rainbutterfly/cve_corpus huggingface dataset:
CVE-2020-0338 
In checkKeyIntent of AccountManagerService.java, there is a possible permission bypass. This could lead to local information disclosure with User execution privileges needed. User interaction is needed for exploitation.Product: AndroidVersions: Android-10 Android-9Android ID: A-123700107
Problem types: description: Information disclosure
Affected products: vendor: n/a
product: Android
Published: 2020-09-17T20:45:46.000Z
CVE-2020-0339 
There is a possible out of bounds read due to a missing bounds check.Product: AndroidVersions: Android SoCAndroid ID: A-162980705
Problem types: description: Elevation of privilege
Affected products: vendor: n/a
product: Android
Published: 2020-10-14T13:09:48.000Z
CVE-2020-0340 
In libcodec2_soft_mp3dec, there is a possible information disclosure due to uninitialized data. This could lead to remote information disclosure with no additional execution privileges needed. User interaction is needed for exploitation.Product: AndroidVersions: Android-11Android ID: A-144901522
Problem types: description: Information disclosure
Affected products: vendor: n/a
product: Android
Published: 2020-09-17T20:55:31.000Z
CVE-2020-0341 
In DisplayManager, there is a possible permission bypass due to a missing permission check. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-11Android ID: A-144920149
Problem types: description: Elevation of privilege
Affected products: vendor: n/a
product: Android
Published: 2020-09-17T20:47:01.000Z
CVE-2020-0342 
There is a possible out of bounds write due to an incorrect bounds check.Product: AndroidVersions: Android SoCAndroid ID: A-160812576
Problem types: description: Elevation of privilege
Affected products: vendor: n/a
product: Android
Published: 2020-09-17T15:55:07.000Z
CVE-2020-0343 
In NetworkStatsService, there is a possible access to protected data due to a missing permission check. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-11Android ID: A-119672472
Problem types: description: Information disclosure
Affected products: vendor: n/a
product: Android
Published: 2020-09-17T20:49:27.000Z
CVE-2020-0344 
In MediaProvider, there is a possible permissions bypass due to SQL injection. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-11Android ID: A-140729887
Problem types: description: Information disclosure
Affected products: vendor: n/a
product: Android
Published: 2020-09-17T20:55:41.000Z
CVE-2020-0345 
In DocumentsUI, there is a possible permission bypass due to a confused deputy. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is needed for exploitation.Product: AndroidVersions: Android-11Android ID: A-144286721
Problem types: description: Elevation of privilege
Affected products: vendor: n/a
product: Android
Published: 2020-09-17T20:47:23.000Z
CVE-2020-0346 
In Mediaserver, there is a possible out of bounds write due to an integer overflow. This could lead to local escalation of privilege if integer sanitization were not enabled (which it is by default), with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-11Android ID: A-147002762
Problem types: description: Elevation of privilege
Affected products: vendor: n/a
product: Android
Published: 2020-09-17T20:52:35.000Z
CVE-2020-0347 
In iptables, there is a possible out of bounds write due to an incorrect bounds check. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-11Android ID: A-136658008
Problem types: description: Elevation of privilege
Affected products: vendor: n/a
product: Android
Published: 2020-09-18T15:05:57.000Z
CVE-2020-0348 
In NFC, there is a possible out of bounds read due to a missing bounds check. This could lead to remote information disclosure over NFC with System execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-11Android ID: A-139188582
Problem types: description: Information disclosure
Affected products: vendor: n/a
product: Android
Published: 2020-09-18T15:27:05.000Z
CVE-2020-0349 
In NFC, there is a possible out of bounds read due to a missing bounds check. This could lead to local information disclosure with System execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-11Android ID: A-139188779
Problem types: description: Information disclosure
Affected products: vendor: n/a
product: Android
Published: 2020-09-18T15:27:23.000Z
CVE-2020-0350 
In NFC, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with System execution privileges and a Firmware compromise needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-11Android ID: A-139424089
Problem types: description: Elevation of privilege
Affected products: vendor: n/a
product: Android
Published: 2020-09-18T15:06:12.000Z
CVE-2020-0351 
In libstagefright, there is possible CPU exhaustion due to improper input validation. This could lead to remote denial of service with no additional execution privileges needed. User interaction is needed for exploitation.Product: AndroidVersions: Android-11Android ID: A-124777537
Problem types: description: Denial of service
Affected products: vendor: n/a
product: Android
Published: 2020-09-17T20:57:47.000Z
CVE-2020-0352 
In MediaProvider, there is a possible permissions bypass due to SQL injection. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-11Android ID: A-132074310
Problem types: description: Information disclosure
