rainbutterfly/cve_corpus huggingface dataset:
CVE-2021-0870 
In RW_SetActivatedTagType of rw_main.cc, there is possible memory corruption due to a race condition. This could lead to remote code execution with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-9 Android-10 Android-11 Android-8.1Android ID: A-192472262
Problem types: description: Remote code execution
Affected products: vendor: n/a
product: Android
Published: 2021-10-22T13:27:28.000Z
CVE-2021-0871 
In PVRSRVBridgePMRPDumpSymbolicAddr of the PowerVR kernel driver, a missing size check means there is a possible integer overflow that could allow out-of-bounds heap access. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android SoCAndroid ID: A-238921253
Problem types: description: Elevation of privilege
Affected products: vendor: n/a
product: Android
Published: 2022-09-13T19:13:36.000Z
CVE-2021-0872 
In PVRSRVBridgeRGXKickVRDM of the PowerVR kernel driver, a missing size check means there is a possible integer overflow that could allow out-of-bounds heap access. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android SoCAndroid ID: A-270401229
Problem types: description: Elevation of privilege
Affected products: vendor: n/a
product: Android
Published: 2023-04-19T00:00:00.000Z
CVE-2021-0873 
In PVRSRVBridgeRGXKickRS of the PowerVR kernel driver, a missing size check means there is a possible integer overflow that could allow out-of-bounds heap access. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android SoCAndroid ID: A-270392711
Problem types: description: Elevation of privilege
Affected products: vendor: n/a
product: Android
Published: 2023-04-19T00:00:00.000Z
CVE-2021-0874 
In PVRSRVBridgeDevicememHistorySparseChange of the PowerVR kernel driver, a missing size check means there is a possible integer overflow that could allow out-of-bounds heap access. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android SoCAndroid ID: A-270399633
Problem types: description: Elevation of privilege
Affected products: vendor: n/a
product: Android
Published: 2023-04-19T00:00:00.000Z
CVE-2021-0875 
In PVRSRVBridgeChangeSparseMem of the PowerVR kernel driver, a missing size check means there is a possible integer overflow that could allow out-of-bounds heap access. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android SoCAndroid ID: A-270400061
Problem types: description: Elevation of privilege
Affected products: vendor: n/a
product: Android
Published: 2023-04-19T00:00:00.000Z
CVE-2021-0876 
In PVRSRVBridgePhysmemNewRamBackedLockedPMR of the PowerVR kernel driver, a missing size check means there is a possible integer overflow that could allow out-of-bounds heap access. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android SoCAndroid ID: A-270400229
Problem types: description: Elevation of privilege
Affected products: vendor: n/a
product: Android
Published: 2023-04-19T00:00:00.000Z
CVE-2021-0877 
Product: AndroidVersions: Android SoCAndroid ID: A-273754094
Problem types: description: Elevation of privilege
Affected products: vendor: n/a
product: Android
Published: 2023-05-15T00:00:00.000Z
CVE-2021-0878 
In PVRSRVBridgeServerSyncGetStatus of the PowerVR kernel driver, a missing size check means there is a possible integer overflow that could allow out-of-bounds heap access. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android SoCAndroid ID: A-270399153
Problem types: description: Elevation of privilege
Affected products: vendor: n/a
product: Android
Published: 2023-04-19T00:00:00.000Z
CVE-2021-0879 
In PVRSRVBridgeRGXTDMSubmitTransfer of the PowerVR kernel driver, a missing size check means there is a possible integer overflow that could allow out-of-bounds heap access. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android SoCAndroid ID: A-270397970
Problem types: description: Elevation of privilege
Affected products: vendor: n/a
product: Android
Published: 2023-04-19T00:00:00.000Z
CVE-2021-0880 
In PVRSRVBridgeRGXKickTA3D of the PowerVR kernel driver, a missing size check means there is a possible integer overflow that could allow out-of-bounds heap access. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android SoCAndroid ID: A-270396792
Problem types: description: Elevation of privilege
Affected products: vendor: n/a
product: Android
Published: 2023-04-19T00:00:00.000Z
CVE-2021-0881 
In PVRSRVBridgeRGXKickCDM of the PowerVR kernel driver, a missing size check means there is a possible integer overflow that could allow out-of-bounds heap access. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android SoCAndroid ID: A-270396350
Problem types: description: Elevation of privilege
