rainbutterfly/cve_corpus huggingface dataset:
CVE-2021-0333 
In onCreate of BluetoothPermissionActivity.java, there is a possible permissions bypass due to a tapjacking overlay that obscures the phonebook permissions dialog when a Bluetooth device is connecting. This could lead to local escalation of privilege with User execution privileges needed. User interaction is needed for exploitation.Product: AndroidVersions: Android-8.1 Android-9 Android-10 Android-11Android ID: A-168504491
Problem types: description: Elevation of privilege
Affected products: vendor: n/a
product: Android
Published: 2021-02-10T16:49:28.000Z
CVE-2021-0334 
In onTargetSelected of ResolverActivity.java, there is a possible settings bypass allowing an app to become the default handler for arbitrary domains. This could lead to local escalation of privilege with User execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-8.1 Android-9 Android-10 Android-11Android ID: A-163358811
Problem types: description: Elevation of privilege
Affected products: vendor: n/a
product: Android
Published: 2021-02-10T16:49:21.000Z
CVE-2021-0335 
In process of C2SoftHevcDec.cpp, there is a possible out of bounds write due to a use after free. This could lead to remote information disclosure with no additional execution privileges needed. User interaction is needed for exploitation.Product: AndroidVersions: Android-11Android ID: A-160346309
Problem types: description: Information disclosure
Affected products: vendor: n/a
product: Android
Published: 2021-02-10T16:49:13.000Z
CVE-2021-0336 
In onReceive of BluetoothPermissionRequest.java, there is a possible permissions bypass due to a mutable PendingIntent. This could lead to local escalation of privilege that bypasses a permission check, with User execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-9 Android-10 Android-11 Android-8.1Android ID: A-158219161
Problem types: description: Elevation of privilege
Affected products: vendor: n/a
product: Android
Published: 2021-02-10T16:49:06.000Z
CVE-2021-0337 
In moveInMediaStore of FileSystemProvider.java, there is a possible file exposure due to stale metadata. This could lead to local escalation of privilege with User execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-8.1 Android-9 Android-10 Android-11Android ID: A-157474195
Problem types: description: Elevation of privilege
Affected products: vendor: n/a
product: Android
Published: 2021-02-10T16:48:59.000Z
CVE-2021-0338 
In SystemSettingsValidators, there is a possible permanent denial of service due to missing bounds checks on UI settings. This could lead to local denial of service with User execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-10 Android-11Android ID: A-156260178
Problem types: description: Denial of service
Affected products: vendor: n/a
product: Android
Published: 2021-02-10T16:48:43.000Z
CVE-2021-0339 
In loadAnimation of WindowContainer.java, there is a possible way to keep displaying a malicious app while a target app is brought to the foreground. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is needed for exploitation.Product: AndroidVersions: Android-10 Android-8.1 Android-9Android ID: A-145728687
Problem types: description: Elevation of privilege
Affected products: vendor: n/a
product: Android
Published: 2021-02-10T16:48:14.000Z
CVE-2021-0340 
In parseNextBox of IsoInterface.java, there is a possible leak of unredacted location information due to improper input validation. This could lead to remote information disclosure with no additional execution privileges needed. User interaction is needed for exploitation.Product: AndroidVersions: Android-10Android ID: A-134155286
Problem types: description: Elevation of privilege
Affected products: vendor: n/a
product: Android
Published: 2021-02-10T16:47:54.000Z
CVE-2021-0341 
In verifyHostName of OkHostnameVerifier.java, there is a possible way to accept a certificate for the wrong domain due to improperly used crypto. This could lead to remote information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-8.1 Android-9 Android-10 Android-11Android ID: A-171980069
Problem types: description: Information disclosure
Affected products: vendor: n/a
product: Android
Published: 2021-02-10T16:50:15.000Z
CVE-2021-0342 
In tun_get_user of tun.c, there is possible memory corruption due to a use after free. This could lead to local escalation of privilege with System execution privileges required. User interaction is not required for exploitation. Product: Android; Versions: Android kernel; Android ID: A-146554327.
Problem types: description: Elevation of privilege
Affected products: vendor: n/a
product: Android
Published: 2021-01-11T20:28:52.000Z
CVE-2021-0343 
In kisd, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Product: Android; Versions: Android-11; Patch ID: ALPS05449962.
Problem types: description: Elevation of Privilege
Affected products: vendor: n/a
product: Android
Published: 2021-02-04T17:09:15.000Z
CVE-2021-0344 
In mtkpower, there is a possible memory corruption due to a missing bounds check. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Product: Android; Versions: Android-10, Android-11; Patch ID: ALPS05437558.
