rainbutterfly/cve_corpus huggingface dataset:
CVE-2023-21155 
In BuildSetRadioNode of protocolmiscbuilder.cpp, there is a possible out of bounds read due to a missing null check. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android kernelAndroid ID: A-264540700References: N/A
Problem types: description: Information disclosure
Affected products: vendor: n/a
product: Android
Published: 2023-06-28T00:00:00.000Z
CVE-2023-21156 
In BuildGetRadioNode of protocolmiscbulider.cpp, there is a possible out of bounds read due to improper input validation. This could lead to local information disclosure from the modem with System execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android kernelAndroid ID: A-264540759References: N/A
Problem types: description: Information disclosure
Affected products: vendor: n/a
product: Android
Published: 2023-06-28T00:00:00.000Z
CVE-2023-21157 
In encode of wlandata.cpp, there is a possible out of bounds write due to a heap buffer overflow. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android kernelAndroid ID: A-263783137References: N/A
Problem types: description: Elevation of privilege
Affected products: vendor: n/a
product: Android
Published: 2023-06-28T00:00:00.000Z
CVE-2023-21158 
In encode of miscdata.cpp, there is a possible out of bounds read due to a heap buffer overflow. This could lead to local information disclosure with System execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android kernelAndroid ID: A-263783635References: N/A
Problem types: description: Information disclosure
Affected products: vendor: n/a
product: Android
Published: 2023-06-28T00:00:00.000Z
CVE-2023-21159 
In Parse of simdata.cpp, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android kernelAndroid ID: A-263783565References: N/A
Problem types: description: Elevation of privilege
Affected products: vendor: n/a
product: Android
Published: 2023-06-28T00:00:00.000Z
CVE-2023-21160 
In BuildSetTcsFci of protocolmiscbuilder.cpp, there is a possible out of bounds read due to a heap buffer overflow. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android kernelAndroid ID: A-263784118References: N/A
Problem types: description: Information disclosure
Affected products: vendor: n/a
product: Android
Published: 2023-06-28T00:00:00.000Z
CVE-2023-21161 
In Parse of simdata.cpp, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android kernelAndroid ID: A-263783702References: N/A
Problem types: description: Elevation of privilege
Affected products: vendor: n/a
product: Android
Published: 2023-06-28T00:00:00.000Z
CVE-2023-21162 
In RGXUnbackingZSBuffer of rgxta3d.c, there is a possible arbitrary code execution due to a use after free. This could lead to local escalation of privilege in the kernel with no additional execution privileges needed. User interaction is not needed for exploitation.
Problem types: description: Elevation of privilege
Affected products: vendor: Google
product: Android
default_status: unaffected
Published: 2023-12-04T22:40:46.601Z
CVE-2023-21163 
In PMR_ReadBytes of pmr.c, there is a possible arbitrary code execution due to a use after free. This could lead to local escalation of privilege in the kernel with no additional execution privileges needed. User interaction is not needed for exploitation.
Problem types: description: Elevation of privilege
Affected products: vendor: Google
product: Android
default_status: unaffected
Published: 2023-12-04T22:40:46.838Z
CVE-2023-21164 
In DevmemIntMapPMR of devicemem_server.c, there is a possible arbitrary code execution due to a use after free. This could lead to local escalation of privilege in the kernel with no additional execution privileges needed. User interaction is not needed for exploitation.
Problem types: description: Elevation of privilege
Affected products: vendor: Google
product: Android
default_status: unaffected
Published: 2023-12-04T22:40:47.041Z
CVE-2023-21165 
In DevmemIntUnmapPMR of devicemem_server.c, there is a possible arbitrary code execution due to a use after free. This could lead to local escalation of privilege in the kernel with no additional execution privileges needed. User interaction is not needed for exploitation.
Problem types: description: Elevation of privilege
Affected products: vendor: Google
product: Android
default_status: unaffected
Published: 2024-02-16T18:33:36.337Z
CVE-2023-21166 
In RGXBackingZSBuffer of rgxta3d.c, there is a possible arbitrary code execution due to a use after free. This could lead to local escalation of privilege in the kernel with no additional execution privileges needed. User interaction is not needed for exploitation.