Affected products: vendor: n/a
product: Android
Published: 2023-04-19T00:00:00.000Z
CVE-2021-0882 
In PVRSRVBridgeRGXKickSync of the PowerVR kernel driver, a missing size check means there is a possible integer overflow that could allow out-of-bounds heap access. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android SoCAndroid ID: A-270395803
Problem types: description: Elevation of privilege
Affected products: vendor: n/a
product: Android
Published: 2023-04-19T00:00:00.000Z
CVE-2021-0883 
In PVRSRVBridgeCacheOpQueue of the PowerVR kernel driver, a missing size check means there is a possible integer overflow that could allow out-of-bounds heap access. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android SoCAndroid ID: A-270395013
Problem types: description: Elevation of privilege
Affected products: vendor: n/a
product: Android
Published: 2023-04-19T00:00:00.000Z
CVE-2021-0884 
In PVRSRVBridgePhysmemImportSparseDmaBuf of the PowerVR kernel driver, a missing size check means there is a possible integer overflow that could allow out-of-bounds heap access. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android SoCAndroid ID: A-270393454
Problem types: description: Elevation of privilege
Affected products: vendor: n/a
product: Android
Published: 2023-04-19T00:00:00.000Z
CVE-2021-0885 
In PVRSRVBridgeSyncPrimOpTake of the PowerVR kernel driver, a missing size check means there is a possible integer overflow that could allow out-of-bounds heap access. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android SoCAndroid ID: A-270401914
Problem types: description: Elevation of privilege
Affected products: vendor: n/a
product: Android
Published: 2023-04-19T00:00:00.000Z
CVE-2021-0887 
In PVRSRVBridgeHeapCfgHeapConfigName, there is a possible leak of kernel heap content due to uninitialized data. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android SoCAndroid ID: A-236848817
Problem types: description: Information disclosure
Affected products: vendor: n/a
product: Android
Published: 2022-08-24T13:36:03.000Z
CVE-2021-0889 
In Android TV , there is a possible silent pairing due to lack of rate limiting in the pairing flow. This could lead to remote code execution with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-10 Android-11 Android-12 Android-8.1 Android-9Android ID: A-180745296
Problem types: description: Remote code execution
Affected products: vendor: n/a
product: Android
Published: 2021-12-15T18:05:20.000Z
CVE-2021-0891 
An unprivileged app can trigger PowerVR driver to return an uninitialized heap memory causing information disclosure.Product: AndroidVersions: Android SoCAndroid ID: A-236849490
Problem types: description: Information disclosure
Affected products: vendor: n/a
product: Android
Published: 2022-08-24T13:37:32.000Z
CVE-2021-0893 
In apusys, there is a possible memory corruption due to a use after free. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS05672107; Issue ID: ALPS05687474.
Problem types: description: Elevation of Privilege
Affected products: vendor: n/a
product: MT6873, MT6875, MT6877, MT6883, MT6885, MT6889, MT6891, MT6893, MT8195, MT8791, MT8797
Published: 2021-12-17T16:10:08.000Z
CVE-2021-0894 
In apusys, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS05672107; Issue ID: ALPS05672038.
Problem types: description: Elevation of Privilege
Affected products: vendor: n/a
product: MT6873, MT6875, MT6877, MT6883, MT6885, MT6889, MT6891, MT6893, MT8195, MT8791, MT8797
Published: 2021-12-17T16:10:09.000Z
CVE-2021-0895 
In apusys, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS05672107; Issue ID: ALPS05672003.
Problem types: description: Elevation of Privilege
Affected products: vendor: n/a
product: MT6873, MT6875, MT6877, MT6883, MT6885, MT6889, MT6891, MT6893, MT8195, MT8791, MT8797
Published: 2021-12-17T16:10:10.000Z
CVE-2021-0896 
In apusys, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS05672107; Issue ID: ALPS05671206.
Problem types: description: Elevation of Privilege
Affected products: vendor: n/a
product: MT6873, MT6875, MT6877, MT6883, MT6885, MT6889, MT6891, MT6893, MT8195, MT8791, MT8797
Published: 2021-12-17T16:10:11.000Z
CVE-2021-0897 
In apusys, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS05672107; Issue ID: ALPS05670549.
Problem types: description: Elevation of Privilege
Affected products: vendor: n/a
product: MT6873, MT6875, MT6877, MT6883, MT6885, MT6889, MT6891, MT6893, MT8195, MT8791, MT8797
Published: 2021-12-17T16:10:11.000Z
CVE-2021-0898 
In apusys, there is a possible memory corruption due to a use after free. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS05672107; Issue ID: ALPS05672071.
