read due to a missing bounds check. This could lead to local information disclosure via compromised device firmware with System execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-10Android ID: A-142544089
Problem types: description: Information disclosure
Affected products: vendor: n/a
product: Android
Published: 2020-06-11T14:43:49.000Z
CVE-2020-0150 
In rw_t3t_message_set_block_list of rw_t3t.cc, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-10Android ID: A-142280329
Problem types: description: Elevation of privilege
Affected products: vendor: n/a
product: Android
Published: 2020-06-11T14:43:49.000Z
CVE-2020-0151 
In avb_vbmeta_image_verify of avb_vbmeta_image.c there is a possible out of bounds read due to a missing bounds check. This could lead to a local information disclosure with System execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-10Android ID: A-133164384
Problem types: description: Information disclosure
Affected products: vendor: n/a
product: Android
Published: 2020-06-11T14:43:47.000Z
CVE-2020-0152 
In avb_vbmeta_image_verify of avb_vbmeta_image.c, there is a possible out of bounds read due to a missing bounds check. This could lead to local information disclosure with System execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-10Android ID: A-145992159
Problem types: description: Information disclosure
Affected products: vendor: n/a
product: Android
Published: 2020-06-11T14:43:47.000Z
CVE-2020-0153 
In phNxpNciHal_write_ext of phNxpNciHal_ext.cc, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-10Android ID: A-139733543
Problem types: description: Elevation of privilege
Affected products: vendor: n/a
product: Android
Published: 2020-06-11T14:43:49.000Z
CVE-2020-0154 
In nci_proc_core_rsp of nci_hrcv.cc, there is a possible out of bounds read due to an incorrect bounds check. This could lead to local information disclosure via compromised device firmware with System execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-10Android ID: A-141550919
Problem types: description: Information disclosure
Affected products: vendor: n/a
product: Android
Published: 2020-06-11T14:43:49.000Z
CVE-2020-0155 
In phNxpNciHal_send_ese_hal_cmd of phNxpNciHal_ext.cc, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with User execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-10Android ID: A-139736386
Problem types: description: Elevation of privilege
Affected products: vendor: n/a
product: Android
Published: 2020-06-11T14:43:49.000Z
CVE-2020-0156 
In NxpNfc::ioctl of NxpNfc.cpp, there is a possible out of bounds read due to a missing bounds check. This could lead to local information disclosure with User execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-10Android ID: A-139736127
Problem types: description: Information disclosure
Affected products: vendor: n/a
product: Android
Published: 2020-06-11T14:43:49.000Z
CVE-2020-0157 
In nfa_hci_conn_cback of nfa_hci_main.cc, there is a possible out of bounds read due to a missing bounds check. This could lead to remote information disclosure via compromised device firmware with System execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-10Android ID: A-139740814
Problem types: description: Information disclosure
Affected products: vendor: n/a
product: Android
Published: 2020-06-11T14:43:49.000Z
CVE-2020-0158 
In nfc_ncif_proc_t3t_polling_ntf of nfc_ncif.cc, there is a possible out of bounds read due to a missing bounds check. This could lead to local information disclosure with System execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-10Android ID: A-141547128
Problem types: description: Information disclosure
Affected products: vendor: n/a
product: Android
Published: 2020-06-11T14:43:49.000Z
CVE-2020-0159 
In rw_mfc_writeBlock of rw_mfc.cc, there is a possible out of bounds read due to an incorrect bounds check. This could lead to local information disclosure with System execution privileges needed. User interaction is needed for exploitation.Product: AndroidVersions: Android-10Android ID: A-140768035
Problem types: description: Information disclosure
Affected products: vendor: n/a
product: Android
Published: 2020-06-11T14:43:49.000Z
CVE-2020-0160 
In setSyncSampleParams of SampleTable.cpp, there is possible resource exhaustion due to a missing bounds check. This could lead to remote denial of service with no additional execution privileges needed. User interaction is needed for exploitation.Product: AndroidVersions: Android-10Android ID: A-124771364
Problem types: description: Denial of service
Affected products: vendor: n/a
product: Android
Published: 2020-06-11T14:43:48.000Z
CVE-2020-0161 
