rainbutterfly/cve_corpus huggingface dataset:
CVE-2020-0172 
In Parse_art of eas_mdls.c, there is possible resource exhaustion due to a missing bounds check. This could lead to remote denial of service with no additional execution privileges needed. User interaction is needed for exploitation.Product: AndroidVersions: Android-10Android ID: A-127312550
Problem types: description: Denial of service
Affected products: vendor: n/a
product: Android
Published: 2020-06-11T14:43:48.000Z
CVE-2020-0173 
In Parse_lins of eas_mdls.c, there is possible resource exhaustion due to improper input validation. This could lead to remote denial of service with no additional execution privileges needed. User interaction is needed for exploitation.Product: AndroidVersions: Android-10Android ID: A-127313764
Problem types: description: Denial of service
Affected products: vendor: n/a
product: Android
Published: 2020-06-11T14:43:48.000Z
CVE-2020-0174 
In Parse_ptbl of eas_mdls.c, there is possible resource exhaustion due to a missing bounds check. This could lead to remote denial of service with no additional execution privileges needed. User interaction is needed for exploitation.Product: AndroidVersions: Android-10Android ID: A-127313537
Problem types: description: Denial of service
Affected products: vendor: n/a
product: Android
Published: 2020-06-11T14:43:48.000Z
CVE-2020-0175 
In XMF_ReadNode of eas_xmf.c, there is possible resource exhaustion due to improper input validation. This could lead to remote denial of service with no additional execution privileges needed. User interaction is needed for exploitation.Product: AndroidVersions: Android-10Android ID: A-126380818
Problem types: description: Denial of service
Affected products: vendor: n/a
product: Android
Published: 2020-06-11T14:43:48.000Z
CVE-2020-0176 
In avdt_msg_prs_rej of avdt_msg.cc, there is a possible out-of-bounds read due to improper input validation. This could lead to remote information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-10Android ID: A-79702484
Problem types: description: Information disclosure
Affected products: vendor: n/a
product: Android
Published: 2020-06-11T14:43:50.000Z
CVE-2020-0177 
In connect() of PanService.java, there is a possible permissions bypass. This could lead to local escalation of privilege to change network connection settings with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-10Android ID: A-126206353
Problem types: description: Elevation of privilege
Affected products: vendor: n/a
product: Android
Published: 2020-06-11T14:43:49.000Z
CVE-2020-0178 
In getAllConfigFlags of SettingsProvider.cpp, there is a possible illegal read due to a missing permission check. This could lead to local information disclosure of config flags with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-10Android ID: A-143299398
Problem types: description: Information disclosure
Affected products: vendor: n/a
product: Android
Published: 2020-06-11T14:43:50.000Z
CVE-2020-0179 
In doSendObjectInfo of MtpServer.cpp, there is a possible path traversal attack due to insufficient input validation. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is required for exploitation.Product: AndroidVersions: Android-10Android ID: A-130656917
Problem types: description: Elevation of privilege
Affected products: vendor: n/a
product: Android
Published: 2020-06-11T14:43:47.000Z
CVE-2020-0180 
In GetOpusHeaderBuffers() of OpusHeader.cpp, there is a possible out of bounds read due to a missing bounds check. This could lead to remote information disclosure with no additional execution privileges needed. User interaction is needed for exploitation.Product: AndroidVersions: Android-10Android ID: A-142861738
Problem types: description: Information disclosure
Affected products: vendor: n/a
product: Android
Published: 2020-06-11T14:43:47.000Z
CVE-2020-0181 
In exif_data_load_data_thumbnail of exif-data.c, there is a possible denial of service due to an integer overflow. This could lead to remote denial of service with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-10Android ID: A-145075076
Problem types: description: Denial of service
Affected products: vendor: n/a
product: Android
Published: 2020-06-11T14:43:48.000Z
CVE-2020-0182 
In exif_entry_get_value of exif-entry.c, there is a possible out of bounds read due to a missing bounds check. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-10Android ID: A-147140917