Affected products: vendor: n/a
product: Android
Published: 2020-09-17T20:49:42.000Z
CVE-2020-0353 
In libmp4extractor, there is a possible resource exhaustion due to a missing bounds check. This could lead to remote denial of service with no additional execution privileges needed. User interaction is needed for exploitation.Product: AndroidVersions: Android-11Android ID: A-124777526
Problem types: description: Denial of service
Affected products: vendor: n/a
product: Android
Published: 2020-09-17T20:57:57.000Z
CVE-2020-0354 
In Bluetooth, there is a possible out of bounds write due to a missing bounds check. This could lead to remote code execution with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-11Android ID: A-143604331
Problem types: description: Remote code execution
Affected products: vendor: n/a
product: Android
Published: 2020-09-18T14:52:08.000Z
CVE-2020-0355 
In libFraunhoferAAC, there is a possible out of bounds read due to a missing bounds check. This could lead to remote information disclosure with no additional execution privileges needed. User interaction is needed for exploitation.Product: AndroidVersions: Android-11Android ID: A-141883493
Problem types: description: Information disclosure
Affected products: vendor: n/a
product: Android
Published: 2020-09-17T20:55:51.000Z
CVE-2020-0356 
In the Audio HAL, there is a possible out of bounds write due to an incorrect bounds check. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-11Android ID: A-143787559
Problem types: description: Elevation of privilege
Affected products: vendor: n/a
product: Android
Published: 2020-09-17T20:52:50.000Z
CVE-2020-0357 
In SurfaceFlinger, there is a possible use-after-free due to improper locking. This could lead to local escalation of privilege in the graphics server with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-11Android ID: A-150225569
Problem types: description: Elevation of privilege
Affected products: vendor: n/a
product: Android
Published: 2020-09-17T20:53:02.000Z
CVE-2020-0358 
In SurfaceFlinger, there is a possible use after free due to a race condition. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-11Android ID: A-150227563
Problem types: description: Elevation of privilege
Affected products: vendor: n/a
product: Android
Published: 2020-09-17T20:53:17.000Z
CVE-2020-0359 
In GLESRenderEngine, there is a possible out of bounds read due to a buffer overflow. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-11Android ID: A-150303018
Problem types: description: Information disclosure
Affected products: vendor: n/a
product: Android
Published: 2020-09-17T20:56:02.000Z
CVE-2020-0360 
In Notification Access Confirmation, there is a possible permissions bypass due to uninformed consent. This could lead to local escalation of privilege with User execution privileges needed. User interaction is needed for exploitation.Product: AndroidVersions: Android-11Android ID: A-145129456
Problem types: description: Elevation of privilege
Affected products: vendor: n/a
product: Android
Published: 2020-09-17T20:53:37.000Z
CVE-2020-0361 
In libDRCdec, there is a possible information disclosure due to uninitialized data. This could lead to remote information disclosure with no additional execution privileges needed. User interaction is needed for exploitation.Product: AndroidVersions: Android-11Android ID: A-151927433
Problem types: description: Information disclosure
Affected products: vendor: n/a
product: Android
Published: 2020-09-17T20:56:15.000Z
CVE-2020-0362 
In libstagefright, there is a possible resource exhaustion due to improper input validation. This could lead to remote denial of service with no additional execution privileges needed. User interaction is needed for exploitation.Product: AndroidVersions: Android-11Android ID: A-123237930
Problem types: description: Denial of service
Affected products: vendor: n/a
product: Android
Published: 2020-09-17T20:58:08.000Z
CVE-2020-0363 
In libmedia, there is a possible resource exhaustion due to improper input validation. This could lead to remote denial of service with no additional execution privileges needed. User interaction is needed for exploitation.Product: AndroidVersions: Android-11Android ID: A-132274514
Problem types: description: Denial of service
Affected products: vendor: n/a
product: Android
Published: 2020-09-17T20:58:22.000Z
CVE-2020-0364 
In libDRCdec, there is a possible out of bounds read due to a missing bounds check. This could lead to remote information disclosure with no additional execution privileges needed. User interaction is needed for exploitation.Product: AndroidVersions: Android-11Android ID: A-137282770
Problem types: description: Information disclosure
Affected products: vendor: n/a
product: Android
Published: 2020-09-17T20:56:27.000Z
CVE-2020-0365 
In netd, there is a possible out of bounds read due to a missing bounds check. This could lead to remote denial of service with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-11Android ID: A-137346580
Problem types: description: Denial of service
Affected products: vendor: n/a
product: Android
Published: 2020-09-18T15:27:39.000Z
CVE-2020-0366 