Problem types: description: Elevation of privilege
Affected products: vendor: Google
product: Android
default_status: unaffected
Published: 2023-12-04T22:40:47.237Z
CVE-2023-21167 
In setProfileName of DevicePolicyManagerService.java, there is a possible way to crash the SystemUI menu due to a missing bounds check. This could lead to local denial of service with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-13Android ID: A-259942964
Problem types: description: Denial of service
Affected products: vendor: n/a
product: Android
Published: 2023-06-28T00:00:00.000Z
CVE-2023-21168 
In convertCbYCrY of ColorConverter.cpp, there is a possible out of bounds read due to a missing bounds check. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-13Android ID: A-253270285
Problem types: description: Information disclosure
Affected products: vendor: n/a
product: Android
Published: 2023-06-28T00:00:00.000Z
CVE-2023-21169 
In inviteInternal of p2p_iface.cpp, there is a possible out of bounds read due to a missing bounds check. This could lead to local information disclosure with System execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-13Android ID: A-274443441
Problem types: description: Information disclosure
Affected products: vendor: n/a
product: Android
Published: 2023-06-28T00:00:00.000Z
CVE-2023-21170 
In executeSetClientTarget of ComposerCommandEngine.h, there is a possible out of bounds read due to a missing bounds check. This could lead to local information disclosure with System execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-13Android ID: A-252764410
Problem types: description: Information disclosure
Affected products: vendor: n/a
product: Android
Published: 2023-06-28T00:00:00.000Z
CVE-2023-21171 
In verifyInputEvent of InputDispatcher.cpp, there is a possible way to conduct click fraud due to side channel information disclosure. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-13Android ID: A-261085213
Problem types: description: Elevation of privilege
Affected products: vendor: n/a
product: Android
Published: 2023-06-28T00:00:00.000Z
CVE-2023-21172 
In multiple functions of WifiCallingSettings.java, there is a possible way to change calling preferences for the admin user due to a permissions bypass. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-13Android ID: A-262243015
Problem types: description: Elevation of privilege
Affected products: vendor: n/a
product: Android
Published: 2023-06-28T00:00:00.000Z
CVE-2023-21173 
In multiple methods of DataUsageList.java, there is a possible way to learn about admin user's network activities due to a missing permission check. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-13Android ID: A-262741858
Problem types: description: Information disclosure
Affected products: vendor: n/a
product: Android
Published: 2023-06-28T00:00:00.000Z
CVE-2023-21174 
In isPageSearchEnabled of BillingCycleSettings.java, there is a possible way for the guest user to change data limits due to a permissions bypass. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-13Android ID: A-235822222
Problem types: description: Elevation of privilege
Affected products: vendor: n/a
product: Android
Published: 2023-06-28T00:00:00.000Z
CVE-2023-21175 
In onCreate of DataUsageSummary.java, there is a possible method for a guest user to enable or disable mobile data due to a permissions bypass. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-13Android ID: A-262243574
Problem types: description: Elevation of privilege
Affected products: vendor: n/a
product: Android
Published: 2023-06-28T00:00:00.000Z
CVE-2023-21176 
In list_key_entries of utils.rs, there is a possible way to disable user credentials due to resource exhaustion. This could lead to local denial of service with System execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-13Android ID: A-222287335
Problem types: description: Denial of service
Affected products: vendor: n/a
product: Android
Published: 2023-06-28T00:00:00.000Z
CVE-2023-21177 
In requestAppKeyboardShortcuts of WindowManagerService.java, there is a possible way to infer the app a user is interacting with due to a missing permission check. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-13Android ID: A-273906410
Problem types: description: Information disclosure
Affected products: vendor: n/a
product: Android
Published: 2023-06-28T00:00:00.000Z
CVE-2023-21178 
In installKey of KeyUtil.cpp, there is a possible failure of file encryption due to a race condition. This could lead to local information disclosure with System execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-13Android ID: A-140762419
Problem types: description: Information disclosure
Affected products: vendor: n/a
product: Android
Published: 2023-06-28T00:00:00.000Z
CVE-2023-21179 
In parseSecurityParamsFromXml of XmlUtil.java, there is a possible bypass of user specified wifi encryption protocol due to improperly used crypto. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-13Android ID: A-272755865
Problem types: description: Elevation of privilege
Affected products: vendor: n/a
product: Android
Published: 2023-06-28T00:00:00.000Z
CVE-2023-21180 