Problem types: description: Information disclosure
Affected products: vendor: n/a
product: Android
Published: 2020-06-11T14:43:47.000Z
CVE-2020-0183 
In handleMessage of BluetoothManagerService, there is an incomplete reset. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is needed for exploitation.Product: AndroidVersions: Android-10Android ID: A-110181479
Problem types: description: Elevation of privilege
Affected products: vendor: n/a
product: Android
Published: 2020-06-11T14:43:49.000Z
CVE-2020-0184 
In ihevcd_ref_list() of ihevcd_ref_list.c, there is a possible infinite loop due to a missing bounds check. This could lead to remote denial of service with no additional execution privileges needed. User interaction is needed for exploitation.Product: AndroidVersions: Android-10Android ID: A-141688974
Problem types: description: Denial of service
Affected products: vendor: n/a
product: Android
Published: 2020-06-11T14:43:48.000Z
CVE-2020-0185 
In avrc_pars_browsing_cmd of avrc_pars_tg.cc, there is a possible out of bounds read due to a missing bounds check. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-10Android ID: A-79945152
Problem types: description: Information disclosure
Affected products: vendor: n/a
product: Android
Published: 2020-06-11T14:43:50.000Z
CVE-2020-0186 
In hal_fd_init of hal_fd.cc, there is a possible out of bounds write due to an incorrect bounds check. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-10Android ID: A-146144463
Problem types: description: Elevation of privilege
Affected products: vendor: n/a
product: Android
Published: 2020-06-11T14:43:49.000Z
CVE-2020-0187 
In engineSetMode of BaseBlockCipher.java, there is a possible incorrect cryptographic algorithm chosen due to an incomplete comparison. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-10Android ID: A-148517383
Problem types: description: Information disclosure
Affected products: vendor: n/a
product: Android
Published: 2020-06-11T14:11:50.000Z
CVE-2020-0188 
In onCreatePermissionRequest of SettingsSliceProvider.java, there is a possible permissions bypass due to a PendingIntent error. This could lead to local escalation of privilege with User execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-10Android ID: A-147355897
Problem types: description: Elevation of privilege
Affected products: vendor: n/a
product: Android
Published: 2020-06-11T14:43:49.000Z
CVE-2020-0189 
In ihevcd_decode() of ihevcd_decode.c, there is possible resource exhaustion due to an infinite loop. This could lead to remote denial of service with no additional execution privileges needed. User interaction is needed for exploitation.Product: AndroidVersions: Android-10Android ID: A-139939283
Problem types: description: Denial of service
Affected products: vendor: n/a
product: Android
Published: 2020-06-11T14:43:48.000Z
CVE-2020-0190 
In ideint_weave_blk of ideint_utils.c, there is a possible out of bounds write due to a heap buffer overflow. This could lead to remote code execution with no additional execution privileges needed. User interaction is needed for exploitation.Product: AndroidVersions: Android-10Android ID: A-140324890
Problem types: description: Remote code execution
Affected products: vendor: n/a
product: Android
Published: 2020-06-11T14:43:47.000Z
CVE-2020-0191 
In ih264d_update_default_index_list() of ih264d_dpb_mgr.c, there is a possible out of bounds read due to a logic error. This could lead to remote information disclosure with no additional execution privileges needed. User interaction is needed for exploitation.Product: AndroidVersions: Android-10Android ID: A-140561484
Problem types: description: Information disclosure
Affected products: vendor: n/a
product: Android
Published: 2020-06-11T14:43:47.000Z
CVE-2020-0192 
In ih264d_decode_slice_thread of ih264d_thread_parse_decode.c, there is a possible out of bounds read due to improper input validation. This could lead to remote information disclosure with no additional execution privileges needed. User interaction is needed for exploitation.Product: AndroidVersions: Android-10Android ID: A-144687080
Problem types: description: Information disclosure
Affected products: vendor: n/a
product: Android
Published: 2020-06-11T14:43:47.000Z
CVE-2020-0193 
