rainbutterfly/cve_corpus huggingface dataset:
CVE-2020-0282 
In NFC, there is a possible out of bounds read due to a missing bounds check. This could lead to remote information disclosure. System execution privileges, a Firmware compromise, and User interaction are needed for exploitation.Product: AndroidVersions: Android-11Android ID: A-144506224
Problem types: description: Information disclosure
Affected products: vendor: n/a
product: Android
Published: 2020-09-18T15:08:51.000Z
CVE-2020-0283 
There is a possible out of bounds write due to a missing bounds check.Product: AndroidVersions: Android SoCAndroid ID: A-163008257
Problem types: description: Elevation of privilege
Affected products: vendor: n/a
product: Android
Published: 2020-10-14T13:10:28.000Z
CVE-2020-0284 
In Telephony, there is a possible permission bypass due to a missing permission check. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-11Android ID: A-156253784
Problem types: description: Information disclosure
Affected products: vendor: n/a
product: Android
Published: 2020-09-18T15:09:02.000Z
CVE-2020-0285 
In Telephony, there is a possible permission bypass due to a missing permission check. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-11Android ID: A-156253479
Problem types: description: Information disclosure
Affected products: vendor: n/a
product: Android
Published: 2020-09-18T15:21:16.000Z
CVE-2020-0286 
In Bluetooth AVRCP, there is a possible leak of audio metadata due to residual data. This could lead to remote information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-11Android ID: A-150214479
Problem types: description: Information disclosure
Affected products: vendor: n/a
product: Android
Published: 2020-09-18T15:21:42.000Z
CVE-2020-0287 
In libmkvextractor, there is a possible resource exhaustion due to a missing bounds check. This could lead to remote denial of service with no additional execution privileges needed. User interaction is needed for exploitation.Product: AndroidVersions: Android-11Android ID: A-141860394
Problem types: description: Denial of service
Affected products: vendor: n/a
product: Android
Published: 2020-09-17T20:56:57.000Z
CVE-2020-0288 
In PackageManager, there is a missing permission check. This could lead to local information disclosure across user boundaries with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-11Android ID: A-153995991
Problem types: description: Information disclosure
Affected products: vendor: n/a
product: Android
Published: 2020-09-17T20:47:46.000Z
CVE-2020-0289 
In PackageManager, there is a missing permission check. This could lead to local information disclosure across users with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-11Android ID: A-153996872
Problem types: description: Information disclosure
Affected products: vendor: n/a
product: Android
Published: 2020-09-17T20:47:55.000Z
CVE-2020-0290 
In PackageManager, there is a missing permission check. This could lead to local information disclosure across users with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-11Android ID: A-153996866
Problem types: description: Information disclosure
Affected products: vendor: n/a
product: Android
Published: 2020-09-17T20:48:04.000Z
CVE-2020-0291 
In Bluetooth, there is a possible out of bounds read due to a missing bounds check. This could lead to local information disclosure with System execution privileges and a compromised Firmware needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-11Android ID: A-146032016
Problem types: description: Information disclosure
Affected products: vendor: n/a
product: Android
Published: 2020-09-18T15:22:06.000Z
CVE-2020-0292 
In Bluetooth, there is a possible out of bounds read due to a missing bounds check. This could lead to local information disclosure with System execution privileges and a compromised Firmware needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-11Android ID: A-110107252
Problem types: description: Information disclosure
Affected products: vendor: n/a
product: Android
Published: 2020-09-18T15:22:23.000Z
CVE-2020-0293 
In Java network APIs, there is possible access to sensitive network state due to a missing permission check. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation in Android versions: Android-11, Android ID: A-141455849
Problem types: description: Information disclosure
Affected products: vendor: n/a
product: Android
Published: 2020-09-17T20:48:14.000Z
CVE-2020-0294 
In bindWallpaperComponentLocked of WallpaperManagerService.java, there is a possible permission bypass due to an unsafe PendingIntent. This could lead to local escalation of privilege with User execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-10 Android-8.0 Android-8.1 Android-9Android ID: A-154915372
Problem types: description: Elevation of privilege
Affected products: vendor: n/a
product: Android
Published: 2020-09-18T15:22:45.000Z
CVE-2020-0295 
In Telecom, there is a possible permission bypass due to an unsafe PendingIntent. This could lead to local information disclosure with User execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-11Android ID: A-155650969
Problem types: description: Information disclosure
