rainbutterfly/cve_corpus huggingface dataset:
CVE-2020-0392 
In getLayerDebugInfo of SurfaceFlinger.cpp, there is a possible code execution due to a double free. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-9 Android-10 Android-11Android ID: A-150226608
Problem types: description: Elevation of privilege
Affected products: vendor: n/a
product: Android
Published: 2020-09-17T15:27:47.000Z
CVE-2020-0393 
In decrypt and decrypt_1_2 of CryptoPlugin.cpp, there is a possible out of bounds read due to a missing bounds check. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-9 Android-10 Android-11Android ID: A-154123412
Problem types: description: Information disclosure
Affected products: vendor: n/a
product: Android
Published: 2020-09-17T15:43:18.000Z
CVE-2020-0394 
In onCreate of BluetoothPairingDialog.java, there is a possible tapjacking vector due to an insecure default value. This could lead to local escalation of privilege and untrusted devices accessing contact lists with no additional execution privileges needed. User interaction is needed for exploitation.Product: AndroidVersions: Android-8.0 Android-8.1 Android-9 Android-10 Android-11Android ID: A-155648639
Problem types: description: Elevation of privilege
Affected products: vendor: n/a
product: Android
Published: 2020-09-17T15:47:57.000Z
CVE-2020-0395 
In showNotification of EmergencyCallbackModeService.java, there is a possible permission bypass due to an unsafe PendingIntent. This could lead to local information disclosure with User execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-8.0 Android-8.1 Android-9 Android-10 Android-11Android ID: A-154124307
Problem types: description: Information disclosure
Affected products: vendor: n/a
product: Android
Published: 2020-09-17T15:43:43.000Z
CVE-2020-0396 
In various places in Telephony, there is a possible permission bypass due to an unsafe PendingIntent. This could lead to local information disclosure with User execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-8.1 Android-9 Android-10 Android-11 Android-8.0Android ID: A-155094269
Problem types: description: Information disclosure
Affected products: vendor: n/a
product: Android
Published: 2020-09-17T15:46:59.000Z
CVE-2020-0397 
In getNotificationBuilder of CarrierServiceStateTracker.java, there is a possible permission bypass due to an unsafe PendingIntent. This could lead to local information disclosure with User execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-8.1 Android-9 Android-10 Android-11 Android-8.0Android ID: A-155092443
Problem types: description: Information disclosure
Affected products: vendor: n/a
product: Android
Published: 2020-09-17T15:46:31.000Z
CVE-2020-0398 
In updateMwi of NotificationMgr.java, there is a possible permission bypass due to a PendingIntent error. This could lead to local information disclosure with User execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-10 Android-11Android ID: A-154323381
Problem types: description: Information disclosure
Affected products: vendor: n/a
product: Android
Published: 2020-10-14T13:03:37.000Z
CVE-2020-0399 
In showLimitedSimFunctionWarningNotification of NotificationMgr.java, there is a possible permission bypass due to an unsafe PendingIntent. This could lead to local information disclosure with User execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-8.0 Android-8.1 Android-9 Android-10 Android-11Android ID: A-153993591
Problem types: description: Information disclosure
Affected products: vendor: n/a
product: Android
Published: 2020-09-17T15:42:55.000Z
CVE-2020-0400 
In showDataRoamingNotification of NotificationMgr.java, there is a possible permission bypass due to an unsafe PendingIntent. This could lead to local information disclosure with User execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-11 Android-10Android ID: A-153356561
Problem types: description: Information disclosure
Affected products: vendor: n/a
product: Android
Published: 2020-10-14T13:03:09.000Z
CVE-2020-0401 
In setInstallerPackageName of PackageManagerService.java, there is a missing permission check. This could lead to local escalation of privilege and granting spurious permissions with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-8.0 Android-8.1 Android-9 Android-10 Android-11Android ID: A-150857253
Problem types: description: Elevation of privilege
Affected products: vendor: n/a
product: Android
Published: 2020-09-17T15:28:15.000Z
CVE-2020-0403 
In the FPC TrustZone fingerprint App, there is a possible invalid command handler due to an exposed test feature. This could lead to local escalation of privilege in the TEE, with System execution privileges required. User interaction is not needed for exploitation.Product: AndroidVersions: Android kernelAndroid ID: A-131252923
Problem types: description: Elevation of privilege
Affected products: vendor: n/a
product: Android
Published: 2020-09-17T18:28:52.000Z
CVE-2020-0404 
