rainbutterfly/cve_corpus huggingface dataset:
CVE-2021-39765 
In Gallery, there is a possible permission bypass due to a confused deputy. This could lead to local information disclosure with User execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-12LAndroid ID: A-201535427
Problem types: description: Information disclosure
Affected products: vendor: n/a
product: Android
Published: 2022-03-30T16:02:30.000Z
CVE-2021-39766 
In Settings, there is a possible way to determine whether an app is installed, without query permissions, due to side channel information disclosure. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-12LAndroid ID: A-198296421
Problem types: description: Information disclosure
Affected products: vendor: n/a
product: Android
Published: 2022-03-30T16:02:31.000Z
CVE-2021-39767 
In miniadb, there is a possible way to get read/write access to recovery system properties due to an insecure default value. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-12LAndroid ID: A-201308542
Problem types: description: Elevation of privilege
Affected products: vendor: n/a
product: Android
Published: 2022-03-30T16:02:32.000Z
CVE-2021-39768 
In Settings, there is a possible way to add an auto-connect WiFi network without the user's consent due to a missing permission check. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is needed for exploitation.Product: AndroidVersions: Android-12LAndroid ID: A-202017876
Problem types: description: Elevation of privilege
Affected products: vendor: n/a
product: Android
Published: 2022-03-30T16:02:33.000Z
CVE-2021-39769 
In Device Policy, there is a possible way to determine whether an app is installed, without query permissions, due to a missing permission check. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-12LAndroid ID: A-193663287
Problem types: description: Information disclosure
Affected products: vendor: n/a
product: Android
Published: 2022-03-30T16:02:34.000Z
CVE-2021-39770 
In Framework, there is a possible disclosure of the device owner package due to a missing permission check. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-12LAndroid ID: A-193033501
Problem types: description: Information disclosure
Affected products: vendor: n/a
product: Android
Published: 2022-03-30T16:02:35.000Z
CVE-2021-39771 
In Settings, there is a possible way to misrepresent which app wants to add a wifi network due to improper input validation. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is needed for exploitation.Product: AndroidVersions: Android-12LAndroid ID: A-198661951
Problem types: description: Elevation of privilege
Affected products: vendor: n/a
product: Android
Published: 2022-03-30T16:02:36.000Z
CVE-2021-39772 
In Bluetooth, there is a possible way to access the a2dp audio control switch due to a missing permission check. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-12LAndroid ID: A-181962322
Problem types: description: Elevation of privilege
Affected products: vendor: n/a
product: Android
Published: 2022-03-30T16:02:37.000Z
CVE-2021-39773 
In VpnManagerService, there is a possible disclosure of installed VPN packages due to side channel information disclosure. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-12LAndroid ID: A-191276656
Problem types: description: Information disclosure
Affected products: vendor: n/a
product: Android
Published: 2022-03-30T16:02:38.000Z
CVE-2021-39774 
In Bluetooth, there is a possible out of bounds read due to a missing bounds check. This could lead to local denial of service with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-12LAndroid ID: A-205989472
Problem types: description: Denial of service
Affected products: vendor: n/a
product: Android
Published: 2022-03-30T16:02:39.000Z
CVE-2021-39775 
In People, there is a possible way to determine whether an app is installed, without query permissions, due to side channel information disclosure. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-12LAndroid ID: A-206465854
Problem types: description: Information disclosure
Affected products: vendor: n/a
product: Android
Published: 2022-03-30T16:02:40.000Z
CVE-2021-39776 
In NFC, there is a possible memory corruption due to a use after free. This could lead to local escalation of privilege with User execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-12LAndroid ID: A-192614125
Problem types: description: Elevation of privilege
Affected products: vendor: n/a
product: Android
Published: 2022-03-30T16:02:42.000Z
CVE-2021-39777 
In Telephony, there is a possible way to determine whether an app is installed, without query permissions, due to a missing permission check. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-12LAndroid ID: A-194743207
Problem types: description: Information disclosure
Affected products: vendor: n/a
product: Android
