rainbutterfly/cve_corpus huggingface dataset:
CVE-2022-20273 
In Bluetooth, there is a possible out of bounds read due to a heap buffer overflow. This could lead to remote information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-13Android ID: A-206478022
Problem types: description: Information disclosure
Affected products: vendor: n/a
product: Android
Published: 2022-08-11T15:14:38.000Z
CVE-2022-20274 
In Keyguard, there is a missing permission check. This could lead to local escalation of privilege and prevention of screen timeout with User execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-13Android ID: A-206470146
Problem types: description: Elevation of privilege
Affected products: vendor: n/a
product: Android
Published: 2022-08-11T15:14:53.000Z
CVE-2022-20275 
In DevicePolicyManager, there is a possible way to determine whether an app is installed, without query permissions, due to side channel information disclosure. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-13Android ID: A-205836975
Problem types: description: Information disclosure
Affected products: vendor: n/a
product: Android
Published: 2022-08-11T15:15:09.000Z
CVE-2022-20276 
In DevicePolicyManager, there is a possible way to determine whether an app is installed, without query permissions, due to side channel information disclosure. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-13Android ID: A-205706731
Problem types: description: Information disclosure
Affected products: vendor: n/a
product: Android
Published: 2022-08-11T15:15:25.000Z
CVE-2022-20277 
In DevicePolicyManager, there is a possible way to determine whether an app is installed, without query permissions, due to side channel information disclosure. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-13Android ID: A-205145497
Problem types: description: Information disclosure
Affected products: vendor: n/a
product: Android
Published: 2022-08-11T15:15:40.000Z
CVE-2022-20278 
In Accounts, there is a possible way to write sensitive information to the system log due to insufficient log filtering. This could lead to local information disclosure with System execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-13Android ID: A-205130113
Problem types: description: Elevation of privilege
Affected products: vendor: n/a
product: Android
Published: 2022-08-11T15:15:55.000Z
CVE-2022-20279 
In DevicePolicyManager, there is a possible way to determine whether an app is installed, without query permissions, due to side channel information disclosure. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-13Android ID: A-204877302
Problem types: description: Information disclosure
Affected products: vendor: n/a
product: Android
Published: 2022-08-11T15:16:12.000Z
CVE-2022-20280 
In MMSProvider, there is a possible read of protected data due to improper input validationSQL injection. This could lead to local information disclosure of sms/mms data with User execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-13Android ID: A-204117261
Problem types: description: Information disclosure
Affected products: vendor: n/a
product: Android
Published: 2022-08-11T15:16:27.000Z
CVE-2022-20281 
In Core, there is a possible way to start an activity from the background due to a missing permission check. This could lead to local escalation of privilege with User execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-13Android ID: A-204083967
Problem types: description: Elevation of privilege
Affected products: vendor: n/a
product: Android
Published: 2022-08-11T15:16:43.000Z
CVE-2022-20282 
In AppWidget, there is a possible way to start an activity from the background due to a missing permission check. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is needed for exploitation.Product: AndroidVersions: Android-13Android ID: A-204083104
Problem types: description: Elevation of privilege
Affected products: vendor: n/a
product: Android
Published: 2022-08-11T15:16:58.000Z
CVE-2022-20283 
In Bluetooth, there is a possible out of bounds write due to an integer overflow. This could lead to remote code execution over Bluetooth with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-13Android ID: A-233069336
Problem types: description: Remote code execution
Affected products: vendor: n/a
product: Android
Published: 2022-08-11T15:17:14.000Z
CVE-2022-20284 
In Telephony, there is a possible information disclosure due to a missing permission check. This could lead to local information disclosure of phone accounts with User execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-13Android ID: A-231986341
Problem types: description: Information disclosure
Affected products: vendor: n/a
product: Android
Published: 2022-08-11T15:17:29.000Z
CVE-2022-20285 
In PackageManager, there is a possible way to determine whether an app is installed, without query permissions, due to side channel information disclosure. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-13Android ID: A-230868108
