rainbutterfly/cve_corpus huggingface dataset:
CVE-2022-20441 
In navigateUpTo of Task.java, there is a possible way to launch an unexported intent handler due to a logic error in the code. This could lead to local escalation of privilege if the targeted app has an intent trampoline, with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-10 Android-11 Android-12 Android-12L Android-13Android ID: A-238605611
Problem types: description: Elevation of privilege
Affected products: vendor: n/a
product: Android
Published: 2022-11-08T00:00:00.000Z
CVE-2022-20442 
In onCreate of ReviewPermissionsActivity.java, there is a possible way to grant permissions for a separate app with API level < 23 due to a tapjacking/overlay attack. This could lead to local escalation of privilege with User execution privileges needed. User interaction is needed for exploitation.Product: AndroidVersions: Android-10 Android-11 Android-12 Android-12LAndroid ID: A-176094367
Problem types: description: Elevation of privilege
Affected products: vendor: n/a
product: Android
Published: 2022-12-13T00:00:00.000Z
CVE-2022-20443 
In hasInputInfo of Layer.cpp, there is a possible bypass of user interaction requirements due to a tapjacking/overlay attack. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-13Android ID: A-194480991
Problem types: description: Elevation of privilege
Affected products: vendor: n/a
product: Android
Published: 2023-06-28T00:00:00.000Z
CVE-2022-20445 
In process_service_search_rsp of sdp_discovery.cc, there is a possible out of bounds read due to improper input validation. This could lead to remote information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-10 Android-11 Android-12 Android-12L Android-13Android ID: A-225876506
Problem types: description: Information disclosure
Affected products: vendor: n/a
product: Android
Published: 2022-11-08T00:00:00.000Z
CVE-2022-20446 
In AlwaysOnHotwordDetector of AlwaysOnHotwordDetector.java, there is a possible way to access the microphone from the background due to a missing permission check. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-10 Android-11Android ID: A-229793943
Problem types: description: Elevation of privilege
Affected products: vendor: n/a
product: Android
Published: 2022-11-08T00:00:00.000Z
CVE-2022-20447 
In PAN_WriteBuf of pan_api.cc, there is a possible out of bounds read due to a use after free. This could lead to remote information disclosure over Bluetooth with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-13Android ID: A-233604485
Problem types: description: Information disclosure
Affected products: vendor: n/a
product: Android
Published: 2022-11-08T00:00:00.000Z
CVE-2022-20448 
In buzzBeepBlinkLocked of NotificationManagerService.java, there is a possible way to share data across users due to a permissions bypass. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-10 Android-11 Android-12 Android-12L Android-13Android ID: A-237540408
Problem types: description: Elevation of privilege
Affected products: vendor: n/a
product: Android
Published: 2022-11-08T00:00:00.000Z
CVE-2022-20449 
In writeApplicationRestrictionsLAr of UserManagerService.java, there is a possible overwrite of system files due to a path traversal error. This could lead to local denial of service with System execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-10 Android-11 Android-12 Android-12L Android-13Android ID: A-239701237
Problem types: description: Denial of service
Affected products: vendor: n/a
product: Android
Published: 2022-12-13T00:00:00.000Z
CVE-2022-20450 
In restorePermissionState of PermissionManagerServiceImpl.java, there is a possible way to bypass user consent due to a missing permission check. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-10 Android-11 Android-12 Android-12L Android-13Android ID: A-210065877
Problem types: description: Elevation of privilege
Affected products: vendor: n/a
product: Android
Published: 2022-11-08T00:00:00.000Z
CVE-2022-20451 
In onCallRedirectionComplete of CallsManager.java, there is a possible permissions bypass due to a missing permission check. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is needed for exploitation.Product: AndroidVersions: Android-10 Android-11 Android-12 Android-12L Android-13Android ID: A-235098883
Problem types: description: Elevation of privilege
Affected products: vendor: n/a
product: Android
Published: 2022-11-08T00:00:00.000Z
CVE-2022-20452 
In initializeFromParcelLocked of BaseBundle.java, there is a possible method arbitrary code execution due to a confused deputy. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-13Android ID: A-240138318
Problem types: description: Elevation of privilege
Affected products: vendor: n/a
product: Android
Published: 2022-11-08T00:00:00.000Z
CVE-2022-20453 