In parseChunk of MPEG4Extractor.cpp, there is possible resource exhaustion due to improper input validation. This could lead to remote denial of service with no additional execution privileges needed. User interaction is needed for exploitation.Product: AndroidVersions: Android-10Android ID: A-127973550
Problem types: description: Denial of service
Affected products: vendor: n/a
product: Android
Published: 2020-06-11T14:43:48.000Z
CVE-2020-0162 
In parseSampleAuxiliaryInformationOffsets of MPEG4Extractor.cpp, there is possible resource exhaustion due to improper input validation. This could lead to remote denial of service with no additional execution privileges needed. User interaction is needed for exploitation.Product: AndroidVersions: Android-10Android ID: A-124526959
Problem types: description: Denial of service
Affected products: vendor: n/a
product: Android
Published: 2020-06-11T14:43:48.000Z
CVE-2020-0163 
In parseSampleAuxiliaryInformationSizes of MPEG4Extractor.cpp, there is possible resource exhaustion due to improper input validation. This could lead to remote denial of service with no additional execution privileges needed. User interaction is needed for exploitation.Product: AndroidVersions: Android-10Android ID: A-124525515
Problem types: description: Denial of service
Affected products: vendor: n/a
product: Android
Published: 2020-06-11T14:43:48.000Z
CVE-2020-0164 
In phNxpNciHal_NfcDep_cmd_ext of phNxpNciHal_NfcDepSWPrio.cc, there is a possible out of bounds read due to a missing bounds check. This could lead to local information disclosure with System execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-10Android ID: A-139736125
Problem types: description: Information disclosure
Affected products: vendor: n/a
product: Android
Published: 2020-06-11T14:43:49.000Z
CVE-2020-0165 
In phNxpNciHal_NfcDep_cmd_ext of phNxpNciHal_NfcDepSWPrio.cc, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege via compromised device firmware with System execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-10Android ID: A-139532977
Problem types: description: Elevation of privilege
Affected products: vendor: n/a
product: Android
Published: 2020-06-11T14:43:49.000Z
CVE-2020-0166 
In multiple functions of URI.java, there is a possible escalation of privilege due to missing validation in the parceling of URI information. This could lead to a local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-10Android ID: A-124526860
Problem types: description: Elevation of privilege
Affected products: vendor: n/a
product: Android
Published: 2020-06-11T14:10:37.000Z
CVE-2020-0167 
In load of ResourceTypes.cpp, there is a possible out of bounds read due to an integer overflow. This could lead to local information disclosure with no additional execution privileges needed. User interaction is needed for exploitation.Product: AndroidVersions: Android-10Android ID: A-129475100
Problem types: description: Information disclosure
Affected products: vendor: n/a
product: Android
Published: 2020-06-11T14:43:47.000Z
CVE-2020-0168 
In impeg2_fmt_conv_yuv420p_to_yuv420sp_uv of impeg2_format_conv.c, there is a possible out of bounds write due to a missing bounds check. This could lead to remote code execution with no additional execution privileges needed. User interaction is needed for exploitation.Product: AndroidVersions: Android-10Android ID: A-137798382
Problem types: description: Remote code execution
Affected products: vendor: n/a
product: Android
Published: 2020-06-11T14:43:47.000Z
CVE-2020-0169 
In RTTTL_Event of eas_rtttl.c, there is possible resource exhaustion due to a missing bounds check. This could lead to remote denial of service with no additional execution privileges needed. User interaction is needed for exploitation.Product: AndroidVersions: Android-10Android ID: A-123700383
Problem types: description: Denial of service
Affected products: vendor: n/a
product: Android
Published: 2020-06-11T14:43:48.000Z
CVE-2020-0170 
In IMY_Event of eas_imelody.c, there is possible resource exhaustion due to a missing bounds check. This could lead to remote denial of service with no additional execution privileges needed. User interaction is needed for exploitation.Product: AndroidVersions: Android-10Android ID: A-127310810
Problem types: description: Denial of service
Affected products: vendor: n/a
product: Android
Published: 2020-06-11T14:43:48.000Z
CVE-2020-0171 
In Parse_lart of eas_mdls.c, there is possible resource exhaustion due to a missing bounds check. This could lead to remote denial of service with no additional execution privileges needed. User interaction is needed for exploitation.Product: AndroidVersions: Android-10Android ID: A-127313223
Problem types: description: Denial of service
Affected products: vendor: n/a
product: Android
Published: 2020-06-11T14:43:48.000Z