Problem types: description: Elevation of Privilege
Affected products: vendor: n/a
product: MT6873, MT6875, MT6877, MT6883, MT6885, MT6889, MT6891, MT6893, MT8195, MT8791, MT8797
Published: 2021-12-17T16:10:12.000Z
CVE-2021-0899 
In apusys, there is a possible memory corruption due to a use after free. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS05672107; Issue ID: ALPS05672059.
Problem types: description: Elevation of Privilege
Affected products: vendor: n/a
product: MT6873, MT6875, MT6877, MT6883, MT6885, MT6889, MT6891, MT6893, MT8195, MT8791, MT8797
Published: 2021-12-17T16:10:13.000Z
CVE-2021-0900 
In apusys, there is a possible out of bounds read due to an incorrect bounds check. This could lead to local information disclosure with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS05672107; Issue ID: ALPS05672055.
Problem types: description: Information Disclosure
Affected products: vendor: n/a
product: MT6873, MT6875, MT6877, MT6883, MT6885, MT6889, MT6891, MT6893, MT8195, MT8791, MT8797
Published: 2021-12-17T16:10:13.000Z
CVE-2021-0901 
In apusys, there is a possible memory corruption due to a missing bounds check. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS05672107; Issue ID: ALPS05664618.
Problem types: description: Elevation of Privilege
Affected products: vendor: n/a
product: MT6873, MT6875, MT6877, MT6883, MT6885, MT6889, MT6891, MT6893, MT8195, MT8791, MT8797
Published: 2021-12-17T16:10:14.000Z
CVE-2021-0902 
In apusys, there is a possible out of bounds read due to an incorrect bounds check. This could lead to local information disclosure with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS05672107; Issue ID: ALPS05656484.
Problem types: description: Information Disclosure
Affected products: vendor: n/a
product: MT6873, MT6875, MT6877, MT6883, MT6885, MT6889, MT6891, MT6893, MT8195, MT8791, MT8797
Published: 2021-12-17T16:10:15.000Z
CVE-2021-0903 
In apusys, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS05672107; Issue ID: ALPS05656488.
Problem types: description: Elevation of Privilege
Affected products: vendor: n/a
product: MT6873, MT6875, MT6877, MT6883, MT6885, MT6889, MT6891, MT6893, MT8195, MT8791, MT8797
Published: 2021-12-17T16:10:16.000Z
CVE-2021-0904 
In SRAMROM, there is a possible permission bypass due to an insecure permission setting. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS06076938; Issue ID: ALPS06076938.
Problem types: description: Elevation of Privilege
Affected products: vendor: n/a
product: MT6771, MT8183, MT8385, MT8788
Published: 2021-12-15T18:05:52.000Z
CVE-2021-0918 
In gatt_process_notification of gatt_cl.cc, there is a possible out of bounds write due to a missing bounds check. This could lead to remote code execution over Bluetooth with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-12Android ID: A-197536150
Problem types: description: Remote code execution
Affected products: vendor: n/a
product: Android
Published: 2021-12-15T18:05:32.000Z
CVE-2021-0919 
In getService of IServiceManager.cpp, there is a possible unhandled exception due to an integer overflow. This could lead to local denial of service making the lockscreen unusable with no additional execution privileges needed. User interaction is needed for exploitation.Product: AndroidVersions: Android-10 Android-11 Android-9Android ID: A-197336441
Problem types: description: Denial of service
Affected products: vendor: n/a
product: Android
Published: 2021-12-15T18:05:32.000Z
CVE-2021-0920 
In unix_scm_to_skb of af_unix.c, there is a possible use after free bug due to a race condition. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android kernelAndroid ID: A-196926917References: Upstream kernel
Problem types: description: Elevation of privilege
Affected products: vendor: n/a
product: Android
Published: 2021-12-15T18:05:31.000Z
CVE-2021-0921 
In ParsingPackageImpl of ParsingPackageImpl.java, there is a possible parcel serialization/deserialization mismatch due to improper input validation. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-11Android ID: A-195962697
Problem types: description: Elevation of privilege
Affected products: vendor: n/a
product: Android
Published: 2021-12-15T18:05:30.000Z
CVE-2021-0922 
In enforceCrossUserOrProfilePermission of PackageManagerService.java, there is a possible bypass of INTERACT_ACROSS_PROFILES permission due to a missing permission check. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-11Android ID: A-195630721
Problem types: description: Elevation of privilege
Affected products: vendor: n/a
product: Android
Published: 2021-12-15T18:05:29.000Z
CVE-2021-0923 
In createOrUpdate of Permission.java, there is a possible way to gain internal permissions due to a missing permission check. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-12Android ID: A-195338390
Problem types: description: Elevation of privilege
Affected products: vendor: n/a
product: Android