In update of MmsProvider.java, there is a possible constriction of directory permissions due to a path traversal error. This could lead to local denial of service of SIM recognition with no additional execution privileges needed. User interaction is needed for exploitation.Product: AndroidVersions: Android-10 Android-11 Android-12 Android-12L Android-13Android ID: A-240685104
Problem types: description: Denial of service
Affected products: vendor: n/a
product: Android
Published: 2022-11-08T00:00:00.000Z
CVE-2022-20454 
In fdt_next_tag of fdt.c, there is a possible out of bounds write due to an integer overflow. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-10 Android-11 Android-12 Android-12L Android-13Android ID: A-242096164
Problem types: description: Elevation of privilege
Affected products: vendor: n/a
product: Android
Published: 2022-11-08T00:00:00.000Z
CVE-2022-20455 
In addAutomaticZenRule of ZenModeHelper.java, there is a possible persistent denial of service due to resource exhaustion. This could lead to local denial of service with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-10 Android-11 Android-12 Android-12L Android-13Android ID: A-242537431
Problem types: description: Denial of service
Affected products: vendor: n/a
product: Android
Published: 2023-02-28T00:00:00.000Z
CVE-2022-20456 
In AutomaticZenRule of AutomaticZenRule.java, there is a possible failure to persist permissions settings due to resource exhaustion. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-10 Android-11 Android-12 Android-12L Android-13Android ID: A-242703780
Problem types: description: Elevation of privilege
Affected products: vendor: n/a
product: Android
Published: 2023-01-24T00:00:00.000Z
CVE-2022-20457 
In getMountModeInternal of StorageManagerService.java, there is a possible prevention of package installation due to improper input validation. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-13Android ID: A-243924784
Problem types: description: Elevation of privilege
Affected products: vendor: n/a
product: Android
Published: 2022-11-08T00:00:00.000Z
CVE-2022-20458 
The logs of sensitive information (PII) or hardware identifier should only be printed in Android "userdebug" or "eng" build. StatusBarNotification.getKey() could contain sensitive information. However, CarNotificationListener.java, it prints out the StatusBarNotification.getKey() directly in logs, which could contain user's account name (i.e. PII), in Android "user" build.Product: AndroidVersions: Android-12LAndroid ID: A-205567776
Problem types: description: Elevation of privilege
Affected products: vendor: n/a
product: Android
Published: 2023-01-24T00:00:00.000Z
CVE-2022-20459 
In (TBD) of (TBD), there is a possible way to redirect code execution due to improper input validation. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android kernelAndroid ID: A-239556260References: N/A
Problem types: description: Elevation of privilege
Affected products: vendor: n/a
product: Android
Published: 2022-11-17T00:00:00.000Z
CVE-2022-20460 
In (TBD) mprot_unmap? of (TBD), there is a possible way to corrupt the memory mapping due to improper input validation. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android kernelAndroid ID: A-239557547References: N/A
Problem types: description: Elevation of privilege
Affected products: vendor: n/a
product: Android
Published: 2022-11-17T00:00:00.000Z
CVE-2022-20461 
In pinReplyNative of com_android_bluetooth_btservice_AdapterService.cpp, there is a possible out of bounds read due to type confusion. This could lead to local escalation of privilege of BLE with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-10 Android-11 Android-12 Android-12L Android-13Android ID: A-228602963
Problem types: description: Elevation of privilege
Affected products: vendor: n/a
product: Android
Published: 2023-01-24T00:00:00.000Z
CVE-2022-20462 
In phNxpNciHal_write_unlocked of phNxpNciHal.cc, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-10 Android-11 Android-12 Android-12L Android-13Android ID: A-230356196
Problem types: description: Elevation of privilege
Affected products: vendor: n/a
product: Android
Published: 2022-11-08T00:00:00.000Z
CVE-2022-20464 
In various functions of ap_input_processor.c, there is a possible way to record audio during a phone call due to a logic error in the code. This could lead to local information disclosure with User execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android kernelAndroid ID: A-236042696References: N/A
Problem types: description: Information disclosure
Affected products: vendor: n/a
product: Android
Published: 2022-10-14T00:00:00.000Z
CVE-2022-20465 
In dismiss and related functions of KeyguardHostViewController.java and related files, there is a possible lockscreen bypass due to a logic error in the code. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-10 Android-11 Android-12 Android-12L Android-13Android ID: A-218500036
Problem types: description: Elevation of privilege
Affected products: vendor: n/a
product: Android
Published: 2022-11-08T00:00:00.000Z
CVE-2022-20466 