Published: 2022-03-30T16:02:43.000Z
CVE-2021-39778 
In Telecomm, there is a possible way to determine whether an app is installed, without query permissions, due to improper input validation. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-12LAndroid ID: A-196406138
Problem types: description: Information disclosure
Affected products: vendor: n/a
product: Android
Published: 2022-03-30T16:02:44.000Z
CVE-2021-39779 
In getCallStateUsingPackage of Telecom Service, there is a missing permission check. This could lead to local information disclosure of the call state with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-12LAndroid ID: A-190400974
Problem types: description: Information disclosure
Affected products: vendor: n/a
product: Android
Published: 2022-03-30T16:02:45.000Z
CVE-2021-39780 
In Traceur, there is a possible bypass of developer settings requirements for capturing system traces due to a missing permission check. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is needed for exploitation.Product: AndroidVersions: Android-12LAndroid ID: A-204992293
Problem types: description: Elevation of privilege
Affected products: vendor: n/a
product: Android
Published: 2022-03-30T16:02:46.000Z
CVE-2021-39781 
In SmsController, there is a possible information disclosure due to a permissions bypass. This could lead to local escalation of privilege and sending sms with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-12LAndroid ID: A-195311502
Problem types: description: Elevation of privilege
Affected products: vendor: n/a
product: Android
Published: 2022-03-30T16:02:47.000Z
CVE-2021-39782 
In Telephony, there is a possible unauthorized modification of the PLMN SIM file due to a missing permission check. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-12LAndroid ID: A-202760015
Problem types: description: Elevation of privilege
Affected products: vendor: n/a
product: Android
Published: 2022-03-30T16:02:48.000Z
CVE-2021-39783 
In rcsservice, there is a possible way to modify TTY mode due to a missing permission check. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-12LAndroid ID: A-197960597
Problem types: description: Elevation of privilege
Affected products: vendor: n/a
product: Android
Published: 2022-03-30T16:02:49.000Z
CVE-2021-39784 
In CellBroadcastReceiver, there is a possible path to enable specific cellular features due to a missing permission check. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-12LAndroid ID: A-200163477
Problem types: description: Elevation of privilege
Affected products: vendor: n/a
product: Android
Published: 2022-03-30T16:02:50.000Z
CVE-2021-39786 
In NFC, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-12LAndroid ID: A-192551247
Problem types: description: Elevation of privilege
Affected products: vendor: n/a
product: Android
Published: 2022-03-30T16:02:51.000Z
CVE-2021-39787 
In SystemUI, there is a possible arbitrary Activity launch due to a confused deputy. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is needed for exploitation.Product: AndroidVersions: Android-12LAndroid ID: A-202506934
Problem types: description: Elevation of privilege
Affected products: vendor: n/a
product: Android
Published: 2022-03-30T16:02:52.000Z
CVE-2021-39788 
In TelecomManager, there is a possible way to check if a particular self managed phone account was registered on the device due to side channel information disclosure. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-12LAndroid ID: A-191768014
Problem types: description: Information disclosure
Affected products: vendor: n/a
product: Android
Published: 2022-03-30T16:02:53.000Z
CVE-2021-39789 
In Telecom, there is a possible leak of TTY mode change due to a missing permission check. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-12LAndroid ID: A-203880906
Problem types: description: Elevation of privilege
Affected products: vendor: n/a
product: Android
Published: 2022-03-30T16:02:54.000Z
CVE-2021-39790 
In Dialer, there is a possible way to manipulate visual voicemail settings due to a missing permission check. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is needed for exploitation.Product: AndroidVersions: Android-12LAndroid ID: A-186405146
Problem types: description: Elevation of privilege
Affected products: vendor: n/a
product: Android
Published: 2022-03-30T16:02:56.000Z
CVE-2021-39791 
In WallpaperManagerService, there is a possible way to determine whether an app is installed, without query permissions, due to side channel information disclosure. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-12LAndroid ID: A-194112606
Problem types: description: Information disclosure
Affected products: vendor: n/a
product: Android
Published: 2022-03-30T16:02:57.000Z
CVE-2021-39792 