In ihevc_intra_pred_chroma_mode_3_to_9_av8 of ihevc_intra_pred_chroma_mode_3_to_9.s, there is a possible out of bounds read due to a heap buffer overflow. This could lead to remote information disclosure with no additional execution privileges needed. User interaction is needed for exploitation.Product: AndroidVersions: Android-10Android ID: A-144595488
Problem types: description: Information disclosure
Affected products: vendor: n/a
product: Android
Published: 2020-06-11T14:43:47.000Z
CVE-2020-0194 
In ihevcd_parse_slice_header of ihevcd_parse_slice_header.c, there is a possible out of bounds write due to an integer overflow. This could lead to remote code execution with no additional execution privileges needed. User interaction is needed for exploitation.Product: AndroidVersions: Android-10Android ID: A-143826590
Problem types: description: Remote code execution
Affected products: vendor: n/a
product: Android
Published: 2020-06-11T14:43:47.000Z
CVE-2020-0195 
In ihevcd_iquant_itrans_recon_ctb of ihevcd_iquant_itrans_recon_ctb.c and related functions, there is a possible information disclosure due to uninitialized data. This could lead to remote information disclosure with no additional execution privileges needed. User interaction is needed for exploitation.Product: AndroidVersions: Android-10Android ID: A-144686961
Problem types: description: Information disclosure
Affected products: vendor: n/a
product: Android
Published: 2020-06-11T14:43:48.000Z
CVE-2020-0196 
In RegisterNotificationResponse::GetEvent of register_notification_packet.cc, there is a possible abort due to improper input validation. This could lead to remote denial of service of the Bluetooth service, over Bluetooth, with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-10Android ID: A-144066833
Problem types: description: Denial of service
Affected products: vendor: n/a
product: Android
Published: 2020-06-11T14:43:50.000Z
CVE-2020-0197 
In InitDataParser::parsePssh of InitDataParser.cpp, there is a possible out of bounds read due to a missing bounds check. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-10Android ID: A-137370379
Problem types: description: Information disclosure
Affected products: vendor: n/a
product: Android
Published: 2020-06-11T14:43:48.000Z
CVE-2020-0198 
In exif_data_load_data_content of exif-data.c, there is a possible UBSAN abort due to an integer overflow. This could lead to remote denial of service with no additional execution privileges needed. User interaction is needed for exploitation.Product: AndroidVersions: Android-10Android ID: A-146428941
Problem types: description: Denial of service
Affected products: vendor: n/a
product: Android
Published: 2020-06-11T14:43:48.000Z
CVE-2020-0199 
In TimeCheck::TimeCheckThread::threadLoop of TimeCheck.cpp, there is a possible use-after-free due to a race condition. This could lead to local information disclosure with System execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-10Android ID: A-142142406
Problem types: description: Information disclosure
Affected products: vendor: n/a
product: Android
Published: 2020-06-11T14:43:48.000Z
CVE-2020-0200 
In ReadLittleEndian of raw_bit_reader.cc, there is a possible out of bounds read due to a missing bounds check. This could lead to remote information disclosure in the media server with no additional execution privileges needed. User interaction is needed for exploitation.Product: AndroidVersions: Android-10Android ID: A-147231862
Problem types: description: Information disclosure
Affected products: vendor: n/a
product: Android
Published: 2020-06-11T14:43:48.000Z
CVE-2020-0201 
In showSecurityFields of WifiConfigController.java there is a possible credential leak due to a confused deputy. This could lead to remote escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-10Android ID: A-143601727
Problem types: description: Elevation of privilege
Affected products: vendor: n/a
product: Android
Published: 2020-06-11T14:43:49.000Z
CVE-2020-0202 
In onHandleIntent of TraceService.java, there is a possible bypass of developer settings requirements for capturing system traces due to a missing permission check. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is needed for exploitation. Product: Android Versions: Android-11 Android ID: A-142936525
Problem types: description: Elevation of privilege
Affected products: vendor: n/a
product: Android