In uvc_scan_chain_forward of uvc_driver.c, there is a possible linked list corruption due to an unusual root cause. This could lead to local escalation of privilege in the kernel with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android kernelAndroid ID: A-111893654References: Upstream kernel
Problem types: description: Elevation of privilege
Affected products: vendor: n/a
product: Android
Published: 2020-09-17T15:20:11.000Z
CVE-2020-0405 
In NetworkStackNotifier, there is a possible permissions bypass due to an unsafe implicit PendingIntent. This could lead to local escalation of privilege with User execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-11Android ID: A-157475111
Problem types: description: Elevation of privilege
Affected products: vendor: n/a
product: Android
Published: 2020-09-18T15:06:34.000Z
CVE-2020-0406 
In libmpeg2dec, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege if another exploit allowed this to be triggered with different parameters, with no additional execution privileges needed. User interaction is needed for exploitation.Product: AndroidVersions: Android-11Android ID: A-137794014
Problem types: description: Elevation of privilege
Affected products: vendor: n/a
product: Android
Published: 2020-09-17T20:53:49.000Z
CVE-2020-0407 
In various functions in fscrypt_ice.c and related files in some implementations of f2fs encryption that use encryption hardware which only supports 32-bit IVs (Initialization Vectors), 64-bit IVs are used and later are truncated to 32 bits. This may cause IV reuse and thus weakened disk encryption. This could lead to local information disclosure with System execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android kernelAndroid ID: A-153450752References: N/A
Problem types: description: Information disclosure
Affected products: vendor: n/a
product: Android
Published: 2020-09-17T15:41:18.000Z
CVE-2020-0408 
In remove of String16.cpp, there is a possible out of bounds write due to an integer overflow. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-11 Android-8.0 Android-8.1 Android-9 Android-10Android ID: A-156999009
Problem types: description: Elevation of privilege
Affected products: vendor: n/a
product: Android
Published: 2020-10-14T13:05:14.000Z
CVE-2020-0409 
In create of FileMap.cpp, there is a possible out of bounds write due to an integer overflow. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-10 Android-8.0 Android-8.1 Android-9Android ID: A-156997193
Problem types: description: Elevation of privilege
Affected products: vendor: n/a
product: Android
Published: 2020-11-10T12:48:30.000Z
CVE-2020-0410 
In setNotification of SapServer.java, there is a possible permission bypass due to a PendingIntent error. This could lead to local information disclosure with User execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-8.0 Android-8.1 Android-9 Android-10 Android-11Android ID: A-156021269
Problem types: description: Information disclosure
Affected products: vendor: n/a
product: Android
Published: 2020-10-14T13:04:31.000Z
CVE-2020-0411 
In ~AACExtractor() of AACExtractor.cpp, there is a possible out of bounds write due to uninitialized data. This could lead to remote information disclosure with no additional execution privileges needed. User interaction is needed for exploitation.Product: AndroidVersions: Android-10 Android-11Android ID: A-142641801
Problem types: description: Information disclosure
Affected products: vendor: n/a
product: Android
Published: 2020-10-14T13:02:35.000Z
CVE-2020-0412 
In setProcessMemoryTrimLevel of ActivityManagerService.java, there is a missing permission check. This could lead to local information disclosure of foreground processes with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-10 Android-11 Android-8.0 Android-8.1 Android-9Android ID: A-160390416
Problem types: description: Information disclosure
Affected products: vendor: n/a
product: Android
Published: 2020-10-14T13:07:05.000Z
CVE-2020-0413 
In gatt_process_read_by_type_rsp of gatt_cl.cc, there is a possible out of bounds read due to a missing bounds check. This could lead to remote information disclosure in the Bluetooth server with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-8.1 Android-9 Android-10 Android-11 Android-8.0Android ID: A-158778659
Problem types: description: Information disclosure
Affected products: vendor: n/a
product: Android
Published: 2020-10-14T13:05:55.000Z
CVE-2020-0414 
In AudioFlinger::RecordThread::threadLoop of audioflinger/Threads.cpp, there is a possible non-silenced audio buffer due to a permissions bypass. This could lead to remote information disclosure with no additional execution privileges needed. User interaction is needed for exploitation.Product: AndroidVersions: Android-10 Android-11Android ID: A-157708122
Problem types: description: Information disclosure
Affected products: vendor: n/a
product: Android
Published: 2020-10-14T13:05:29.000Z
CVE-2020-0415 
In various locations in SystemUI, there is a possible permission bypass due to an unsafe PendingIntent. This could lead to local information disclosure of contact data with User execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-9 Android-10 Android-11 Android-8.0 Android-8.1Android ID: A-156020795
