rainbutterfly/cve_corpus huggingface dataset:
CVE-2022-20324 
In Framework, there is a possible way to determine whether an app is installed, without query permissions, due to side channel information disclosure. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-13Android ID: A-187042120
Problem types: description: Information disclosure
Affected products: vendor: n/a
product: Android
Published: 2022-08-11T15:27:09.000Z
CVE-2022-20325 
In Media, there is a possible code execution due to a use after free. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-13Android ID: A-186473060
Problem types: description: Elevation of privilege
Affected products: vendor: n/a
product: Android
Published: 2022-08-11T15:27:24.000Z
CVE-2022-20326 
In Telephony, there is a possible disclosure of SIM identifiers due to a missing permission check. This could lead to local information disclosure with User execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-13Android ID: A-185235527
Problem types: description: Information disclosure
Affected products: vendor: n/a
product: Android
Published: 2022-08-11T15:27:37.000Z
CVE-2022-20327 
In Wi-Fi, there is a possible way to retrieve the WiFi SSID without location permissions due to a missing permission check. This could lead to local information disclosure with User execution privileges needed. User interaction is needed for exploitation.Product: AndroidVersions: Android-13Android ID: A-185126813
Problem types: description: Information disclosure
Affected products: vendor: n/a
product: Android
Published: 2022-08-11T15:27:52.000Z
CVE-2022-20328 
In PackageManager, there is a possible way to determine whether an app is installed due to a missing permission check. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-13Android ID: A-184948501
Problem types: description: Information disclosure
Affected products: vendor: n/a
product: Android
Published: 2022-08-11T15:28:07.000Z
CVE-2022-20329 
In Wifi, there is a possible way to enable Wifi without permissions due to a missing permission check. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-13Android ID: A-183410556
Problem types: description: Elevation of privilege
Affected products: vendor: n/a
product: Android
Published: 2022-08-11T15:28:22.000Z
CVE-2022-20330 
In Bluetooth, there is a possible way to connect or disconnect bluetooth devices without user awareness due to a missing permission check. This could lead to local escalation of privilege with User execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-13Android ID: A-181962588
Problem types: description: Elevation of privilege
Affected products: vendor: n/a
product: Android
Published: 2022-08-11T15:28:33.000Z
CVE-2022-20331 
In the Framework, there is a possible way to enable a work profile without user consent due to a tapjacking/overlay attack. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is needed for exploitation.Product: AndroidVersions: Android-13Android ID: A-181785557
Problem types: description: Elevation of privilege
Affected products: vendor: n/a
product: Android
Published: 2022-08-11T15:28:47.000Z
CVE-2022-20332 
In PackageManager, there is a possible way to determine whether an app is installed, without query permissions, due to side channel information disclosure. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-13Android ID: A-180019130
Problem types: description: Information disclosure
Affected products: vendor: n/a
product: Android
Published: 2022-08-11T15:29:01.000Z
CVE-2022-20333 
In Bluetooth, there is a possible crash due to a missing null check. This could lead to remote denial of service with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-13Android ID: A-179161657
Problem types: description: Denial of service
Affected products: vendor: n/a
product: Android
Published: 2022-08-11T15:29:14.000Z
CVE-2022-20334 
In Bluetooth, there are possible process crashes due to dereferencing a null pointer. This could lead to remote denial of service with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-13Android ID: A-178800552
Problem types: description: Denial of service
Affected products: vendor: n/a
product: Android
Published: 2022-08-11T15:29:28.000Z
CVE-2022-20335 
In Wifi Slice, there is a possible way to adjust Wi-Fi settings even when the permission has been disabled due to a missing permission check. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-13Android ID: A-178014725
Problem types: description: Elevation of privilege
Affected products: vendor: n/a
product: Android
Published: 2022-08-11T15:29:43.000Z
CVE-2022-20336 
In Settings, there is a possible installed application disclosure due to a missing permission check. This could lead to local information disclosure of applications allow-listed to use the network during VPN lockdown mode with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-13Android ID: A-177239688
Problem types: description: Information disclosure
Affected products: vendor: n/a
