rainbutterfly/cve_corpus huggingface dataset:
CVE-2022-20539 
In parameterToHal of Effect.cpp, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege in the audio server with System execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-13Android ID: A-237291425
Problem types: description: Elevation of privilege
Affected products: vendor: n/a
product: Android
Published: 2022-12-16T00:00:00.000Z
CVE-2022-20540 
In SurfaceFlinger::doDump of SurfaceFlinger.cpp, there is possible arbitrary code execution due to a use after free. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-13Android ID: A-237291506
Problem types: description: Elevation of privilege
Affected products: vendor: n/a
product: Android
Published: 2022-12-16T00:00:00.000Z
CVE-2022-20541 
In phNxpNciHal_ioctl of phNxpNciHal.cc, there is a possible out of bounds read due to a missing bounds check. This could lead to local information disclosure with System execution privileges needed. User interaction is needed for exploitation.Product: AndroidVersions: Android-13Android ID: A-238083126
Problem types: description: Information disclosure
Affected products: vendor: n/a
product: Android
Published: 2022-12-16T00:00:00.000Z
CVE-2022-20542 
In parseParamsBlob of types.cpp, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-13Android ID: A-238083570
Problem types: description: Elevation of privilege
Affected products: vendor: n/a
product: Android
Published: 2023-03-24T00:00:00.000Z
CVE-2022-20543 
In multiple locations, there is a possible display crash loop due to improper input validation. This could lead to local denial of service with system execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-13Android ID: A-238178261
Problem types: description: Denial of service
Affected products: vendor: n/a
product: Android
Published: 2022-12-16T00:00:00.000Z
CVE-2022-20544 
In onOptionsItemSelected of ManageApplications.java, there is a possible bypass of profile owner restrictions due to a missing permission check. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-13Android ID: A-238745070
Problem types: description: Elevation of privilege
Affected products: vendor: n/a
product: Android
Published: 2022-12-16T00:00:00.000Z
CVE-2022-20545 
In bindArtworkAndColors of MediaControlPanel.java, there is a possible way to crash the phone due to improper input validation. This could lead to remote denial of service with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-13Android ID: A-239368697
Problem types: description: Denial of service
Affected products: vendor: n/a
product: Android
Published: 2022-12-16T00:00:00.000Z
CVE-2022-20546 
In getCurrentConfigImpl of Effect.cpp, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-13Android ID: A-240266798
Problem types: description: Elevation of privilege
Affected products: vendor: n/a
product: Android
Published: 2022-12-16T00:00:00.000Z
CVE-2022-20547 
In multiple functions of AdapterService.java, there is a possible way to manipulate Bluetooth state due to a missing permission check. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-13Android ID: A-240301753
Problem types: description: Elevation of privilege
Affected products: vendor: n/a
product: Android
Published: 2022-12-16T00:00:00.000Z
CVE-2022-20548 
In setParameter of EqualizerEffect.cpp, there is a possible out of bounds write due to improper input validation. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-13Android ID: A-240919398
Problem types: description: Elevation of privilege
Affected products: vendor: n/a
product: Android
Published: 2022-12-16T00:00:00.000Z
CVE-2022-20549 
In authToken2AidlVec of KeyMintUtils.cpp, there is a possible out of bounds write due to an incorrect bounds check. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-13Android ID: A-242702451
Problem types: description: Elevation of privilege
Affected products: vendor: n/a
product: Android
Published: 2022-12-16T00:00:00.000Z
CVE-2022-20550 
In Multiple Locations, there is a possibility to launch arbitrary protected activities due to a confused deputy. This could lead to local escalation of privilege with User execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-13Android ID: A-242845514
Problem types: description: Elevation of privilege
Affected products: vendor: n/a
product: Android
Published: 2022-12-16T00:00:00.000Z
CVE-2022-20551 
In createTrack of AudioFlinger.cpp, there is a possible way to record audio without a privacy indicator due to a logic error in the code. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-12 Android-12L Android-13Android ID: A-243376549
Problem types: description: Elevation of privilege
Affected products: vendor: n/a