Problem types: description: Information disclosure
Affected products: vendor: n/a
product: Android
Published: 2022-08-11T15:17:44.000Z
CVE-2022-20286 
In Connectivity, there is a possible bypass the restriction of starting activity from background due to a logic error in the code. This could lead to local escalation of privilege with User execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-13Android ID: A-230866011
Problem types: description: Elevation of privilege
Affected products: vendor: n/a
product: Android
Published: 2022-08-11T15:17:59.000Z
CVE-2022-20287 
In AppSearchManagerService, there is a possible way to determine whether an app is installed, without query permissions, due to side channel information disclosure. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-13Android ID: A-204082784
Problem types: description: Information disclosure
Affected products: vendor: n/a
product: Android
Published: 2022-08-11T15:18:14.000Z
CVE-2022-20288 
In AppSearchManagerService, there is a possible way to determine whether an app is installed, without query permissions, due to side channel information disclosure. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-13Android ID: A-204082360
Problem types: description: Information disclosure
Affected products: vendor: n/a
product: Android
Published: 2022-08-11T15:18:29.000Z
CVE-2022-20289 
In PackageInstaller, there is a possible way to determine whether an app is installed, without query permissions, due to side channel information disclosure. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-13Android ID: A-203683960
Problem types: description: Information disclosure
Affected products: vendor: n/a
product: Android
Published: 2022-08-11T15:18:43.000Z
CVE-2022-20290 
In Midi, there is a possible way to learn about private midi devices due to a permissions bypass. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-13Android ID: A-203549963
Problem types: description: Elevation of privilege
Affected products: vendor: n/a
product: Android
Published: 2022-08-11T15:18:58.000Z
CVE-2022-20291 
In AppOpsService, there is a possible way to determine whether an app is installed, without query permissions, due to side channel information disclosure. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-13Android ID: A-203430648
Problem types: description: Information disclosure
Affected products: vendor: n/a
product: Android
Published: 2022-08-11T15:19:13.000Z
CVE-2022-20292 
In Settings, there is a possible way to bypass factory reset protections due to a logic error in the code. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-13Android ID: A-202975040
Problem types: description: Elevation of privilege
Affected products: vendor: n/a
product: Android
Published: 2022-08-11T15:19:28.000Z
CVE-2022-20293 
In LauncherApps, there is a possible way to determine whether an app is installed, without query permissions, due to side channel information disclosure. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-13Android ID: A-202298672
Problem types: description: Information disclosure
Affected products: vendor: n/a
product: Android
Published: 2022-08-11T15:19:43.000Z
CVE-2022-20294 
In Content, there is a possible way to learn about an account present on the device due to a missing permission check. This could lead to local information disclosure with User execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-13Android ID: A-202160705
Problem types: description: Information disclosure
Affected products: vendor: n/a
product: Android
Published: 2022-08-11T15:19:58.000Z
CVE-2022-20295 
In ContentService, there is a possible way to check if an account exists on the device due to a missing permission check. This could lead to local information disclosure with User execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-13Android ID: A-202160584
Problem types: description: Information disclosure
Affected products: vendor: n/a
product: Android
Published: 2022-08-11T15:20:15.000Z
CVE-2022-20296 
In ContentService, there is a possible way to check if an account exists on the device due to a missing permission check. This could lead to local information disclosure with User execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-13Android ID: A-201794303
Problem types: description: Information disclosure
Affected products: vendor: n/a
product: Android
Published: 2022-08-11T15:20:30.000Z
CVE-2022-20297 
In Settings, there is a possible way to bypass factory reset protections due to a logic error in the code. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-13Android ID: A-201561699
Problem types: description: Elevation of privilege
Affected products: vendor: n/a
product: Android
Published: 2022-08-11T15:20:42.000Z
CVE-2022-20298 
In ContentService, there is a possible way to check if an account exists on the device due to a missing permission check. This could lead to local information disclosure with User execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-13Android ID: A-201416182