Problem types: description: Elevation of Privilege
Affected products: vendor: n/a
product: Android
Published: 2021-02-04T17:09:33.000Z
CVE-2021-0345 
In mobile_log_d, there is a possible escalation of privilege due to improper input validation. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Product: Android; Versions: Android-10, Android-11; Patch ID: ALPS05432974.
Problem types: description: Elevation of Privilege
Affected products: vendor: n/a
product: Android
Published: 2021-02-04T17:09:52.000Z
CVE-2021-0346 
In vpu, there is a possible out of bounds write due to an incorrect bounds check. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Product: Android; Versions: Android-10, Android-11; Patch ID: ALPS05371580.
Problem types: description: Elevation of Privilege
Affected products: vendor: n/a
product: Android
Published: 2021-02-04T17:10:07.000Z
CVE-2021-0347 
In ccu, there is a possible out of bounds read due to a missing bounds check. This could lead to local information disclosure with System execution privileges needed. User interaction is needed for exploitation. Product: Android; Versions: Android-8.1, Android-9, Android-10, Android-11; Patch ID: ALPS05377188.
Problem types: description: Information Disclosure
Affected products: vendor: n/a
product: Android
Published: 2021-02-04T17:10:17.000Z
CVE-2021-0348 
In vpu, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Product: Android; Versions: Android-9, Android-10, Android-11; Patch ID: ALPS05349201.
Problem types: description: Elevation of Privilege
Affected products: vendor: n/a
product: Android
Published: 2021-02-04T17:10:26.000Z
CVE-2021-0349 
In display driver, there is a possible memory corruption due to a use after free. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Product: Android; Versions: Android-9, Android-10, Android-11; Patch ID: ALPS05362646.
Problem types: description: Elevation of Privilege
Affected products: vendor: n/a
product: Android
Published: 2021-02-04T17:10:35.000Z
CVE-2021-0350 
In ged, there is a possible system crash due to an improper input validation. This could lead to local denial of service with System execution privileges needed. User interaction is not needed for exploitation. Product: Android; Versions: Android-8.1, Android-9, Android-10, Android-11; Patch ID: ALPS05342338.
Problem types: description: Denial of Service
Affected products: vendor: n/a
product: Android
Published: 2021-02-04T17:10:43.000Z
CVE-2021-0351 
In wlan driver, there is a possible system crash due to a missing bounds check. This could lead to remote denial of service with no additional execution privileges needed. User interaction is not needed for exploitation. Product: Android; Versions: Android-8.1, Android-9, Android-10, Android-11; Patch ID: ALPS05412917.
Problem types: description: Denial of Service
Affected products: vendor: n/a
product: Android
Published: 2021-02-04T17:10:51.000Z
CVE-2021-0352 
In RT regmap driver, there is a possible memory corruption due to type confusion. This could lead to local denial of service with System execution privileges needed. User interaction is not needed for exploitation. Product: Android; Versions: Android-10, Android-11; Patch ID: ALPS05453809.
Problem types: description: Elevation of Privilege
Affected products: vendor: n/a
product: Android
Published: 2021-02-02T23:01:39.000Z
CVE-2021-0353 
In kisd, there is a possible memory corruption due to a heap buffer overflow. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Product: Android; Versions: Android-11; Patch ID: ALPS05425247.
Problem types: description: Elevation of Privilege
Affected products: vendor: n/a
product: Android
Published: 2021-02-02T23:01:35.000Z
CVE-2021-0354 
In ged, there is a possible out of bounds write due to an integer overflow. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Product: Android; Versions: Android-8.1, Android-9, Android-10, Android-11; Patch ID: ALPS05431161.
Problem types: description: Elevation of Privilege
Affected products: vendor: n/a
product: Android
Published: 2021-02-02T23:01:33.000Z
CVE-2021-0355 
In kisd, there is a possible out of bounds write due to an integer overflow. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Product: Android; Versions: Android-11; Patch ID: ALPS05425581.
Problem types: description: Elevation of Privilege
Affected products: vendor: n/a
product: Android
Published: 2021-02-02T23:01:30.000Z
CVE-2021-0356 
In netdiag, there is a possible command injection due to improper input validation. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Product: Android; Versions: Android-10, Android-11; Patch ID: ALPS05442014.
Problem types: description: Elevation of Privilege
Affected products: vendor: n/a
product: Android
Published: 2021-02-02T23:01:27.000Z
CVE-2021-0357 
In netdiag, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Product: Android; Versions: Android-10, Android-11; Patch ID: ALPS05442002.