product: Android
Published: 2023-02-28T00:00:00.000Z
CVE-2022-20552 
In btif_a2dp_sink_command_ready of btif_a2dp_sink.cc, there is a possible out of bounds read due to a use after free. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-13Android ID: A-243922806
Problem types: description: Information disclosure
Affected products: vendor: n/a
product: Android
Published: 2022-12-16T00:00:00.000Z
CVE-2022-20553 
In onCreate of LogAccessDialogActivity.java, there is a possible way to bypass a permission check due to a tapjacking/overlay attack. This could lead to local escalation of privilege with System execution privileges needed. User interaction is needed for exploitation.Product: AndroidVersions: Android-13Android ID: A-244155265
Problem types: description: Elevation of privilege
Affected products: vendor: n/a
product: Android
Published: 2022-12-16T00:00:00.000Z
CVE-2022-20554 
In removeEventHubDevice of InputDevice.cpp, there is a possible OOB read due to a use after free. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-13Android ID: A-245770596
Problem types: description: Elevation of privilege
Affected products: vendor: n/a
product: Android
Published: 2022-12-16T00:00:00.000Z
CVE-2022-20555 
In ufdt_get_node_by_path_len of ufdt_convert.c, there is a possible out of bounds read due to a missing bounds check. This could lead to local information disclosure with System execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-13Android ID: A-246194233
Problem types: description: Information disclosure
Affected products: vendor: n/a
product: Android
Published: 2022-12-16T00:00:00.000Z
CVE-2022-20556 
In launchConfigNewNetworkFragment of NetworkProviderSettings.java, there is a possible way for the guest user to add a new WiFi network due to a missing permission check. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-13Android ID: A-246301667
Problem types: description: Elevation of privilege
Affected products: vendor: n/a
product: Android
Published: 2022-12-16T00:00:00.000Z
CVE-2022-20557 
In MessageQueueBase of MessageQueueBase.h, there is a possible out of bounds read due to a missing bounds check. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-13Android ID: A-247092734
Problem types: description: Elevation of privilege
Affected products: vendor: n/a
product: Android
Published: 2022-12-16T00:00:00.000Z
CVE-2022-20558 
In registerReceivers of DeviceCapabilityListener.java, there is a possible way to change preferred TTY mode due to a permissions bypass. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-13Android ID: A-236264289
Problem types: description: Elevation of privilege
Affected products: vendor: n/a
product: Android
Published: 2022-12-16T00:00:00.000Z
CVE-2022-20559 
In revokeOwnPermissionsOnKill of PermissionManager.java, there is a possible way to determine whether an app is installed, without query permissions, due to side channel information disclosure. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-13Android ID: A-219739967
Problem types: description: Information disclosure
Affected products: vendor: n/a
product: Android
Published: 2022-12-16T00:00:00.000Z
CVE-2022-20560 
Product: AndroidVersions: Android kernelAndroid ID: A-212623833References: N/A
Problem types: description: Information disclosure
Affected products: vendor: n/a
product: Android
Published: 2022-12-16T00:00:00.000Z
CVE-2022-20561 
In TBD of aud_hal_tunnel.c, there is a possible memory corruption due to a use after free. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android kernelAndroid ID: A-222162870References: N/A
Problem types: description: Elevation of privilege
Affected products: vendor: n/a
product: Android
Published: 2022-12-16T00:00:00.000Z
CVE-2022-20562 
In various functions of ap_input_processor.c, there is a possible way to record audio during a phone call due to a logic error in the code. This could lead to local information disclosure with User execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android kernelAndroid ID: A-231630423References: N/A
Problem types: description: Information disclosure
Affected products: vendor: n/a
product: Android
Published: 2022-12-16T00:00:00.000Z
CVE-2022-20563 
In TBD of ufdt_convert, there is a possible out of bounds read due to memory corruption. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android kernelAndroid ID: A-242067561References: N/A
Problem types: description: Elevation of privilege
Affected products: vendor: n/a
product: Android
Published: 2022-12-16T00:00:00.000Z
CVE-2022-20564 
In _ufdt_output_strtab_to_fdt of ufdt_convert.c, there is a possible out of bounds write due to an incorrect bounds check. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android kernelAndroid ID: A-243798789References: N/A