In xmlParseTryOrFinish of parser.c, there is a possible out of bounds read due to a heap buffer overflow. This could lead to remote information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-13Android ID: A-261365944
Problem types: description: Information disclosure
Affected products: vendor: n/a
product: Android
Published: 2023-06-28T00:00:00.000Z
CVE-2023-21181 
In btm_ble_update_inq_result of btm_ble_gap.cc, there is a possible out of bounds read due to a heap buffer overflow. This could lead to local information disclosure with System execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-13Android ID: A-264880969
Problem types: description: Information disclosure
Affected products: vendor: n/a
product: Android
Published: 2023-06-28T00:00:00.000Z
CVE-2023-21182 
In Exynos_parsing_user_data_registered_itu_t_t35 of VendorVideoAPI.cpp, there is a possible out of bounds read due to a missing bounds check. This could lead to local information disclosure with System execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-13Android ID: A-252764175
Problem types: description: Information disclosure
Affected products: vendor: n/a
product: Android
Published: 2023-06-28T00:00:00.000Z
CVE-2023-21183 
In ForegroundUtils of ForegroundUtils.java, there is a possible way to read NFC tag data while the app is still in the background due to a logic error in the code. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-13Android ID: A-235863754
Problem types: description: Elevation of privilege
Affected products: vendor: n/a
product: Android
Published: 2023-06-28T00:00:00.000Z
CVE-2023-21184 
In getCurrentPrivilegedPackagesForAllUsers of CarrierPrivilegesTracker.java, there is a possible permission bypass due to a logic error in the code. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-13Android ID: A-267809568
Problem types: description: Elevation of privilege
Affected products: vendor: n/a
product: Android
Published: 2023-06-28T00:00:00.000Z
CVE-2023-21185 
In multiple functions of WifiNetworkFactory.java, there is a missing permission check. This could lead to local escalation of privilege from the guest user with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-13Android ID: A-266700762
Problem types: description: Elevation of privilege
Affected products: vendor: n/a
product: Android
Published: 2023-06-28T00:00:00.000Z
CVE-2023-21186 
In LogResponse of Dns.cpp, there is a possible out of bounds read due to a missing bounds check. This could lead to remote denial of service with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-13Android ID: A-261079188
Problem types: description: Denial of service
Affected products: vendor: n/a
product: Android
Published: 2023-06-28T00:00:00.000Z
CVE-2023-21187 
In onCreate of UsbAccessoryUriActivity.java, there is a possible way to escape the Setup Wizard due to a logic error in the code. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-13Android ID: A-246542917
Problem types: description: Elevation of privilege
Affected products: vendor: n/a
product: Android
Published: 2023-06-28T00:00:00.000Z
CVE-2023-21188 
In btm_ble_update_inq_result of btm_ble_gap.cc, there is a possible out of bounds read due to a heap buffer overflow. This could lead to local information disclosure with System execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-13Android ID: A-264624283
Problem types: description: Information disclosure
Affected products: vendor: n/a
product: Android
Published: 2023-06-28T00:00:00.000Z
CVE-2023-21189 
In startLockTaskMode of LockTaskController.java, there is a possible bypass of lock task mode due to a logic error in the code. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is needed for exploitation.Product: AndroidVersions: Android-13Android ID: A-213942596
Problem types: description: Elevation of privilege
Affected products: vendor: n/a
product: Android
Published: 2023-06-28T00:00:00.000Z
CVE-2023-21190 
In btm_acl_encrypt_change of btm_acl.cc, there is a possible way for a remote device to turn off encryption without resulting in a terminated connection due to an unusual root cause. This could lead to local information disclosure with no additional execution privileges needed. User interaction is needed for exploitation.Product: AndroidVersions: Android-13Android ID: A-251436534
Problem types: description: Information disclosure
Affected products: vendor: n/a
product: Android
Published: 2023-06-28T00:00:00.000Z
CVE-2023-21191 
In fixNotification of NotificationManagerService.java, there is a possible bypass of notification hide preference due to a logic error in the code. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-13Android ID: A-269738057
Problem types: description: Elevation of privilege
Affected products: vendor: n/a
product: Android
Published: 2023-06-28T00:00:00.000Z
CVE-2023-21192 
In setInputMethodWithSubtypeIdLocked of InputMethodManagerService.java, there is a possible way to setup input methods that are not enabled due to improper input validation. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-13Android ID: A-227207653
Problem types: description: Elevation of privilege
Affected products: vendor: n/a