In usb_gadget_giveback_request of core.c, there is a possible use after free out of bounds read due to a race condition. This could lead to local information disclosure with System execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android kernelAndroid ID: A-161010552References: Upstream kernel
Problem types: description: Information disclosure
Affected products: vendor: n/a
product: Android
Published: 2022-03-16T14:04:03.000Z
CVE-2021-39793 
In kbase_jd_user_buf_pin_pages of mali_kbase_mem.c, there is a possible out of bounds write due to a logic error in the code. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android kernelAndroid ID: A-210470189References: N/A
Problem types: description: Elevation of privilege
Affected products: vendor: n/a
product: Android
Published: 2022-03-16T14:04:04.000Z
CVE-2021-39794 
In broadcastPortInfo of AdbService.java, there is a possible way for apps to run code as the shell user, if wireless debugging is enabled, due to a missing permission check. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is needed for exploitation.Product: AndroidVersions: Android-11 Android-12 Android-12LAndroid ID: A-205836329
Problem types: description: Elevation of privilege
Affected products: vendor: n/a
product: Android
Published: 2022-04-12T16:11:39.000Z
CVE-2021-39796 
In HarmfulAppWarningActivity of HarmfulAppWarningActivity.java, there is a possible way to trick victim to install harmful app due to a tapjacking/overlay attack. This could lead to local escalation of privilege with User execution privileges needed. User interaction is needed for exploitation.Product: AndroidVersions: Android-10 Android-11 Android-12 Android-12LAndroid ID: A-205595291
Problem types: description: Elevation of privilege
Affected products: vendor: n/a
product: Android
Published: 2022-04-12T16:11:41.000Z
CVE-2021-39797 
In several functions of of LauncherApps.java, there is a possible escalation of privilege due to a logic error in the code. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-12 Android-12LAndroid ID: A-209607104
Problem types: description: Elevation of privilege
Affected products: vendor: n/a
product: Android
Published: 2022-04-12T16:11:41.000Z
CVE-2021-39798 
In Bitmap_createFromParcel of Bitmap.cpp, there is a possible arbitrary code execution due to a missing bounds check. This could lead to local escalation of privilege with User execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-12 Android-12LAndroid ID: A-213169612
Problem types: description: Elevation of privilege
Affected products: vendor: n/a
product: Android
Published: 2022-04-12T16:11:42.000Z
CVE-2021-39799 
In AttributionSource of AttributionSource.java, there is a possible permission bypass due to improper input validation. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-12 Android-12LAndroid ID: A-200288596
Problem types: description: Elevation of privilege
Affected products: vendor: n/a
product: Android
Published: 2022-04-12T16:11:43.000Z
CVE-2021-39800 
In ion_ioctl of ion-ioctl.c, there is a possible way to leak kernel head data due to a use after free. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android kernelAndroid ID: A-208277166References: Upstream kernel
Problem types: description: Information disclosure
Affected products: vendor: n/a
product: Android
Published: 2022-04-12T16:11:44.000Z
CVE-2021-39801 
In ion_ioctl of ion-ioctl.c, there is a possible use after free due to improper locking. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android kernelAndroid ID: A-209791720References: Upstream kernel
Problem types: description: Elevation of privilege
Affected products: vendor: n/a
product: Android
Published: 2022-04-12T16:11:44.000Z
CVE-2021-39802 
In change_pte_range of mprotect.c , there is a possible way to make a shared mmap writable due to a permissions bypass. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android kernelAndroid ID: A-213339151References: Upstream kernel
Problem types: description: Elevation of privilege
Affected products: vendor: n/a
product: Android
Published: 2022-04-12T16:11:45.000Z
CVE-2021-39803 
In ~Impl of C2AllocatorIon.cpp, there is a possible out of bounds read due to a use after free. This could lead to remote information disclosure with no additional execution privileges needed. User interaction is needed for exploitation.Product: AndroidVersions: Android-10 Android-11 Android-12 Android-12LAndroid ID: A-193790350
Problem types: description: Information disclosure
Affected products: vendor: n/a
product: Android
Published: 2022-04-12T16:11:46.000Z
CVE-2021-39804 
In reinit of HeifDecoderImpl.cpp, there is a possible crash due to a missing null check. This could lead to remote persistent denial of service in the file picker with no additional execution privileges needed. User interaction is needed for exploitation.Product: AndroidVersions: Android-11 Android-12 Android-12LAndroid ID: A-215002587