Problem types: description: Elevation of privilege
Affected products: vendor: n/a
product: Android
Published: 2022-12-16T00:00:00.000Z
CVE-2022-20566 
In l2cap_chan_put of l2cap_core, there is a possible use after free due to improper locking. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android kernelAndroid ID: A-165329981References: Upstream kernel
Problem types: description: Elevation of privilege
Affected products: vendor: n/a
product: Android
Published: 2022-12-16T00:00:00.000Z
CVE-2022-20567 
In pppol2tp_create of l2tp_ppp.c, there is a possible use after free due to a race condition. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android kernelAndroid ID: A-186777253References: Upstream kernel
Problem types: description: Elevation of privilege
Affected products: vendor: n/a
product: Android
Published: 2022-12-16T00:00:00.000Z
CVE-2022-20568 
In (TBD) of (TBD), there is a possible way to corrupt kernel memory due to a use after free. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android kernelAndroid ID: A-220738351References: Upstream kernel
Problem types: description: Elevation of privilege
Affected products: vendor: n/a
product: Android
Published: 2022-12-16T00:00:00.000Z
CVE-2022-20569 
In thermal_cooling_device_stats_update of thermal_sysfs.c, there is a possible out of bounds write due to improper input validation. This could lead to local escalation of privilege in the kernel with System execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android kernelAndroid ID: A-229258234References: N/A
Problem types: description: Elevation of privilege
Affected products: vendor: n/a
product: Android
Published: 2022-12-16T00:00:00.000Z
CVE-2022-20570 
Product: AndroidVersions: Android kernelAndroid ID: A-230660904References: N/A
Problem types: description: Information disclosure
Affected products: vendor: n/a
product: Android
Published: 2022-12-16T00:00:00.000Z
CVE-2022-20571 
In extract_metadata of dm-android-verity.c, there is a possible way to corrupt kernel memory due to a use after free. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android kernelAndroid ID: A-234030265References: Upstream kernel
Problem types: description: Elevation of privilege
Affected products: vendor: n/a
product: Android
Published: 2022-12-16T00:00:00.000Z
CVE-2022-20572 
In verity_target of dm-verity-target.c, there is a possible way to modify read-only files due to a missing permission check. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android kernelAndroid ID: A-234475629References: Upstream kernel
Problem types: description: Elevation of privilege
Affected products: vendor: n/a
product: Android
Published: 2022-12-16T00:00:00.000Z
CVE-2022-20574 
In sec_sysmmu_info of drm_fw.c, there is a possible out of bounds read due to improper input validation. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android kernelAndroid ID: A-237582191References: N/A
Problem types: description: Information disclosure
Affected products: vendor: n/a
product: Android
Published: 2022-12-16T00:00:00.000Z
CVE-2022-20575 
In read_ppmpu_info of drm_fw.c, there is a possible out of bounds read due to an incorrect bounds check. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android kernelAndroid ID: A-237585040References: N/A
Problem types: description: Information disclosure
Affected products: vendor: n/a
product: Android
Published: 2022-12-16T00:00:00.000Z
CVE-2022-20576 
In externalOnRequest of rilapplication.cpp, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android kernelAndroid ID: A-239701761References: N/A
Problem types: description: Elevation of privilege
Affected products: vendor: n/a
product: Android
Published: 2022-12-16T00:00:00.000Z
CVE-2022-20577 
In OemSimAuthRequest::encode of wlandata.cpp, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android kernelAndroid ID: A-241762281References: N/A
Problem types: description: Elevation of privilege
Affected products: vendor: n/a
product: Android
Published: 2022-12-16T00:00:00.000Z
CVE-2022-20578 
In RadioImpl::setGsmBroadcastConfig of ril_service_legacy.cpp, there is a possible stack clash leading to memory corruption. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android kernelAndroid ID: A-243509749References: N/A
Problem types: description: Elevation of privilege
Affected products: vendor: n/a
product: Android
Published: 2022-12-16T00:00:00.000Z
CVE-2022-20579 
In RadioImpl::setCdmaBroadcastConfig of ril_service_legacy.cpp, there is a possible stack clash leading to memory corruption. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android kernelAndroid ID: A-243510139References: N/A