product: Android
Published: 2022-08-11T15:29:57.000Z
CVE-2022-20338 
In HierarchicalUri.readFrom of Uri.java, there is a possible way to craft a malformed Uri object due to improper input validation. This could lead to a local escalation of privilege, preventing processes from validating URIs correctly, with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-11 Android-12 Android-12LAndroid ID: A-171966843
Problem types: description: Elevation of privilege
Affected products: vendor: n/a
product: Android
Published: 2022-08-11T00:00:00.000Z
CVE-2022-20339 
In Android, there is a possible access of network neighbor table information due to an insecure SEpolicy configuration. This could lead to local information disclosure of network topography with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-13Android ID: A-171572148
Problem types: description: Information disclosure
Affected products: vendor: n/a
product: Android
Published: 2022-08-11T15:30:26.000Z
CVE-2022-20340 
In SELinux policy, there is a possible way of inferring which websites are being opened in the browser due to a missing permission check. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-13Android ID: A-166269532
Problem types: description: Information disclosure
Affected products: vendor: n/a
product: Android
Published: 2022-08-11T15:30:40.000Z
CVE-2022-20341 
In ConnectivityService, there is a possible bypass of network permissions due to a missing permission check. This could lead to local information disclosure of tethering interfaces with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-13Android ID: A-162952629
Problem types: description: Information disclosure
Affected products: vendor: n/a
product: Android
Published: 2022-08-11T15:30:52.000Z
CVE-2022-20342 
In WiFi, there is a possible disclosure of WiFi password to the end user due to an insecure default value. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-13Android ID: A-143534321
Problem types: description: Information disclosure
Affected products: vendor: n/a
product: Android
Published: 2022-08-11T15:31:05.000Z
CVE-2022-20344 
In stealReceiveChannel of EventThread.cpp, there is a possible way to interfere with process communication due to a race condition. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-10 Android-11 Android-12 Android-12LAndroid ID: A-232541124
Problem types: description: Elevation of privilege
Affected products: vendor: n/a
product: Android
Published: 2022-08-09T20:20:54.000Z
CVE-2022-20345 
In l2cble_process_sig_cmd of l2c_ble.cc, there is a possible out of bounds write due to a missing bounds check. This could lead to remote code execution over Bluetooth with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-12 Android-12LAndroid ID: A-230494481
Problem types: description: Remote code execution
Affected products: vendor: n/a
product: Android
Published: 2022-08-09T20:21:10.000Z
CVE-2022-20346 
In updateAudioTrackInfoFromESDS_MPEG4Audio of MPEG4Extractor.cpp, there is a possible out of bounds read due to an incorrect bounds check. This could lead to remote information disclosure with no additional execution privileges needed. User interaction is needed for exploitation.Product: AndroidVersions: Android-10 Android-11 Android-12 Android-12LAndroid ID: A-230493653
Problem types: description: Information disclosure
Affected products: vendor: n/a
product: Android
Published: 2022-08-09T20:21:24.000Z
CVE-2022-20347 
In onAttach of ConnectedDeviceDashboardFragment.java, there is a possible permission bypass due to a confused deputy. This could lead to remote escalation of privilege in Bluetooth settings with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-10 Android-11 Android-12 Android-12LAndroid ID: A-228450811
Problem types: description: Elevation of privilege
Affected products: vendor: n/a
product: Android
Published: 2022-08-09T20:21:49.000Z
CVE-2022-20348 
In updateState of LocationServicesWifiScanningPreferenceController.java, there is a possible admin restriction bypass due to a missing permission check. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-10 Android-11 Android-12 Android-12LAndroid ID: A-228315529
Problem types: description: Elevation of privilege
Affected products: vendor: n/a
product: Android
Published: 2022-08-09T20:22:04.000Z
CVE-2022-20349 
In WifiScanningPreferenceController and BluetoothScanningPreferenceController, there is a possible admin restriction bypass due to a missing permission check. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-10 Android-11 Android-12 Android-12LAndroid ID: A-228315522
Problem types: description: Elevation of privilege
Affected products: vendor: n/a
product: Android
Published: 2022-08-09T20:22:17.000Z
CVE-2022-20350 
In onCreate of NotificationAccessConfirmationActivity.java, there is a possible way to trick the victim to grant notification access to the wrong app due to improper input validation. This could lead to local information disclosure with User execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-10 Android-11 Android-12 Android-12LAndroid ID: A-228178437