In PackageInstaller, there is a possible permissions bypass due to a tapjacking vulnerability. This could lead to local escalation of privilege using an app set as the default Assist app with User execution privileges needed. User interaction is needed for exploitation.Product: AndroidVersions: Android-11Android ID: A-138443815
Problem types: description: Elevation of privilege
Affected products: vendor: n/a
product: Android
Published: 2020-09-17T20:47:36.000Z
CVE-2020-0367 
There is a possible out of bounds write due to a missing bounds check.Product: AndroidVersions: Android SoCAndroid ID: A-162980455
Problem types: description: Elevation of privilege
Affected products: vendor: n/a
product: Android
Published: 2020-10-14T13:09:07.000Z
CVE-2020-0368 
In queryInternal of CallLogProvider.java, there is a possible permission bypass due to improper input validation. This could lead to local information disclosure of voicemail metadata with User execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-11Android ID: A-143230980
Problem types: description: Information disclosure
Affected products: vendor: n/a
product: Android
Published: 2020-12-15T15:53:35.000Z
CVE-2020-0369 
In libavb, there is a possible out of bounds write due to an integer overflow. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-11Android ID: A-130231426
Problem types: description: Elevation of privilege
Affected products: vendor: n/a
product: Android
Published: 2020-09-17T20:50:08.000Z
CVE-2020-0370 
In libAACdec, there is a possible out of bounds read due to missing bounds check. This could lead to remote information disclosure with no additional execution privileges needed. User interaction is needed for exploitation.Product: AndroidVersions: Android-11Android ID: A-112051700
Problem types: description: Information disclosure
Affected products: vendor: n/a
product: Android
Published: 2020-09-17T20:56:39.000Z
CVE-2020-0371 
There is a possible out of bounds read due to a missing bounds check.Product: AndroidVersions: Android SoCAndroid ID: A-163008256
Problem types: description: Elevation of privilege
Affected products: vendor: n/a
product: Android
Published: 2020-10-14T13:10:13.000Z
CVE-2020-0372 
In ActivityManager, there is a possible access to protected data due to a missing permission check. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-11Android ID: A-119673147
Problem types: description: Information disclosure
Affected products: vendor: n/a
product: Android
Published: 2020-09-17T20:49:54.000Z
CVE-2020-0373 
In SoundTriggerHwService, there is a possible out of bounds read due to a race condition. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-11Android ID: A-146894086
Problem types: description: Information disclosure
Affected products: vendor: n/a
product: Android
Published: 2020-09-17T20:56:48.000Z
CVE-2020-0374 
In NFC, there is a possible permission bypass due to an unsafe PendingIntent. This could lead to local escalation of privilege with User execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-11Android ID: A-156251602
Problem types: description: Elevation of privilege
Affected products: vendor: n/a
product: Android
Published: 2020-09-17T20:58:39.000Z
CVE-2020-0375 
In Telephony, there is a possible permission bypass due to a missing permission check. This could lead to local escalation of privilege and the setting of supported EUICC countries with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-11Android ID: A-156253476
Problem types: description: Elevation of privilege
Affected products: vendor: n/a
product: Android
Published: 2020-09-17T20:58:45.000Z
CVE-2020-0376 
There is a possible out of bounds read due to a missing bounds check.Product: AndroidVersions: Android SoCAndroid ID: A-163003156
Problem types: description: Elevation of privilege
Affected products: vendor: n/a
product: Android
Published: 2020-10-14T13:10:05.000Z
CVE-2020-0377 
In gatt_process_read_by_type_rsp of gatt_cl.cc, there is a possible out of bounds read due to a missing bounds check. This could lead to remote information disclosure in the Bluetooth server with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-8.1 Android-9 Android-10 Android-11 Android-8.0Android ID: A-158833854
Problem types: description: Information disclosure
Affected products: vendor: n/a
product: Android
Published: 2020-10-14T13:06:31.000Z
CVE-2020-0378 
In onWnmFrameReceived of PasspointManager.java, there is a missing permission check. This could lead to local information disclosure of location data with User execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-9 Android-10 Android-11Android ID: A-157748906
Problem types: description: Information disclosure
Affected products: vendor: n/a
product: Android
Published: 2020-10-14T13:05:45.000Z
CVE-2020-0379 
In the Bluetooth service, there is a possible spoofing attack due to a logic error. This could lead to remote information disclosure of sensitive information with no additional execution privileges needed. User interaction is needed for exploitation.Product: AndroidVersions: Android-8.0 Android-8.1 Android-9 Android-10 Android-11Android ID: A-150156492
Problem types: description: Information disclosure
Affected products: vendor: n/a
product: Android
Published: 2020-09-17T15:24:02.000Z
CVE-2020-0380 
In allocExcessBits of bitalloc.c, there is a possible out of bounds write due to an incorrect bounds check. This could lead to remote code execution with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-11 Android-8.0 Android-8.1 Android-9 Android-10Android ID: A-146398979