Published: 2020-06-11T14:43:49.000Z
CVE-2020-0203 
In freeIsolatedUidLocked of ProcessList.java, there is a possible UID reuse due to improper cleanup. This could lead to local escalation of privilege between constrained processes with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-10Android ID: A-146313311
Problem types: description: Elevation of privilege
Affected products: vendor: n/a
product: Android
Published: 2020-06-11T14:14:21.000Z
CVE-2020-0204 
In InstallPackage of package.cpp, there is a possible bypass of a signature check due to a Time of Check/Time of Use condition. This could lead to local escalation of privilege by allowing a bypass of the initial zip file signature check for an OS update with no additional execution privileges needed. User interaction is needed for exploitation.Product: AndroidVersions: Android-10Android ID: A-136498130
Problem types: description: Elevation of privilege
Affected products: vendor: n/a
product: Android
Published: 2020-06-11T14:43:49.000Z
CVE-2020-0205 
In the DaalaBitReader constructor of entropy_decoder.cc, there is a possible out of bounds read due to a missing bounds check. This could lead to remote information disclosure in the media server with no additional execution privileges needed. User interaction is needed for exploitation.Product: AndroidVersions: Android-10Android ID: A-147234020
Problem types: description: Information disclosure
Affected products: vendor: n/a
product: Android
Published: 2020-06-11T14:43:48.000Z
CVE-2020-0206 
In the settings app, there is a possible app crash due to improper input validation. This could lead to local denial of service of the Settings app with User execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-10Android ID: A-136005061
Problem types: description: Denial of service
Affected products: vendor: n/a
product: Android
Published: 2020-06-11T14:43:50.000Z
CVE-2020-0207 
In next_marker of jdmarker.c, there is a possible out of bounds read due to improper input validation. This could lead to remote information disclosure with no additional execution privileges needed. User interaction is needed for exploitation.Product: AndroidVersions: Android-10Android ID: A-135532289
Problem types: description: Information disclosure
Affected products: vendor: n/a
product: Android
Published: 2020-06-11T14:43:48.000Z
CVE-2020-0208 
In multiple functions of AccountManager.java, there is a possible permissions bypass. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-10Android ID: A-145207098
Problem types: description: Elevation of privilege
Affected products: vendor: n/a
product: Android
Published: 2020-06-11T14:20:40.000Z
CVE-2020-0209 
In multiple functions of AccountManager.java, there is a possible permissions bypass. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-10Android ID: A-145206842
Problem types: description: Elevation of privilege
Affected products: vendor: n/a
product: Android
Published: 2020-06-11T14:43:47.000Z
CVE-2020-0210 
In removeSharedAccountAsUser of AccountManager.java, there is a possible permissions bypass to a confused deputy. This could lead to local escalation of privilege with User execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-10Android ID: A-145206763
Problem types: description: Elevation of privilege
Affected products: vendor: n/a
product: Android
Published: 2020-06-11T14:43:47.000Z
CVE-2020-0211 
In SumCompoundHorizontalTaps of convolve_neon.cc, there is a possible out of bounds read due to a missing bounds check. This could lead to remote information disclosure with no additional execution privileges needed. User interaction is needed for exploitation.Product: AndroidVersions: Android-10Android ID: A-147491773
Problem types: description: Information disclosure
Affected products: vendor: n/a
product: Android
Published: 2020-06-11T14:43:48.000Z
CVE-2020-0212 
In _onBufferDestroyed of InputBufferManager.cpp, there is a possible out of bounds read due to a use after free. This could lead to remote information disclosure with no additional execution privileges needed. User interaction is needed for exploitation.Product: AndroidVersions: Android-10Android ID: A-135140854
Problem types: description: Information disclosure
Affected products: vendor: n/a
product: Android
Published: 2020-06-11T14:43:48.000Z
CVE-2020-0213 