Affected products: vendor: n/a
product: Android
Published: 2020-09-18T15:22:54.000Z
CVE-2020-0296 
In ADB server and USB server, there is a possible permission bypass due to an unsafe PendingIntent. This could lead to local information disclosure with User execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-11Android ID: A-153356209
Problem types: description: Information disclosure
Affected products: vendor: n/a
product: Android
Published: 2020-09-17T20:48:31.000Z
CVE-2020-0297 
In devicepolicy service, there is a possible permission bypass due to an unsafe PendingIntent. This could lead to local information disclosure with User execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-11Android ID: A-155183624
Problem types: description: Information disclosure
Affected products: vendor: n/a
product: Android
Published: 2020-09-17T20:48:42.000Z
CVE-2020-0298 
In Bluetooth, there is a possible control over Bluetooth enabled state due to a missing permission check. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-11Android ID: A-145129266
Problem types: description: Elevation of privilege
Affected products: vendor: n/a
product: Android
Published: 2020-09-18T15:03:54.000Z
CVE-2020-0299 
In Bluetooth, there is a possible spoofing of bluetooth device metadata due to a missing permission check. This could lead to local escalation of privilege with User execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-11Android ID: A-145130119
Problem types: description: Elevation of privilege
Affected products: vendor: n/a
product: Android
Published: 2020-09-18T15:04:07.000Z
CVE-2020-0300 
In NFC, there is a possible out of bounds read due to uninitialized data. This could lead to remote information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-11Android ID: A-148736216
Problem types: description: Information disclosure
Affected products: vendor: n/a
product: Android
Published: 2020-09-18T15:23:46.000Z
CVE-2020-0301 
In libstagefright, there is a possible resource exhaustion due to improper input validation. This could lead to remote denial of service with no additional execution privileges needed. User interaction is needed for exploitation.Product: AndroidVersions: Android-11Android ID: A-124940460
Problem types: description: Denial of service
Affected products: vendor: n/a
product: Android
Published: 2020-09-17T20:57:08.000Z
CVE-2020-0302 
In Settings, there is a possible permission bypass due to an unsafe PendingIntent. This could lead to local information disclosure with User execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-11Android ID: A-151646375
Problem types: description: Information disclosure
Affected products: vendor: n/a
product: Android
Published: 2020-09-18T15:24:08.000Z
CVE-2020-0303 
In the Media extractor, there is a possible use after free due to improper locking. This could lead to remote code execution in the media extractor with no additional execution privileges needed. User interaction is needed for exploitation.Product: AndroidVersions: Android-11Android ID: A-148223229
Problem types: description: Remote code execution
Affected products: vendor: n/a
product: Android
Published: 2020-09-17T20:51:23.000Z
CVE-2020-0304 
In Settings, there is a possible permission bypass due to an unsafe PendingIntent. This could lead to local information disclosure with User execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-11Android ID: A-151645695
Problem types: description: Information disclosure
Affected products: vendor: n/a
product: Android
Published: 2020-09-18T15:24:21.000Z
CVE-2020-0305 
In cdev_get of char_dev.c, there is a possible use-after-free due to a race condition. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-10Android ID: A-153467744
Problem types: description: Elevation of privilege
Affected products: vendor: n/a
product: Android
Published: 2020-07-17T19:59:06.000Z
CVE-2020-0306 
In LLVM, there is a possible ineffective stack cookie placement due to stack frame double reservation. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-11Android ID: A-139666480
Problem types: description: Elevation of privilege
Affected products: vendor: n/a
product: Android
Published: 2020-09-17T20:52:08.000Z
CVE-2020-0307 
In Settings, there is a possible permission bypass due to an unsafe PendingIntent. This could lead to local information disclosure with User execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-11Android ID: A-151645867
Problem types: description: Information disclosure
Affected products: vendor: n/a
product: Android
Published: 2020-09-18T15:24:38.000Z
CVE-2020-0308 
In Window Manager, there is a possible permission bypass due to an unsafe PendingIntent. This could lead to local information disclosure with User execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-11Android ID: A-153654357
Problem types: description: Information disclosure
Affected products: vendor: n/a
product: Android
Published: 2020-09-17T20:48:53.000Z
CVE-2020-0309 
In the Bluetooth server, there is a possible out of bounds write due to an integer overflow. This could lead to local escalation of privilege with System privileges and a Firmware compromise needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-11Android ID: A-147227320