In applyKeyguardFlags of NotificationShadeWindowControllerImpl.java, there is a possible way to observe the user's password on a secondary display due to an insecure default value. This could lead to local information disclosure with no additional execution privileges needed. User interaction is needed for exploitation.Product: AndroidVersions: Android-10 Android-11 Android-12 Android-12L Android-13Android ID: A-179725730
Problem types: description: Information disclosure
Affected products: vendor: n/a
product: Android
Published: 2022-12-13T00:00:00.000Z
CVE-2022-20467 
In isBluetoothShareUri of BluetoothOppUtility.java, there is a possible incorrect file read due to a confused deputy. This could lead to local information disclosure with no additional execution privileges needed. User interaction is needed for exploitation.Product: AndroidVersions: Android-11 Android-12 Android-12L Android-13Android ID: A-225880741
Problem types: description: Information disclosure
Affected products: vendor: n/a
product: Android
Published: 2023-03-24T00:00:00.000Z
CVE-2022-20468 
In BNEP_ConnectResp of bnep_api.cc, there is a possible out of bounds read due to an incorrect bounds check. This could lead to local information disclosure over Bluetooth with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-10 Android-11 Android-12 Android-12L Android-13Android ID: A-228450451
Problem types: description: Information disclosure
Affected products: vendor: n/a
product: Android
Published: 2022-12-13T00:00:00.000Z
CVE-2022-20469 
In avct_lcb_msg_asmbl of avct_lcb_act.cc, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege over Bluetooth with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-10 Android-11 Android-12 Android-12L Android-13Android ID: A-230867224
Problem types: description: Remote code execution
Affected products: vendor: n/a
product: Android
Published: 2022-12-13T00:00:00.000Z
CVE-2022-20470 
In bindRemoteViewsService of AppWidgetServiceImpl.java, there is a possible way to bypass background activity launch due to improper input validation. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-10 Android-11 Android-12 Android-12L Android-13Android ID: A-234013191
Problem types: description: Elevation of privilege
Affected products: vendor: n/a
product: Android
Published: 2022-12-13T00:00:00.000Z
CVE-2022-20471 
In SendIncDecRestoreCmdPart2 of NxpMfcReader.cc, there is a possible out of bounds read due to a missing bounds check. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-11 Android-12 Android-12L Android-13Android ID: A-238177877
Problem types: description: Information disclosure
Affected products: vendor: n/a
product: Android
Published: 2022-12-13T00:00:00.000Z
CVE-2022-20472 
In toLanguageTag of LocaleListCache.cpp, there is a possible out of bounds read due to an incorrect bounds check. This could lead to remote code execution with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-10 Android-11 Android-12 Android-12L Android-13Android ID: A-239210579
Problem types: description: Remote code execution
Affected products: vendor: n/a
product: Android
Published: 2022-12-13T00:00:00.000Z
CVE-2022-20473 
In toLanguageTag of LocaleListCache.cpp, there is a possible out of bounds read due to an incorrect bounds check. This could lead to remote code execution with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-10 Android-11 Android-12 Android-12L Android-13Android ID: A-239267173
Problem types: description: Remote code execution
Affected products: vendor: n/a
product: Android
Published: 2022-12-13T00:00:00.000Z
CVE-2022-20474 
In readLazyValue of Parcel.java, there is a possible loading of arbitrary code into the System Settings app due to a confused deputy. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-10 Android-11 Android-12 Android-12L Android-13Android ID: A-240138294
Problem types: description: Elevation of privilege
Affected products: vendor: n/a
product: Android
Published: 2022-12-13T00:00:00.000Z
CVE-2022-20475 
In test of ResetTargetTaskHelper.java, there is a possible hijacking of any app which sets allowTaskReparenting="true" due to a confused deputy. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-11 Android-12 Android-12L Android-13Android ID: A-240663194
Problem types: description: Elevation of privilege
Affected products: vendor: n/a
product: Android
Published: 2022-12-13T00:00:00.000Z
CVE-2022-20476 
In setEnabledSetting of PackageManager.java, there is a possible way to get the device into an infinite reboot loop due to resource exhaustion. This could lead to local denial of service with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-10 Android-11 Android-12 Android-12LAndroid ID: A-240936919
Problem types: description: Denial of service
Affected products: vendor: n/a
product: Android
Published: 2022-12-13T00:00:00.000Z
CVE-2022-20477 
In shouldHideNotification of KeyguardNotificationVisibilityProvider.kt, there is a possible way to show hidden notifications due to a logic error in the code. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-13Android ID: A-241611867