In hevcd_fmt_conv_420sp_to_420sp_av8 of ihevcd_fmt_conv_420sp_to_420sp.s, there is a possible out of bounds write due to a heap buffer overflow. This could lead to remote information disclosure with no additional execution privileges needed. User interaction is needed for exploitation. Product: Android Versions: Android-10 Android-11 Android ID: A-143464314
Problem types: description: Remote code execution
Affected products: vendor: n/a
product: Android
Published: 2020-06-11T14:43:47.000Z
CVE-2020-0214 
In ce_t4t_process_select_file_cmd of ce_t4t.cc, there is a possible out of bounds read due to an incorrect bounds check. This could lead to remote information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-10Android ID: A-140292264
Problem types: description: Information disclosure
Affected products: vendor: n/a
product: Android
Published: 2020-06-11T14:43:50.000Z
CVE-2020-0215 
In onCreate of ConfirmConnectActivity.java, there is a possible leak of Bluetooth information due to a permissions bypass. This could lead to local escalation of privilege that exposes a pairing Bluetooth MAC address with no additional execution privileges needed. User interaction is needed for exploitation. Product: Android Versions: Android-9 Android-10 Android-11 Android-8.0 Android-8.1 Android ID: A-140417248
Problem types: description: Elevation of privilege
Affected products: vendor: n/a
product: Android
Published: 2020-06-11T14:43:49.000Z
CVE-2020-0216 
In phNciNfc_RecvMfResp of phNxpExtns_MifareStd.cpp, there is a possible out of bounds write due to an integer overflow. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is needed for exploitation.Product: AndroidVersions: Android-10Android ID: A-126204073
Problem types: description: Elevation of privilege
Affected products: vendor: n/a
product: Android
Published: 2020-06-11T14:43:49.000Z
CVE-2020-0217 
In RW_T4tPresenceCheck of rw_t4t.cc, there is a possible out of bounds write due to a missing bounds check. This could lead to remote code execution with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-10Android ID: A-141331405
Problem types: description: Remote code execution
Affected products: vendor: n/a
product: Android
Published: 2020-06-11T14:43:48.000Z
CVE-2020-0218 
In loadSoundModel and related functions of SoundTriggerHwService.cpp, there is possible out of bounds write due to a race condition. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-10Android ID: A-136005905
Problem types: description: Elevation of privilege
Affected products: vendor: n/a
product: Android
Published: 2020-06-11T14:43:47.000Z
CVE-2020-0219 
In onCreate of SliceDeepLinkSpringBoard.java there is a possible insecure Intent. This could lead to local elevation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-10Android ID: A-122836081
Problem types: description: Elevation of privilege
Affected products: vendor: n/a
product: Android
Published: 2020-06-11T14:43:49.000Z
CVE-2020-0220 
In crus_afe_callback of msm-cirrus-playback.c, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android kernelAndroid ID: A-139739561
Problem types: description: Elevation of privileges
Affected products: vendor: n/a
product: Android
Published: 2020-05-14T20:17:12.000Z
CVE-2020-0221 
Airbrush FW's scratch memory allocator is susceptible to numeric overflow. When the overflow occurs, the next allocation could potentially return a pointer within the previous allocation's memory, which could lead to improper memory access.Product: AndroidVersions: Android kernelAndroid ID: A-135772851
Problem types: description: Elevation of privileges
Affected products: vendor: n/a
product: Android
Published: 2020-05-14T20:17:18.000Z
CVE-2020-0223 
This is an unbounded write into kernel global memory, via a user-controlled buffer size.Product: AndroidVersions: Android kernelAndroid ID: A-135130450
Problem types: description: Elevation of privilege
Affected products: vendor: n/a
product: Android
Published: 2020-06-16T13:31:55.000Z
CVE-2020-0224 
In FastKeyAccumulator::GetKeysSlow of keys.cc, there is a possible out of bounds write due to type confusion. This could lead to remote code execution when processing a proxy configuration with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-8.0 Android-8.1 Android-9 Android-10Android ID: A-147664838
Problem types: description: Remote code execution
Affected products: vendor: n/a
product: Android
Published: 2020-07-17T20:09:50.000Z