Problem types: description: Information disclosure
Affected products: vendor: n/a
product: Android
Published: 2022-08-09T20:22:32.000Z
CVE-2022-20351 
In queryInternal of CallLogProvider.java, there is a possible access to voicemail information due to SQL injection. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-10 Android-11 Android-12 Android-12LAndroid ID: A-224771921
Problem types: description: Information disclosure
Affected products: vendor: n/a
product: Android
Published: 2022-10-11T00:00:00.000Z
CVE-2022-20352 
In addProviderRequestListener of LocationManagerService.java, there is a possible way to learn which packages request location information due to a missing permission check. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-12 Android-12LAndroid ID: A-222473855
Problem types: description: Information disclosure
Affected products: vendor: n/a
product: Android
Published: 2022-08-09T20:22:46.000Z
CVE-2022-20353 
In onSaveRingtone of DefaultRingtonePreference.java, there is a possible inappropriate file read due to improper input validation. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-10 Android-11 Android-12 Android-12LAndroid ID: A-221041256
Problem types: description: Information disclosure
Affected products: vendor: n/a
product: Android
Published: 2022-08-09T20:23:01.000Z
CVE-2022-20354 
In onDefaultNetworkChanged of Vpn.java, there is a possible way to disable VPN due to a logic error in the code. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-11 Android-12 Android-12LAndroid ID: A-219546241
Problem types: description: Elevation of privilege
Affected products: vendor: n/a
product: Android
Published: 2022-08-09T20:23:16.000Z
CVE-2022-20355 
In get of PacProxyService.java, there is a possible system service crash due to improper input validation. This could lead to local denial of service with User execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-10 Android-11 Android-12 Android-12LAndroid ID: A-219498290
Problem types: description: Denial of service
Affected products: vendor: n/a
product: Android
Published: 2022-08-09T20:23:30.000Z
CVE-2022-20356 
In shouldAllowFgsWhileInUsePermissionLocked of ActiveServices.java, there is a possible way to start foreground service from background due to improper input validation. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-11 Android-12 Android-12LAndroid ID: A-215003903
Problem types: description: Elevation of privilege
Affected products: vendor: n/a
product: Android
Published: 2022-08-09T20:23:45.000Z
CVE-2022-20357 
In writeToParcel of SurfaceControl.cpp, there is a possible information disclosure due to uninitialized data. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-12 Android-12LAndroid ID: A-214999987
Problem types: description: Information disclosure
Affected products: vendor: n/a
product: Android
Published: 2022-08-09T20:23:56.000Z
CVE-2022-20358 
In startSync of AbstractThreadedSyncAdapter.java, there is a possible way to access protected content of content providers due to a missing permission check. This could lead to local information disclosure with User execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-10 Android-11 Android-12 Android-12LAndroid ID: A-203229608
Problem types: description: Information disclosure
Affected products: vendor: n/a
product: Android
Published: 2022-08-09T20:24:16.000Z
CVE-2022-20360 
In setChecked of SecureNfcPreferenceController.java, there is a missing permission check. This could lead to local escalation of privilege from the guest user with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-10 Android-11 Android-12 Android-12LAndroid ID: A-228314987
Problem types: description: Elevation of privilege
Affected products: vendor: n/a
product: Android
Published: 2022-08-09T20:24:47.000Z
CVE-2022-20361 
In btif_dm_auth_cmpl_evt of btif_dm.cc, there is a possible vulnerability in Cross-Transport Key Derivation due to Weakness in Bluetooth Standard. This could lead to remote escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-10 Android-11 Android-12 Android-12LAndroid ID: A-231161832
Problem types: description: Elevation of privilege
Affected products: vendor: n/a
product: Android
Published: 2022-08-09T20:25:00.000Z
CVE-2022-20362 
In Bluetooth, there is a possible out of bounds write due to an integer overflow. This could lead to remote code execution over Bluetooth with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-13Android ID: A-230756082
Problem types: description: Remote code execution
Affected products: vendor: n/a
product: Android
Published: 2022-08-11T15:31:19.000Z
CVE-2022-20364 
In sysmmu_unmap of TBD, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android kernelAndroid ID: A-233606615References: N/A
Problem types: description: Elevation of privilege
Affected products: vendor: n/a
product: Android