Problem types: description: Elevation of privilege
Affected products: vendor: n/a
product: Android
Published: 2020-09-18T15:04:26.000Z
CVE-2020-0310 
In Settings, there is a possible permission bypass due to an unsafe PendingIntent. This could lead to local information disclosure with User execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-11Android ID: A-153356468
Problem types: description: Information disclosure
Affected products: vendor: n/a
product: Android
Published: 2020-09-18T15:24:52.000Z
CVE-2020-0311 
In InputManagerService, there is a possible permission bypass due to an unsafe PendingIntent. This could lead to local information disclosure with User execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-11Android ID: A-153878642
Problem types: description: Information disclosure
Affected products: vendor: n/a
product: Android
Published: 2020-09-18T15:25:17.000Z
CVE-2020-0312 
In Battery Saver, there is a possible permission bypass due to an unsafe PendingIntent. This could lead to local information disclosure with User execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-11Android ID: A-153879099
Problem types: description: Information disclosure
Affected products: vendor: n/a
product: Android
Published: 2020-09-17T20:49:03.000Z
CVE-2020-0313 
In NotificationManagerService, there is a possible permission bypass due to an unsafe PendingIntent. This could lead to local information disclosure with User execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-11Android ID: A-154917989
Problem types: description: Information disclosure
Affected products: vendor: n/a
product: Android
Published: 2020-09-18T15:25:32.000Z
CVE-2020-0314 
In AudioService, there are missing permission checks. This could lead to local information disclosure of audio configuration with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-11Android ID: A-154934920
Problem types: description: Information disclosure
Affected products: vendor: n/a
product: Android
Published: 2020-09-17T20:54:48.000Z
CVE-2020-0315 
In Zen Mode, there is a possible permission bypass due to an unsafe PendingIntent. This could lead to local information disclosure with User execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-11Android ID: A-155642026
Problem types: description: Information disclosure
Affected products: vendor: n/a
product: Android
Published: 2020-09-18T15:25:49.000Z
CVE-2020-0316 
In Telephony, there is a missing permission check. This could lead to local information disclosure of radio data with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-11Android ID: A-154934919
Problem types: description: Information disclosure
Affected products: vendor: n/a
product: Android
Published: 2020-09-18T15:26:09.000Z
CVE-2020-0317 
In UsageStatsManager, there is a possible access to protected data due to a missing permission check. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-11Android ID: A-119671929
Problem types: description: Information disclosure
Affected products: vendor: n/a
product: Android
Published: 2020-09-17T20:49:17.000Z
CVE-2020-0318 
In the System UI, there is a possible system crash due to an uncaught exception. This could lead to local permanent denial of service with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-11Android ID: A-33646131
Problem types: description: Denial of service
Affected products: vendor: n/a
product: Android
Published: 2020-09-18T14:51:38.000Z
CVE-2020-0319 
In NFC, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with System execution privileges and a Firmware compromise needed. User interaction is needed for exploitation.Product: AndroidVersions: Android-11Android ID: A-137868765
Problem types: description: Elevation of privilege
Affected products: vendor: n/a
product: Android
Published: 2020-09-18T15:04:39.000Z
CVE-2020-0320 
In libstagefright, there is a possible resource exhaustion due to improper input validation. This could lead to remote denial of service with no additional execution privileges needed. User interaction is needed for exploitation.Product: AndroidVersions: Android-11Android ID: A-129282427
Problem types: description: Denial of service
Affected products: vendor: n/a
product: Android
Published: 2020-09-17T20:57:22.000Z
CVE-2020-0321 
In the mp3 extractor, there is a possible out of bounds write due to uninitialized data. This could lead to remote code execution with no additional execution privileges needed. User interaction is needed for exploitation.Product: AndroidVersions: Android-11Android ID: A-155171907
Problem types: description: Remote code execution
Affected products: vendor: n/a
product: Android
Published: 2020-09-17T20:51:53.000Z
CVE-2020-0322 
In apexd, there is a possible out of bounds read due to a missing bounds check. This could lead to local information disclosure with System execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-11Android ID: A-147002540
Problem types: description: Information disclosure
Affected products: vendor: n/a
product: Android
Published: 2020-09-17T20:50:20.000Z
CVE-2020-0323 
In libavb, there is a possible out of bounds read due to a missing bounds check. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-11Android ID: A-146516087