Problem types: description: Elevation of Privilege
Affected products: vendor: n/a
product: Android
Published: 2021-02-02T23:01:24.000Z
CVE-2021-0358 
In netdiag, there is a possible command injection due to improper input validation. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Product: Android; Versions: Android-10, Android-11; Patch ID: ALPS05442022.
Problem types: description: Elevation of Privilege
Affected products: vendor: n/a
product: Android
Published: 2021-02-02T23:01:21.000Z
CVE-2021-0359 
In netdiag, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Product: Android; Versions: Android-10, Android-11; Patch ID: ALPS05442011.
Problem types: description: Elevation of Privilege
Affected products: vendor: n/a
product: Android
Published: 2021-02-02T23:01:18.000Z
CVE-2021-0360 
In netdiag, there is a possible out of bounds write due to an incorrect bounds check. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Product: Android; Versions: Android-10, Android-11; Patch ID: ALPS05442006.
Problem types: description: Elevation of Privilege
Affected products: vendor: n/a
product: Android
Published: 2021-02-02T23:01:15.000Z
CVE-2021-0361 
In kisd, there is a possible out of bounds read due to improper input validation. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Product: Android; Versions: Android-11; Patch ID: ALPS05449968.
Problem types: description: Elevation of Privilege
Affected products: vendor: n/a
product: Android
Published: 2021-02-02T23:01:11.000Z
CVE-2021-0362 
In aee, there is a possible memory corruption due to a stack buffer overflow. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Product: Android; Versions: Android-11; Patch ID: ALPS05457070.
Problem types: description: Elevation of Privilege
Affected products: vendor: n/a
product: Android
Published: 2021-02-02T23:01:08.000Z
CVE-2021-0363 
In mobile_log_d, there is a possible command injection due to a missing bounds check. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Product: Android; Versions: Android-10, Android-11; Patch ID: ALPS05458478.
Problem types: description: Elevation of Privilege
Affected products: vendor: n/a
product: Android
Published: 2021-02-02T23:01:02.000Z
CVE-2021-0364 
In mobile_log_d, there is a possible command injection due to improper input validation. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Product: Android; Versions: Android-10, Android-11; Patch ID: ALPS05458478; Issue ID: ALPS05458503.
Problem types: description: Elevation of Privilege
Affected products: vendor: n/a
product: Android
Published: 2021-02-02T23:00:59.000Z
CVE-2021-0365 
In display driver, there is a possible memory corruption due to a use after free. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Product: Android; Versions: Android-10, Android-11; Patch ID: ALPS05454782.
Problem types: description: Elevation of Privilege
Affected products: vendor: n/a
product: Android
Published: 2021-02-02T23:00:57.000Z
CVE-2021-0366 
In vpu, there is a possible memory corruption due to a race condition. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Product: Android; Versions: Android-10, Android-11; Patch ID: ALPS05371580; Issue ID: ALPS05379093.
Problem types: description: Elevation of Privilege
Affected products: vendor: n/a
product: Android
Published: 2021-02-26T20:19:44.000Z
CVE-2021-0367 
In vpu, there is a possible memory corruption due to a race condition. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Product: Android; Versions: Android-10, Android-11; Patch ID: ALPS05371580; Issue ID: ALPS05379085.