Problem types: description: Information disclosure
Affected products: vendor: n/a
product: Android
Published: 2022-08-11T15:20:57.000Z
CVE-2022-20299 
In ContentService, there is a possible way to check if the given account exists on the device due to a missing permission check. This could lead to local information disclosure with User execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-13Android ID: A-201415895
Problem types: description: Information disclosure
Affected products: vendor: n/a
product: Android
Published: 2022-08-11T15:21:12.000Z
CVE-2022-20300 
In Content, there is a possible way to check if the given account exists on the device due to a missing permission check. This could lead to local information disclosure with User execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-13Android ID: A-200956588
Problem types: description: Information disclosure
Affected products: vendor: n/a
product: Android
Published: 2022-08-11T15:21:27.000Z
CVE-2022-20301 
In Content, there is a possible way to check if an account exists on the device due to a missing permission check. This could lead to local information disclosure with User execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-13Android ID: A-200956614
Problem types: description: Elevation of privilege
Affected products: vendor: n/a
product: Android
Published: 2022-08-11T15:21:43.000Z
CVE-2022-20302 
In Settings, there is a possible way to bypass factory reset protections due to a sandbox escape. This could lead to local escalation of privilege if the attacker has physical access to the device, with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-13Android ID: A-200746457
Problem types: description: Elevation of privilege
Affected products: vendor: n/a
product: Android
Published: 2022-08-11T15:21:58.000Z
CVE-2022-20303 
In ContentService, there is a possible way to determine if an account is on the device without GET_ACCOUNTS permission due to a missing permission check. This could lead to local information disclosure with User execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-13Android ID: A-200573021
Problem types: description: Information disclosure
Affected products: vendor: n/a
product: Android
Published: 2022-08-11T15:22:11.000Z
CVE-2022-20304 
In Content, there is a possible way to determinate the user's account due to side channel information disclosure. This could lead to local information disclosure with User execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-13Android ID: A-199751919
Problem types: description: Information disclosure
Affected products: vendor: n/a
product: Android
Published: 2022-08-11T15:22:26.000Z
CVE-2022-20305 
In ContentService, there is a possible disclosure of available account types due to a missing permission check. This could lead to local information disclosure with User execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-13Android ID: A-199751623
Problem types: description: Elevation of privilege
Affected products: vendor: n/a
product: Android
Published: 2022-08-11T15:22:39.000Z
CVE-2022-20306 
In Camera Provider HAL, there is a possible memory corruption due to a use after free. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-13Android ID: A-199680794
Problem types: description: Elevation of privilege
Affected products: vendor: n/a
product: Android
Published: 2022-08-11T15:22:55.000Z
CVE-2022-20307 
In AlarmManagerService, there is a possible way to determine whether an app is installed, without query permissions, due to side channel information disclosure. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-13Android ID: A-198782887
Problem types: description: Information disclosure
Affected products: vendor: n/a
product: Android
Published: 2022-08-11T15:23:12.000Z
CVE-2022-20308 
In hostapd, there is a possible insecure configuration due to an insecure default value. This could lead to remote denial of service of the wifi hotspot with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-13Android ID: A-197874458
Problem types: description: Denial of service
Affected products: vendor: n/a
product: Android
Published: 2022-08-11T15:23:27.000Z
CVE-2022-20309 
In PackageInstaller, there is a possible way to determine whether an app is installed, without query permissions, due to side channel information disclosure. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-13Android ID: A-194694094
Problem types: description: Information disclosure
Affected products: vendor: n/a
product: Android
Published: 2022-08-11T15:23:39.000Z
CVE-2022-20310 
In Telecomm, there is a possible disclosure of registered self managed phone accounts due to a missing permission check. This could lead to local information disclosure with User execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-13Android ID: A-192663798
Problem types: description: Information disclosure
Affected products: vendor: n/a
product: Android
Published: 2022-08-11T15:23:54.000Z
CVE-2022-20311 