Problem types: description: Remote code execution
Affected products: vendor: n/a
product: Android
Published: 2020-09-17T15:22:42.000Z
CVE-2020-0381 
In Parse_wave of eas_mdls.c, there is a possible out of bounds write due to an integer overflow. This could lead to remote information disclosure in a highly constrained process with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-8.0 Android-8.1 Android-9 Android-10 Android-11Android ID: A-150159669
Problem types: description: Information disclosure
Affected products: vendor: n/a
product: Android
Published: 2020-09-17T15:25:06.000Z
CVE-2020-0382 
In RunInternal of dumpstate.cpp, there is a possible user consent bypass due to an uncaught exception. This could lead to local information disclosure of bug report data with System execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-11 Android-10Android ID: A-152944488
Problem types: description: Information disclosure
Affected products: vendor: n/a
product: Android
Published: 2020-09-17T15:40:42.000Z
CVE-2020-0383 
In Parse_ins of eas_mdls.c, there is a possible out of bounds write due to a missing bounds check. This could lead to remote information disclosure in the media extractor process with no additional execution privileges needed. User interaction is needed for exploitation.Product: AndroidVersions: Android-8.1 Android-9 Android-10 Android-11 Android-8.0Android ID: A-150160279
Problem types: description: Information disclosure
Affected products: vendor: n/a
product: Android
Published: 2020-09-17T15:27:08.000Z
CVE-2020-0384 
In Parse_art of eas_mdls.c, there is a possible out of bounds write due to an incorrect bounds check. This could lead to remote information disclosure in the media extractor with no additional execution privileges needed. User interaction is needed for exploitation.Product: AndroidVersions: Android-8.1 Android-9 Android-10 Android-11 Android-8.0Android ID: A-150159906
Problem types: description: Information disclosure
Affected products: vendor: n/a
product: Android
Published: 2020-09-17T15:25:24.000Z
CVE-2020-0385 
In Parse_insh of eas_mdls.c, there is a possible out of bounds write due to an incorrect bounds check. This could lead to remote information disclosure in the media extractor with no additional execution privileges needed. User interaction is needed for exploitation.Product: AndroidVersions: Android-9 Android-10 Android-11 Android-8.0 Android-8.1Android ID: A-150160041
Problem types: description: Information disclosure
Affected products: vendor: n/a
product: Android
Published: 2020-09-17T15:25:58.000Z
CVE-2020-0386 
In onCreate of RequestPermissionActivity.java, there is a possible tapjacking vector due to an insecure default value. This could lead to local escalation of privilege allowing an attacker to set Bluetooth discoverability with User execution privileges needed. User interaction is needed for exploitation.Product: AndroidVersions: Android-8.0 Android-8.1 Android-9 Android-10 Android-11Android ID: A-155650356
Problem types: description: Elevation of privilege
Affected products: vendor: n/a
product: Android
Published: 2020-09-17T15:48:15.000Z
CVE-2020-0387 
In manifest files of the SmartSpace package, there is a possible tapjacking vector due to a missing permission check. This could lead to local escalation of privilege and account hijacking with no additional execution privileges needed. User interaction is needed for exploitation.Product: AndroidVersions: Android kernelAndroid ID: A-156046804
Problem types: description: Elevation of privilege
Affected products: vendor: n/a
product: Android
Published: 2020-09-17T18:28:21.000Z
CVE-2020-0388 
In createEmergencyLocationUserNotification of GnssVisibilityControl.java, there is a possible permissions bypass due to an empty mutable PendingIntent. This could lead to local escalation of privilege with User execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-11 Android-10Android ID: A-156123285
Problem types: description: Elevation of privilege
Affected products: vendor: n/a
product: Android
Published: 2020-09-17T15:49:20.000Z
CVE-2020-0389 
In createSaveNotification of RecordingService.java, there is a possible permission bypass due to an unsafe PendingIntent. This could lead to local information disclosure with User execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-10 Android-11Android ID: A-156959408
Problem types: description: Information disclosure
Affected products: vendor: n/a
product: Android
Published: 2020-09-17T15:50:49.000Z
CVE-2020-0390 
In the app zygote SE Policy, there is a possible permissions bypass. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-10 Android-11Android ID: A-157598026
Problem types: description: Information disclosure
Affected products: vendor: n/a
product: Android
Published: 2020-09-17T15:54:09.000Z
CVE-2020-0391 
In applyPolicy of PackageManagerService.java, there is possible arbitrary command execution as System due to an unenforced protected-broadcast. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-9 Android-10 Android-11Android ID: A-158570769
Problem types: description: Elevation of privilege
Affected products: vendor: n/a
product: Android
Published: 2020-09-17T15:54:24.000Z