Problem types: description: Elevation of Privilege
Affected products: vendor: n/a
product: Android
Published: 2021-02-26T20:19:39.000Z
CVE-2021-0368 
In oggpack_look of bitwise.c, there is a possible out of bounds read due to a missing bounds check. This could lead to remote information disclosure with no additional execution privileges needed. User interaction is needed for exploitation.Product: AndroidVersions: Android-11Android ID: A-169829774
Problem types: description: Information disclosure
Affected products: vendor: n/a
product: Android
Published: 2021-03-10T15:52:59.000Z
CVE-2021-0369 
In CrossProfileAppsServiceImpl.java, there is the possibility of an application's INTERACT_ACROSS_PROFILES grant state not displaying properly in the setting UI due to a logic error in the code. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is needed for exploitation.Product: AndroidVersions: Android-11Android ID: A-166561076
Problem types: description: Information disclosure
Affected products: vendor: n/a
product: Android
Published: 2021-03-10T15:53:36.000Z
CVE-2021-0370 
In Write of NxpMfcReader.cc, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege in the NFC server with System execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-11Android ID: A-169259605
Problem types: description: Elevation of privilege
Affected products: vendor: n/a
product: Android
Published: 2021-03-10T15:54:01.000Z
CVE-2021-0371 
In nci_proc_rf_management_ntf of nci_hrcv.cc, there is a possible out of bounds read due to a missing bounds check. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-11Android ID: A-164440989
Problem types: description: Information disclosure
Affected products: vendor: n/a
product: Android
Published: 2021-03-10T15:55:17.000Z
CVE-2021-0372 
In getMediaOutputSliceAction of RemoteMediaSlice.java, there is a possible permission bypass due to an unsafe PendingIntent. This could lead to local escalation of privilege with User execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-11Android ID: A-174047735
Problem types: description: Elevation of privilege
Affected products: vendor: n/a
product: Android
Published: 2021-03-10T15:55:54.000Z
CVE-2021-0374 
In BnAudioPolicyService::onTransact of IAudioPolicyService.cpp, there is a possible out of bounds read due to a missing bounds check. This could lead to local information disclosure with System execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-11Android ID: A-169572641
Problem types: description: Information disclosure
Affected products: vendor: n/a
product: Android
Published: 2021-03-10T15:56:32.000Z
CVE-2021-0375 
In onPackageModified of VoiceInteractionManagerService.java, there is a possible change of default applications due to an insecure default value. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-11Android ID: A-167261484
Problem types: description: Elevation of privilege
Affected products: vendor: n/a
product: Android
Published: 2021-03-10T15:57:20.000Z
CVE-2021-0376 
In checkUriPermission and related functions of MediaProvider.java, there is a possible way to access external files due to a permissions bypass. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-11Android ID: A-115619667
Problem types: description: Elevation of privilege
Affected products: vendor: n/a
product: Android
Published: 2021-03-10T15:57:41.000Z
CVE-2021-0377 
In DeltaPerformer::Write of delta_performer.cc, there is a possible use of untrusted input due to improper input validation. This could lead to a local bypass of defense in depth protections with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-11Android ID: A-160800689
Problem types: description: Elevation of privilege
Affected products: vendor: n/a
product: Android
Published: 2021-03-10T15:59:29.000Z
CVE-2021-0378 
In getNbits of pvmp3_getbits.cpp, there is a possible out of bounds read due to a heap buffer overflow. This could lead to remote information disclosure with no additional execution privileges needed. User interaction is needed for exploitation.Product: AndroidVersions: Android-11Android ID: A-154076193
Problem types: description: Information disclosure
Affected products: vendor: n/a
product: Android
Published: 2021-03-10T16:00:46.000Z
CVE-2021-0379 
In getUpTo17bits of pvmp3_getbits.cpp, there is a possible out of bounds read due to a heap buffer overflow. This could lead to remote information disclosure with no additional execution privileges needed. User interaction is needed for exploitation.Product: AndroidVersions: Android-11Android ID: A-154075955
Problem types: description: Information disclosure
Affected products: vendor: n/a
product: Android
Published: 2021-03-10T16:01:13.000Z
CVE-2021-0380 
In onReceive of DcTracker.java, there is a possible way to trigger a provisioning URL and modify other telephony settings due to a missing permission check. This could lead to local escalation of privilege during the onboarding flow with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-11Android ID: A-172459128
Problem types: description: Elevation of privilege
Affected products: vendor: n/a
product: Android
Published: 2021-03-10T16:02:07.000Z
CVE-2021-0381 
In updateNotifications of DeviceStorageMonitorService.java, there is a possible permission bypass due to an unsafe PendingIntent. This could lead to local information disclosure with User execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-11Android ID: A-153466381
Problem types: description: Information disclosure
Affected products: vendor: n/a
product: Android
Published: 2021-03-10T16:09:34.000Z
CVE-2021-0382 
In checkSlicePermission of SliceManagerService.java, there is a possible resource exposure due to an incorrect permission check. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-11Android ID: A-140727941
Problem types: description: Information disclosure
Affected products: vendor: n/a
product: Android
Published: 2021-03-10T16:09:52.000Z
CVE-2021-0383 
In done of CaptivePortalLoginActivity.java, there is a confused deputy. This could lead to local escalation of privilege in carrier settings with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-11Android ID: A-160871056
Problem types: description: Elevation of privilege
Affected products: vendor: n/a
product: Android
Published: 2021-03-10T16:10:22.000Z
CVE-2021-0385 
In createConnectToAvailableNetworkNotification of ConnectToNetworkNotificationBuilder.java, there is a possible connection to untrusted WiFi networks due to notification interaction above the lockscreen. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-11Android ID: A-172584372
Problem types: description: Elevation of privilege
Affected products: vendor: n/a
product: Android
Published: 2021-03-10T16:11:07.000Z