Published: 2022-09-14T00:00:00.000Z
CVE-2022-20365 
Product: AndroidVersions: Android kernelAndroid ID: A-229632566References: N/A
Problem types: description: Elevation of privilege
Affected products: vendor: n/a
product: Android
Published: 2022-08-11T14:58:59.000Z
CVE-2022-20366 
In ioctl_dpm_clk_update of lwis_ioctl.c, there is a possible out of bounds write due to an integer overflow. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android kernelAndroid ID: A-225877745References: N/A
Problem types: description: Elevation of privilege
Affected products: vendor: n/a
product: Android
Published: 2022-08-11T14:59:11.000Z
CVE-2022-20367 
In construct_transaction of lwis_ioctl.c, there is a possible out of bounds write due to an integer overflow. This could lead to local escalation of privilege in the kernel with System execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android kernelAndroid ID: A-225877459References: N/A
Problem types: description: Elevation of privilege
Affected products: vendor: n/a
product: Android
Published: 2022-08-11T14:59:24.000Z
CVE-2022-20368 
Product: AndroidVersions: Android kernelAndroid ID: A-224546354References: Upstream kernel
Problem types: description: Elevation of privilege
Affected products: vendor: n/a
product: Android
Published: 2022-08-11T14:59:35.000Z
CVE-2022-20369 
In v4l2_m2m_querybuf of v4l2-mem2mem.c, there is a possible out of bounds write due to improper input validation. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android kernelAndroid ID: A-223375145References: Upstream kernel
Problem types: description: Elevation of privilege
Affected products: vendor: n/a
product: Android
Published: 2022-08-11T00:00:00.000Z
CVE-2022-20370 
Product: AndroidVersions: Android kernelAndroid ID: A-215730643References: N/A
Problem types: description: Information disclosure
Affected products: vendor: n/a
product: Android
Published: 2022-08-11T15:00:10.000Z
CVE-2022-20371 
In dm_bow_dtr and related functions of dm-bow.c, there is a possible use after free due to a race condition. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android kernelAndroid ID: A-195565510References: Upstream kernel
Problem types: description: Elevation of privilege
Affected products: vendor: n/a
product: Android
Published: 2022-08-11T15:00:21.000Z
CVE-2022-20372 
In exynos5_i2c_irq of (TBD), there is a possible out of bounds write due to a use after free. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android kernelAndroid ID: A-195480799References: N/A
Problem types: description: Elevation of privilege
Affected products: vendor: n/a
product: Android
Published: 2022-08-11T15:00:36.000Z
CVE-2022-20373 
In st21nfc_loc_set_polaritymode of fc/st21nfc.c, there is a possible use after free due to a race condition. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android kernelAndroid ID: A-208269510References: N/A
Problem types: description: Elevation of privilege
Affected products: vendor: n/a
product: Android
Published: 2022-08-11T15:00:50.000Z
CVE-2022-20375 
In LteRrcNrProAsnDecode of LteRrcNr_Codec.c, there is a possible out of bounds read due to a missing bounds check. This could lead to remote denial of service with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android kernelAndroid ID: A-180956894References: N/A
Problem types: description: Denial of service
Affected products: vendor: n/a
product: Android
Published: 2022-08-11T15:01:15.000Z
CVE-2022-20376 
In trusty_log_seq_start of trusty-log.c, there is a possible use after free due to improper locking. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android kernelAndroid ID: A-216130110References: N/A
Problem types: description: Elevation of privilege
Affected products: vendor: n/a
product: Android
Published: 2022-08-11T15:01:29.000Z
CVE-2022-20377 
In TBD of keymaster_ipc.cpp, there is a possible to force gatekeeper, fingerprint, and faceauth to use a known HMAC key. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android kernelAndroid ID: A-222339795References: N/A
Problem types: description: Elevation of privilege
Affected products: vendor: n/a
product: Android
Published: 2022-08-11T15:01:43.000Z
CVE-2022-20378 
Product: AndroidVersions: Android kernelAndroid ID: A-234657153References: N/A
Problem types: description: Elevation of privilege
Affected products: vendor: n/a
product: Android
Published: 2022-08-11T15:01:57.000Z
CVE-2022-20379 
In lwis_buffer_alloc of lwis_buffer.c, there is a possible arbitrary code execution due to a use after free. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android kernelAndroid ID: A-209436980References: N/A
Problem types: description: Elevation of privilege
Affected products: vendor: n/a
product: Android
Published: 2022-08-11T15:02:13.000Z
CVE-2022-20380 
Product: AndroidVersions: Android kernelAndroid ID: A-212625740References: N/A
Problem types: description: Information disclosure
Affected products: vendor: n/a
product: Android
Published: 2022-08-11T15:02:28.000Z