Problem types: description: Elevation of privilege
Affected products: vendor: n/a
product: Android
Published: 2022-12-13T00:00:00.000Z
CVE-2022-20478 
In NotificationChannel of NotificationChannel.java, there is a possible failure to persist permissions settings due to resource exhaustion. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-10 Android-11 Android-12 Android-12L Android-13Android ID: A-241764135
Problem types: description: Elevation of privilege
Affected products: vendor: n/a
product: Android
Published: 2022-12-13T00:00:00.000Z
CVE-2022-20479 
In NotificationChannel of NotificationChannel.java, there is a possible failure to persist permissions settings due to resource exhaustion. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-10 Android-11 Android-12 Android-12L Android-13Android ID: A-241764340
Problem types: description: Elevation of privilege
Affected products: vendor: n/a
product: Android
Published: 2022-12-13T00:00:00.000Z
CVE-2022-20480 
In NotificationChannel of NotificationChannel.java, there is a possible failure to persist permissions settings due to resource exhaustion. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-10 Android-11 Android-12 Android-12L Android-13Android ID: A-241764350
Problem types: description: Elevation of privilege
Affected products: vendor: n/a
product: Android
Published: 2022-12-13T00:00:00.000Z
CVE-2022-20481 
In multiple files, there is a possible way to preserve WiFi settings due to residual data after a reset. This could lead to local information disclosure with no additional execution privileges needed. User interaction is needed for exploitation.Product: AndroidVersions: Android-10 Android-11 Android-12 Android-12L Android-13Android ID: A-241927115
Problem types: description: Information disclosure
Affected products: vendor: n/a
product: Android
Published: 2023-02-28T00:00:00.000Z
CVE-2022-20482 
In createNotificationChannel of NotificationManager.java, there is a possible way to make the device unusable and require factory reset due to resource exhaustion. This could lead to local denial of service with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-12 Android-12L Android-13Android ID: A-240422263
Problem types: description: Denial of service
Affected products: vendor: n/a
product: Android
Published: 2022-12-13T00:00:00.000Z
CVE-2022-20483 
In several functions that parse avrc response in avrc_pars_ct.cc and related files, there are possible out of bounds reads due to integer overflows. This could lead to remote information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-10 Android-11 Android-12 Android-12L Android-13Android ID: A-242459126
Problem types: description: Information disclosure
Affected products: vendor: n/a
product: Android
Published: 2022-12-13T00:00:00.000Z
CVE-2022-20484 
In NotificationChannel of NotificationChannel.java, there is a possible failure to persist permissions settings due to resource exhaustion. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-10 Android-11 Android-12 Android-12L Android-13Android ID: A-242702851
Problem types: description: Elevation of privilege
Affected products: vendor: n/a
product: Android
Published: 2022-12-13T00:00:00.000Z
CVE-2022-20485 
In NotificationChannel of NotificationChannel.java, there is a possible failure to persist permissions settings due to resource exhaustion. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-10 Android-11 Android-12 Android-12L Android-13Android ID: A-242702935
Problem types: description: Elevation of privilege
Affected products: vendor: n/a
product: Android
Published: 2022-12-13T00:00:00.000Z
CVE-2022-20486 
In NotificationChannel of NotificationChannel.java, there is a possible failure to persist permissions settings due to resource exhaustion. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-10 Android-11 Android-12 Android-12L Android-13Android ID: A-242703118
Problem types: description: Elevation of privilege
Affected products: vendor: n/a
product: Android
Published: 2022-12-13T00:00:00.000Z
CVE-2022-20487 
In NotificationChannel of NotificationChannel.java, there is a possible failure to persist permissions settings due to resource exhaustion. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-10 Android-11 Android-12 Android-12L Android-13Android ID: A-242703202
Problem types: description: Elevation of privilege
Affected products: vendor: n/a
product: Android
Published: 2022-12-13T00:00:00.000Z
CVE-2022-20488 
In NotificationChannel of NotificationChannel.java, there is a possible failure to persist permissions settings due to resource exhaustion. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-10 Android-11 Android-12 Android-12L Android-13Android ID: A-242703217
Problem types: description: Elevation of privilege
Affected products: vendor: n/a
product: Android
Published: 2022-12-13T00:00:00.000Z