In Telecomm, there is a possible disclosure of registered self managed phone accounts due to a missing permission check. This could lead to local information disclosure with User execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-13Android ID: A-192663553
Problem types: description: Information disclosure
Affected products: vendor: n/a
product: Android
Published: 2022-08-11T15:24:10.000Z
CVE-2022-20312 
In WifiP2pManager, there is a possible toobtain WiFi P2P MAC address without user consent due to missing permission check. This could lead to local information disclosure without additional execution privileges needed. User interaction is not needed forexploitationProduct: AndroidVersions: Android-13Android ID: A-192244925
Problem types: description: Elevation of privilege
Affected products: vendor: n/a
product: Android
Published: 2022-08-11T15:24:24.000Z
CVE-2022-20313 
In Bluetooth, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-13Android ID: A-192206329
Problem types: description: Elevation of privilege
Affected products: vendor: n/a
product: Android
Published: 2022-08-11T15:24:39.000Z
CVE-2022-20314 
In KeyChain, there is a possible spoof keychain chooser activity request due to improper input validation. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-13Android ID: A-191876118
Problem types: description: Elevation of privilege
Affected products: vendor: n/a
product: Android
Published: 2022-08-11T15:24:53.000Z
CVE-2022-20315 
In ActivityManager, there is a possible disclosure of installed packages due to a missing permission check. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-13Android ID: A-191058227
Problem types: description: Information disclosure
Affected products: vendor: n/a
product: Android
Published: 2022-08-11T15:25:10.000Z
CVE-2022-20316 
In ContentResolver, there is a possible way to determine whether an app is installed, without query permissions, due to side channel information disclosure. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-13Android ID: A-190726121
Problem types: description: Information disclosure
Affected products: vendor: n/a
product: Android
Published: 2022-08-11T15:25:25.000Z
CVE-2022-20317 
In SystemUI, there is a possible way to unexpectedly enable the external speaker due to a logic error in the code. This could lead to local information disclosure with no additional execution privileges needed. User interaction is needed for exploitation.Product: AndroidVersions: Android-13Android ID: A-190199063
Problem types: description: Information disclosure
Affected products: vendor: n/a
product: Android
Published: 2022-08-11T15:25:36.000Z
CVE-2022-20318 
In PackageInstaller, there is a possible way to determine whether an app is installed, without query permissions, due to side channel information disclosure. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-13Android ID: A-194694069
Problem types: description: Information disclosure
Affected products: vendor: n/a
product: Android
Published: 2022-08-11T15:25:50.000Z
CVE-2022-20319 
In DreamServices, there is a possible way to launch arbitrary protected activities due to a confused deputy. This could lead to local escalation of privilege with User execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-13Android ID: A-189574230
Problem types: description: Elevation of privilege
Affected products: vendor: n/a
product: Android
Published: 2022-08-11T15:26:01.000Z
CVE-2022-20320 
In ActivityManager, there is a possible way to determine whether an app is installed, without query permissions, due to side channel information disclosure. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-13Android ID: A-187956596
Problem types: description: Information disclosure
Affected products: vendor: n/a
product: Android
Published: 2022-08-11T15:26:16.000Z
CVE-2022-20321 
In Settings, there is a possible way for an application without permissions to read content of WiFi QR codes due to a missing permission check. This could lead to local information disclosure with no additional execution privileges needed. User interaction is needed for exploitation.Product: AndroidVersions: Android-13Android ID: A-187176859
Problem types: description: Information disclosure
Affected products: vendor: n/a
product: Android
Published: 2022-08-11T15:26:28.000Z
CVE-2022-20322 
In PackageManager, there is a possible installed package disclosure due to a missing permission check. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-13Android ID: A-187176993
Problem types: description: Information disclosure
Affected products: vendor: n/a
product: Android
Published: 2022-08-11T15:26:40.000Z
CVE-2022-20323 
In PackageManager, there is a possible package installation disclosure due to a missing permission check. This could lead to local information disclosure with User execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-13Android ID: A-187176203
Problem types: description: Information disclosure
Affected products: vendor: n/a
product: Android
Published: 2022-08-11T15:26:54.000Z