Published: 2021-12-15T18:05:28.000Z
CVE-2021-0924 
In xhci_vendor_get_ops of xhci.c, there is a possible out of bounds read due to a missing bounds check. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android kernelAndroid ID: A-194461020References: Upstream kernel
Problem types: description: Elevation of privilege
Affected products: vendor: n/a
product: Android
Published: 2021-12-15T18:05:28.000Z
CVE-2021-0925 
In rw_t4t_sm_detect_ndef of rw_t4t.cc, there is a possible out of bounds read due to an incorrect bounds check. This could lead to remote information disclosure due to a limited change in behavior based on the out of bounds data with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-12Android ID: A-191444150
Problem types: description: Information disclosure
Affected products: vendor: n/a
product: Android
Published: 2021-12-15T18:05:27.000Z
CVE-2021-0926 
In onCreate of NfcImportVCardActivity.java, there is a possible way to add a contact without user's consent due to a missing permission check. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-10 Android-11 Android-12 Android-9Android ID: A-191053931
Problem types: description: Elevation of privilege
Affected products: vendor: n/a
product: Android
Published: 2021-12-15T18:05:25.000Z
CVE-2021-0927 
In requestChannelBrowsable of TvInputManagerService.java, there is a possible permission bypass due to a logic error in the code. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-10 Android-11 Android-12 Android-8.1 Android-9Android ID: A-189824175
Problem types: description: Elevation of privilege
Affected products: vendor: n/a
product: Android
Published: 2021-12-15T18:05:24.000Z
CVE-2021-0928 
In createFromParcel of OutputConfiguration.java, there is a possible parcel serialization/deserialization mismatch due to improper input validation. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-10 Android-11 Android-9Android ID: A-188675581
Problem types: description: Elevation of privilege
Affected products: vendor: n/a
product: Android
Published: 2021-12-15T18:05:23.000Z
CVE-2021-0929 
In ion_dma_buf_end_cpu_access and related functions of ion.c, there is a possible way to corrupt memory due to a use after free. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android kernelAndroid ID: A-187527909References: Upstream kernel
Problem types: description: Elevation of privilege
Affected products: vendor: n/a
product: Android
Published: 2021-12-15T18:05:22.000Z
CVE-2021-0930 
In phNxpNciHal_process_ext_rsp of phNxpNciHal_ext.cc, there is a possible out of bounds write due to a missing bounds check. This could lead to remote code execution over NFC with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-10 Android-11 Android-12 Android-9Android ID: A-181660091
Problem types: description: Remote code execution
Affected products: vendor: n/a
product: Android
Published: 2021-12-15T18:05:22.000Z
CVE-2021-0931 
In getAlias of BluetoothDevice.java, there is a possible way to create misleading permission dialogs due to missing data filtering. This could lead to local information disclosure with User execution privileges needed. User interaction is needed for exploitation.Product: AndroidVersions: Android-10 Android-11 Android-12 Android-9Android ID: A-180747689
Problem types: description: Information disclosure
Affected products: vendor: n/a
product: Android
Published: 2021-12-15T18:05:21.000Z
CVE-2021-0932 
In showNotification of NavigationModeController.java, there is a possible confused deputy due to an unsafe PendingIntent. This could lead to local escalation of privilege that allows actions performed as the System UI with User execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-10Android ID: A-173025705
Problem types: description: Elevation of privilege
Affected products: vendor: n/a
product: Android
Published: 2021-12-15T18:05:19.000Z
CVE-2021-0933 
In onCreate of CompanionDeviceActivity.java or DeviceChooserActivity.java, there is a possible way for HTML tags to interfere with a consent dialog due to improper input validation. This could lead to remote escalation of privilege, confusing the user into accepting pairing of a malicious Bluetooth device, with no additional execution privileges needed. User interaction is needed for exploitation.Product: AndroidVersions: Android-10 Android-11 Android-12 Android-9Android ID: A-172251622
Problem types: description: Elevation of privilege
Affected products: vendor: n/a
product: Android
Published: 2021-12-15T18:05:18.000Z
CVE-2021-0934 
In findAllDeAccounts of AccountsDb.java, there is a possible denial of service due to resource exhaustion. This could lead to local denial of service with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-10 Android-11 Android-12 Android-12L Android-13Android ID: A-169762606
Problem types: description: Denial of service
Affected products: vendor: n/a
product: Android
Published: 2022-12-13T00:00:00.000Z