Problem types: description: Information disclosure
Affected products: vendor: n/a
product: Android
Published: 2020-10-14T13:04:20.000Z
CVE-2020-0416 
In multiple settings screens, there are possible tapjacking attacks due to an insecure default value. This could lead to local escalation of privilege and permissions with no additional execution privileges needed. User interaction is needed for exploitation.Product: AndroidVersions: Android-9 Android-10 Android-11 Android-8.0 Android-8.1Android ID: A-155288585
Problem types: description: Elevation of privilege
Affected products: vendor: n/a
product: Android
Published: 2020-10-14T13:04:09.000Z
CVE-2020-0417 
In setNiNotification of GpsNetInitiatedHandler.java, there is a possible permissions bypass due to an empty mutable PendingIntent. This could lead to local escalation of privilege with User execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-10 Android-8.1 Android-9Android ID: A-154319182
Problem types: description: Elevation of privilege
Affected products: vendor: n/a
product: Android
Published: 2021-07-14T13:43:07.000Z
CVE-2020-0418 
In getPermissionInfosForGroup of Utils.java, there is a logic error. This could lead to local escalation of privilege with User execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-10Android ID: A-153879813
Problem types: description: Elevation of privilege
Affected products: vendor: n/a
product: Android
Published: 2020-11-10T12:47:40.000Z
CVE-2020-0419 
In generateInfo of PackageInstallerSession.java, there is a possible leak of cross-profile URI data during app installation due to a missing permission check. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-8.1 Android-9 Android-10 Android-11Android ID: A-142125338
Problem types: description: Information disclosure
Affected products: vendor: n/a
product: Android
Published: 2020-10-14T13:02:25.000Z
CVE-2020-0420 
In setUpdatableDriverPath of GpuService.cpp, there is a possible memory corruption due to a missing permission check. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-11Android ID: A-162383705
Problem types: description: Elevation of privilege
Affected products: vendor: n/a
product: Android
Published: 2020-10-14T13:08:03.000Z
CVE-2020-0421 
In appendFormatV of String8.cpp, there is a possible out of bounds write due to incorrect error handling. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-8.1 Android-9 Android-10 Android-11 Android-8.0Android ID: A-161894517
Problem types: description: Elevation of privilege
Affected products: vendor: n/a
product: Android
Published: 2020-10-14T13:07:32.000Z
CVE-2020-0422 
In constructImportFailureNotification of NotificationImportExportListener.java, there is a possible permissions bypass due to an unsafe PendingIntent. This could lead to local information disclosure of contact data with User execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-8.1 Android-9 Android-10 Android-11 Android-8.0Android ID: A-161718556
Problem types: description: Information disclosure
Affected products: vendor: n/a
product: Android
Published: 2020-10-14T13:07:24.000Z
CVE-2020-0423 
In binder_release_work of binder.c, there is a possible use-after-free due to improper locking. This could lead to local escalation of privilege in the kernel with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android kernelAndroid ID: A-161151868References: N/A
Problem types: description: Elevation of privilege
Affected products: vendor: n/a
product: Android
Published: 2020-10-14T13:07:13.000Z
CVE-2020-0424 
In send_vc of res_send.cpp, there is a possible out of bounds read due to an incorrect bounds check. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-11 Android-9 Android-10Android ID: A-161362564
Problem types: description: Information disclosure
Affected products: vendor: n/a
product: Android
Published: 2020-11-10T12:51:17.000Z
CVE-2020-0425 
There is a possible way to view notifications even when the "Lockdown" feature is on. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-11Android ID: A-124000380
Problem types: description: Information disclosure
Affected products: vendor: n/a
product: Android
Published: 2020-09-17T20:50:39.000Z
CVE-2020-0426 
In SyncManager, there is a possible permission bypass due to an unsafe PendingIntent. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-11Android ID: A-154921790
Problem types: description: Information disclosure
Affected products: vendor: n/a
product: Android
Published: 2020-09-17T20:50:51.000Z
CVE-2020-0427 
In create_pinctrl of core.c, there is a possible out of bounds read due to a use after free. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android kernelAndroid ID: A-140550171
Problem types: description: Information disclosure
Affected products: vendor: n/a
product: Android
Published: 2020-09-17T00:00:00.000Z
CVE-2020-0428 