Problem types: description: Information disclosure
Affected products: vendor: n/a
product: Android
Published: 2020-09-17T20:50:29.000Z
CVE-2020-0324 
In libsonivox, there is a possible out of bounds read due to a missing bounds check. This could lead to remote information disclosure with no additional execution privileges needed. User interaction is needed for exploitation.Product: AndroidVersions: Android-11Android ID: A-136660304
Problem types: description: Information disclosure
Affected products: vendor: n/a
product: Android
Published: 2020-09-17T20:54:59.000Z
CVE-2020-0325 
In NFC, there is a missing bounds check. This could lead to local information disclosure with System execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-11Android ID: A-145079309
Problem types: description: Information disclosure
Affected products: vendor: n/a
product: Android
Published: 2020-09-18T15:26:20.000Z
CVE-2020-0326 
In NFC, there is a possible out of bounds write due to uninitialized data. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-11Android ID: A-146453119
Problem types: description: Elevation of privilege
Affected products: vendor: n/a
product: Android
Published: 2020-09-18T15:05:08.000Z
CVE-2020-0327 
In core networking, there is a missing permission check. This could lead to local information disclosure of app network usage with User execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-11Android ID: A-129151407
Problem types: description: Information disclosure
Affected products: vendor: n/a
product: Android
Published: 2020-09-18T15:26:39.000Z
CVE-2020-0328 
In the camera, there is a possible out of bounds read due to an integer overflow. This could lead to local information disclosure with System execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-11Android ID: A-150156131
Problem types: description: Information disclosure
Affected products: vendor: n/a
product: Android
Published: 2020-09-17T20:55:10.000Z
CVE-2020-0329 
In the OMX encoder, there is a possible out of bounds read due to invalid input validation. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-11Android ID: A-63522940
Problem types: description: Information disclosure
Affected products: vendor: n/a
product: Android
Published: 2020-09-17T20:55:18.000Z
CVE-2020-0330 
In iorap, there is a possible memory corruption due to a use after free. This could lead to local escalation of privilege and code execution with System execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-11Android ID: A-150331085
Problem types: description: Elevation of privilege
Affected products: vendor: n/a
product: Android
Published: 2020-09-17T20:44:18.000Z
CVE-2020-0331 
In Settings, there is a possible permissions bypass. This could lead to local information disclosure of the device's IMEI with User execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-11Android ID: A-147309310
Problem types: description: Information disclosure
Affected products: vendor: n/a
product: Android
Published: 2020-09-18T15:26:51.000Z
CVE-2020-0332 
In libstagefright, there is a possible dead loop due to an uncaught exception. This could lead to remote denial of service with no additional execution privileges needed. User interaction is needed for exploitation.Product: AndroidVersions: Android-11Android ID: A-124783982
Problem types: description: Denial of service
Affected products: vendor: n/a
product: Android
Published: 2020-09-17T20:57:37.000Z
CVE-2020-0333 
In UrlQuerySanitizer, there is a possible improper input validation. This could lead to remote code execution with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-11Android ID: A-73822755
Problem types: description: Remote code execution
Affected products: vendor: n/a
product: Android
Published: 2020-09-17T20:46:12.000Z
CVE-2020-0334 
In NFC, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with System execution privileges and a Firmware compromise needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-11Android ID: A-147995915
Problem types: description: Elevation of privilege
Affected products: vendor: n/a
product: Android
Published: 2020-09-18T15:05:24.000Z
CVE-2020-0335 
In NFC, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with System execution privileges and a Firmware compromise needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-11Android ID: A-122361504
Problem types: description: Elevation of privilege
Affected products: vendor: n/a
product: Android
Published: 2020-09-18T15:05:42.000Z
CVE-2020-0336 
In SurfaceFlinger, there is possible memory corruption due to type confusion. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-11Android ID: A-153467444
Problem types: description: Elevation of privilege
Affected products: vendor: n/a
product: Android
Published: 2020-09-17T20:52:23.000Z
CVE-2020-0337 
In MediaProvider, there is a possible bypass of a permissions check due to a confused deputy. This could lead to local information disclosure, with User execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-11Android ID: A-124329382
Problem types: description: Information disclosure
Affected products: vendor: n/a
product: Android
Published: 2020-09-17T20:45:36.000Z