Problem types: description: Elevation of privilege
Affected products: vendor: n/a
product: Android
Published: 2022-12-16T00:00:00.000Z
CVE-2022-20580 
In ufdt_do_one_fixup of ufdt_overlay.c, there is a possible out of bounds write due to an incorrect bounds check. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android kernelAndroid ID: A-243629453References: N/A
Problem types: description: Elevation of privilege
Affected products: vendor: n/a
product: Android
Published: 2022-12-16T00:00:00.000Z
CVE-2022-20581 
In the Pixel camera driver, there is a possible use after free due to a logic error in the code. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android kernelAndroid ID: A-245916120References: N/A
Problem types: description: Elevation of privilege
Affected products: vendor: n/a
product: Android
Published: 2022-12-16T00:00:00.000Z
CVE-2022-20582 
In ppmp_unprotect_mfcfw_buf of drm_fw.c, there is a possible out of bounds write due to improper input validation. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android kernelAndroid ID: A-233645166References: N/A
Problem types: description: Elevation of privilege
Affected products: vendor: n/a
product: Android
Published: 2022-12-16T00:00:00.000Z
CVE-2022-20583 
In ppmp_unprotect_mfcfw_buf of drm_fw.c, there is a possible out of bounds write due to improper input validation. This could lead to local escalation of privilege in S-EL1 with System execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android kernelAndroid ID: A-234859169References: N/A
Problem types: description: Elevation of privilege
Affected products: vendor: n/a
product: Android
Published: 2022-12-16T00:00:00.000Z
CVE-2022-20584 
In page_number of shared_mem.c, there is a possible code execution in secure world due to improper input validation. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android kernelAndroid ID: A-238366009References: N/A
Problem types: description: Elevation of privilege
Affected products: vendor: n/a
product: Android
Published: 2022-12-16T00:00:00.000Z
CVE-2022-20585 
In valid_out_of_special_sec_dram_addr of drm_access_control.c, there is a possible EoP due to improper input validation. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android kernelAndroid ID: A-238716781References: N/A
Problem types: description: Elevation of privilege
Affected products: vendor: n/a
product: Android
Published: 2022-12-16T00:00:00.000Z
CVE-2022-20586 
In valid_out_of_special_sec_dram_addr of drm_access_control.c, there is a possible EoP due to improper input validation. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android kernelAndroid ID: A-238718854References: N/A
Problem types: description: Elevation of privilege
Affected products: vendor: n/a
product: Android
Published: 2022-12-16T00:00:00.000Z
CVE-2022-20587 
In ppmp_validate_wsm of drm_fw.c, there is a possible EoP due to improper input validation. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android kernelAndroid ID: A-238720411References: N/A
Problem types: description: Elevation of privilege
Affected products: vendor: n/a
product: Android
Published: 2022-12-16T00:00:00.000Z
CVE-2022-20588 
In sysmmu_map of sysmmu.c, there is a possible EoP due to a precondition check failure. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android kernelAndroid ID: A-238785915References: N/A
Problem types: description: Elevation of privilege
Affected products: vendor: n/a
product: Android
Published: 2022-12-16T00:00:00.000Z
CVE-2022-20589 
In valid_va_secbuf_check of drm_access_control.c, there is a possible ID due to improper input validation. This could lead to local information disclosure with System execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android kernelAndroid ID: A-238841928References: N/A
Problem types: description: Information disclosure
Affected products: vendor: n/a
product: Android
Published: 2022-12-16T00:00:00.000Z
CVE-2022-20590 
In valid_va_sec_mfc_check of drm_access_control.c, there is a possible information disclosure due to improper input validation. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android kernelAndroid ID: A-238932493References: N/A
Problem types: description: Information disclosure
Affected products: vendor: n/a
product: Android
Published: 2022-12-16T00:00:00.000Z
CVE-2022-20591 
In ppmpu_set of ppmpu.c, there is a possible information disclosure due to a logic error in the code. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android kernelAndroid ID: A-238939706References: N/A
Problem types: description: Information disclosure
Affected products: vendor: n/a
product: Android
Published: 2022-12-16T00:00:00.000Z