In CamX code, there is a possible use after free due to a race condition. This could lead to local escalation of privilege with System execution privileges required. User interaction is not needed for exploitation.Product: AndroidVersions: Android kernelAndroid ID: A-123999783
Problem types: description: Elevation of privilege
Affected products: vendor: n/a
product: Android
Published: 2020-09-17T18:42:05.000Z
CVE-2020-0429 
In l2tp_session_delete and related functions of l2tp_core.c, there is possible memory corruption due to a use after free. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android kernelAndroid ID: A-152735806
Problem types: description: Elevation of privilege
Affected products: vendor: n/a
product: Android
Published: 2020-09-17T18:42:18.000Z
CVE-2020-0430 
In skb_headlen of /include/linux/skbuff.h, there is a possible out of bounds read due to memory corruption. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android kernelAndroid ID: A-153881554
Problem types: description: Elevation of privilege
Affected products: vendor: n/a
product: Android
Published: 2020-09-17T18:44:40.000Z
CVE-2020-0431 
In kbd_keycode of keyboard.c, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android kernelAndroid ID: A-144161459
Problem types: description: Elevation of privilege
Affected products: vendor: n/a
product: Android
Published: 2020-09-17T18:45:00.000Z
CVE-2020-0432 
In skb_to_mamac of networking.c, there is a possible out of bounds write due to an integer overflow. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android kernelAndroid ID: A-143560807
Problem types: description: Elevation of privilege
Affected products: vendor: n/a
product: Android
Published: 2020-09-17T18:45:31.000Z
CVE-2020-0433 
In blk_mq_queue_tag_busy_iter of blk-mq-tag.c, there is a possible use after free due to improper locking. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android kernelAndroid ID: A-151939299
Problem types: description: Elevation of privilege
Affected products: vendor: n/a
product: Android
Published: 2020-09-17T18:45:46.000Z
CVE-2020-0434 
In Pixel's use of the Catpipe library, there is possible memory corruption due to a use after free. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android kernelAndroid ID: A-150730508
Problem types: description: Elevation of privilege
Affected products: vendor: n/a
product: Android
Published: 2020-09-17T18:46:30.000Z
CVE-2020-0437 
In CellBroadcastReceiver's intent handlers, there is a possible denial of service due to a missing permission check. This could lead to local denial of service of emergency alerts with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-8.0 Android-8.1 Android-9 Android-10 Android-11Android ID: A-162741784
Problem types: description: Denial of service
Affected products: vendor: n/a
product: Android
Published: 2020-11-10T12:52:51.000Z
CVE-2020-0438 
In the AIBinder_Class constructor of ibinder.cpp, there is a possible arbitrary code execution due to uninitialized data. This could lead to local escalation of privilege if a process were using libbinder_ndk in a vulnerable way with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-11 Android-10Android ID: A-161812320
Problem types: description: Elevation of privilege
Affected products: vendor: n/a
product: Android
Published: 2020-11-10T12:51:57.000Z
CVE-2020-0439 
In generatePackageInfo of PackageManagerService.java, there is a possible permissions bypass due to an incorrect permission check. This could lead to local escalation of privilege that allows instant apps access to permissions not allowed for instant apps, with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-8.1 Android-9 Android-10 Android-11 Android-8.0Android ID: A-140256621
Problem types: description: Elevation of privilege
Affected products: vendor: n/a
product: Android
Published: 2020-11-10T12:46:20.000Z
CVE-2020-0440 
In createVirtualDisplay of DisplayManagerService.java, there is a possible way to create a trusted virtual display due to a missing permission check. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-11Android ID: A-162627132
Problem types: description: Elevation of privilege
Affected products: vendor: n/a
product: Android
Published: 2020-12-14T21:51:38.000Z
CVE-2020-0441 
In Message and toBundle of Notification.java, there is a possible resource exhaustion due to improper input validation. This could lead to remote denial of service requiring a device reset to fix with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-11 Android-8.0 Android-8.1 Android-9 Android-10Android ID: A-158304295
Problem types: description: Denial of service
Affected products: vendor: n/a
product: Android
Published: 2020-11-10T12:49:22.000Z
CVE-2020-0442 
In Message and toBundle of Notification.java, there is a possible UI slowdown or crash due to improper input validation. This could lead to remote denial of service if a malicious contact file is received, with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-10 Android-11 Android-8.0 Android-8.1 Android-9Android ID: A-147358092
Problem types: description: Denial of service
Affected products: vendor: n/a
product: Android
Published: 2020-11-10T12:47:04.000Z