product: Android
Published: 2023-06-28T00:00:00.000Z
CVE-2023-21193 
In VideoFrame of VideoFrame.h, there is a possible abort due to an integer overflow. This could lead to remote information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-13Android ID: A-233006499
Problem types: description: Information disclosure
Affected products: vendor: n/a
product: Android
Published: 2023-06-28T00:00:00.000Z
CVE-2023-21194 
In gatt_dbg_op_name of gatt_utils.cc, there is a possible out of bounds read due to a missing bounds check. This could lead to local information disclosure in the Bluetooth server with System execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-13Android ID: A-260079141
Problem types: description: Information disclosure
Affected products: vendor: n/a
product: Android
Published: 2023-06-28T00:00:00.000Z
CVE-2023-21195 
In btm_ble_periodic_adv_sync_tx_rcvd of btm_ble_gap.cc, there is a possible out of bounds read due to an incorrect bounds check. This could lead to local information disclosure over Bluetooth, if the firmware were compromised with System execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-13Android ID: A-233879420
Problem types: description: Information disclosure
Affected products: vendor: n/a
product: Android
Published: 2023-06-28T00:00:00.000Z
CVE-2023-21196 
In btm_ble_batchscan_filter_track_adv_vse_cback of btm_ble_batchscan.cc, there is a possible out of bounds read due to a missing bounds check. This could lead to local information disclosure in the Bluetooth server with System execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-13Android ID: A-261857395
Problem types: description: Information disclosure
Affected products: vendor: n/a
product: Android
Published: 2023-06-28T00:00:00.000Z
CVE-2023-21197 
In btm_acl_process_sca_cmpl_pkt of btm_acl.cc, there is a possible out of bounds read due to an incorrect bounds check. This could lead to remote information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-13Android ID: A-251427561
Problem types: description: Information disclosure
Affected products: vendor: n/a
product: Android
Published: 2023-06-28T00:00:00.000Z
CVE-2023-21198 
In remove_sdp_record of btif_sdp_server.cc, there is a possible out of bounds read due to a missing bounds check. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-13Android ID: A-245517503
Problem types: description: Information disclosure
Affected products: vendor: n/a
product: Android
Published: 2023-06-28T00:00:00.000Z
CVE-2023-21199 
In btu_ble_proc_ltk_req of btu_hcif.cc, there is a possible out of bounds read due to a missing bounds check. This could lead to local information disclosure with System execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-13Android ID: A-254445961
Problem types: description: Information disclosure
Affected products: vendor: n/a
product: Android
Published: 2023-06-28T00:00:00.000Z
CVE-2023-21200 
In on_remove_iso_data_path of btm_iso_impl.h, there is a possible out of bounds read due to improper input validation. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-13Android ID: A-236688764
Problem types: description: Information disclosure
Affected products: vendor: n/a
product: Android
Published: 2023-06-28T00:00:00.000Z
CVE-2023-21201 
In on_create_record_event of btif_sdp_server.cc, there is a possible out of bounds read due to a missing null check. This could lead to remote denial of service with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-13Android ID: A-263545186
Problem types: description: Denial of service
Affected products: vendor: n/a
product: Android
Published: 2023-06-28T00:00:00.000Z
CVE-2023-21202 
In btm_delete_stored_link_key_complete of btm_devctl.cc, there is a possible out of bounds read due to a missing bounds check. This could lead to local information disclosure over Bluetooth with System execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-13Android ID: A-260568359
Problem types: description: Information disclosure
Affected products: vendor: n/a
product: Android
Published: 2023-06-28T00:00:00.000Z
CVE-2023-21203 
In startWpsPbcInternal of sta_iface.cpp, there is a possible out of bounds read due to improper input validation. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-13Android ID: A-262246082
Problem types: description: Elevation of privilege
Affected products: vendor: n/a
product: Android
Published: 2023-06-28T00:00:00.000Z
CVE-2023-21204 
In multiple files, there is a possible out of bounds read due to a missing bounds check. This could lead to local information disclosure in the wifi server with System execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-13Android ID: A-262246231
Problem types: description: Information disclosure
Affected products: vendor: n/a
product: Android
Published: 2023-06-28T00:00:00.000Z
CVE-2023-21205 
In startWpsPinDisplayInternal of sta_iface.cpp, there is a possible out of bounds read due to unsafe deserialization. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-13Android ID: A-262245376
Problem types: description: Information disclosure
Affected products: vendor: n/a
product: Android
Published: 2023-06-28T00:00:00.000Z