Problem types: description: Denial of service
Affected products: vendor: n/a
product: Android
Published: 2022-04-12T16:11:47.000Z
CVE-2021-39805 
In l2cble_process_sig_cmd of l2c_ble.cc, there is a possible out of bounds read due to a missing bounds check. This could lead to remote information disclosure through Bluetooth with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-12 Android-12LAndroid ID: A-212694559
Problem types: description: Information disclosure
Affected products: vendor: n/a
product: Android
Published: 2022-04-12T16:11:47.000Z
CVE-2021-39806 
In closef of label_backends_android.c, there is a possible way to corrupt memory due to a double free. This could lead to local escalation of privilege during startup of servicemanager, if an attacker can trigger an initialization failure, with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-12LAndroid ID: A-215387420
Problem types: description: Elevation of privilege
Affected products: vendor: n/a
product: Android
Published: 2022-06-15T13:17:42.000Z
CVE-2021-39807 
In handleNfcStateChanged of SecureNfcEnabler.java, there is a possible way to enable NFC from the Guest account due to a missing permission check. This could lead to local escalation of privilege from the Guest account with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-10 Android-11 Android-12 Android-12LAndroid ID: A-209446496
Problem types: description: Elevation of privilege
Affected products: vendor: n/a
product: Android
Published: 2022-04-12T16:11:48.000Z
CVE-2021-39808 
In createNotificationChannelGroup of PreferencesHelper.java, there is a possible way for a service to run in foreground without user notification due to improper input validation. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-10 Android-11 Android-12Android ID: A-209966086
Problem types: description: Elevation of privilege
Affected products: vendor: n/a
product: Android
Published: 2022-04-12T16:11:49.000Z
CVE-2021-39809 
In avrc_ctrl_pars_vendor_rsp of avrc_pars_ct.cc, there is a possible out of bounds read due to a missing bounds check. This could lead to remote information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-10 Android-11 Android-12 Android-12LAndroid ID: A-205837191
Problem types: description: Information disclosure
Affected products: vendor: n/a
product: Android
Published: 2022-04-12T16:11:50.000Z
CVE-2021-39810 
In verifyDefaults of CardEmulationManager.java, there is a possible way to set a third party app as the default contactless payment app without user consent due to a missing permission check. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.
Problem types: description: Elevation of privilege
Affected products: vendor: Google
product: Android
default_status: unaffected
Published: 2023-10-30T16:18:53.654Z
CVE-2021-39812 
In TBD of TBD, there is a possible out of bounds read due to a use after free. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android kernelAndroid ID: A-205522359References: N/A
Problem types: description: Elevation of privilege
Affected products: vendor: n/a
product: Android
Published: 2022-04-12T16:11:54.000Z
CVE-2021-39814 
In ppmp_validate_wsm of drm_fw.c, there is a possible out of bounds write due to an incorrect bounds check. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android kernelAndroid ID: A-216792660References: N/A
Problem types: description: Elevation of privilege
Affected products: vendor: n/a
product: Android
Published: 2022-04-12T16:11:55.000Z
CVE-2021-39815 
The PowerVR GPU driver allows unprivileged apps to allocated pinned memory, unpin it (which makes it available to be freed), and continue using the page in GPU calls. No privileges required and this results in kernel memory corruption.Product: AndroidVersions: Android SoCAndroid ID: A-232440670
Problem types: description: Elevation of privilege
Affected products: vendor: n/a
product: Android
Published: 2022-08-24T13:42:56.000Z
CVE-2021-39816 Adobe Bridge Memory Corruption Vulnerability Could Lead to Arbitrary Code Execution
Adobe Bridge version 11.1 (and earlier) is affected by a memory corruption vulnerability due to insecure handling of a malicious Bridge file, potentially resulting in arbitrary code execution in the context of the current user. User interaction is required to exploit this vulnerability.
Problem types: cwe_id: CWE-788
description: Access of Memory Location After End of Buffer (CWE-788)
Affected products: vendor: Adobe
product: Bridge
CVSS v3.1: attackComplexity: LOW
attackVector: LOCAL
availabilityImpact: HIGH
baseScore: 7.8
baseSeverity: HIGH
confidentialityImpact: HIGH
integrityImpact: HIGH
privilegesRequired: NONE
scope: UNCHANGED
userInteraction: REQUIRED
vectorString: CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
version: 3.1
Published: 2021-09-01T14:35:21.319Z