rainbutterfly/cve_corpus huggingface dataset:
CVE-2021-39658 
ismsEx service is a vendor service in unisoc equipment。ismsEx service is an extension of sms system service，but it does not check the permissions of the caller，resulting in permission leaks。Third-party apps can use this service to arbitrarily modify and set system properties。Product: AndroidVersions: Android SoCAndroid ID: A-207479207
Problem types: description: Elevation of privilege
Affected products: vendor: n/a
product: Android
Published: 2022-02-11T17:40:47.000Z
CVE-2021-39659 
In sortSimPhoneAccountsForEmergency of CreateConnectionProcessor.java, there is a possible prevention of access to emergency calling due to an unhandled exception. In rare instances, this could lead to local denial of service with User execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-10 Android-11 Android-12Android ID: A-208267659
Problem types: description: Denial of service
Affected products: vendor: n/a
product: Android
Published: 2022-01-14T19:11:11.000Z
CVE-2021-39660 
In TBD of TBD, there is a possible way to archive arbitrary code execution in kernel due to a race condition. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android SoCAndroid ID: A-254742984
Problem types: description: Elevation of privilege
Affected products: vendor: n/a
product: Android
Published: 2022-12-13T00:00:00.000Z
CVE-2021-39661 
In _PMRLogicalOffsetToPhysicalOffset of the PowerVR kernel driver, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android SoCAndroid ID: A-246824784
Problem types: description: Elevation of privilege
Affected products: vendor: n/a
product: Android
Published: 2022-11-08T00:00:00.000Z
CVE-2021-39662 
In checkUriPermission of MediaProvider.java , there is a possible way to gain access to the content of media provider collections due to a missing permission check. This could lead to local escalation of privilege with User execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-11 Android-12Android ID: A-197302116
Problem types: description: Elevation of privilege
Affected products: vendor: n/a
product: Android
Published: 2022-02-11T17:40:48.000Z
CVE-2021-39663 
In openFileAndEnforcePathPermissionsHelper of MediaProvider.java, there is a possible bypass of a permissions check due to a confused deputy. This could lead to local escalation of privilege with User execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-10Android ID: A-200682135
Problem types: description: Elevation of privilege
Affected products: vendor: n/a
product: Android
Published: 2022-02-11T17:40:49.000Z
CVE-2021-39664 
In LoadedPackage::Load of LoadedArsc.cpp, there is a possible out of bounds read due to a missing bounds check. This could lead to local information disclosure when parsing an APK file with no additional execution privileges needed. User interaction is needed for exploitation.Product: AndroidVersions: Android-12Android ID: A-203938029
Problem types: description: Information disclosure
Affected products: vendor: n/a
product: Android
Published: 2022-02-11T17:40:49.000Z
CVE-2021-39665 
In checkSpsUpdated of AAVCAssembler.cpp, there is a possible out of bounds read due to a heap buffer overflow. This could lead to remote information disclosure with no additional execution privileges needed. User interaction is needed for exploitation.Product: AndroidVersions: Android-12Android ID: A-204077881
Problem types: description: Information disclosure
Affected products: vendor: n/a
product: Android
Published: 2022-02-11T17:40:50.000Z
CVE-2021-39666 
In extract of MediaMetricsItem.h, there is a possible out of bounds read due to improper input validation. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-11 Android-12Android ID: A-204445255
Problem types: description: Information disclosure
Affected products: vendor: n/a
product: Android
Published: 2022-02-11T17:40:51.000Z
CVE-2021-39667 
In ih264d_parse_decode_slice of ih264d_parse_slice.c, there is a possible out of bounds write due to a heap buffer overflow. This could lead to remote information disclosure with no additional execution privileges needed. User interaction is needed for exploitation.Product: AndroidVersions: Android-10 Android-11 Android-12Android ID: A-205702093
Problem types: description: Information disclosure
Affected products: vendor: n/a
product: Android
Published: 2022-03-16T14:04:06.000Z
CVE-2021-39668 
In onActivityViewReady of DetailDialog.kt, there is a possible Intent Redirect due to a confused deputy. This could lead to local escalation of privilege that allows actions performed as the System UI, with no additional execution privileges needed. User interaction is needed for exploitation.Product: AndroidVersions: Android-11 Android-12Android ID: A-193445603
Problem types: description: Elevation of privilege
Affected products: vendor: n/a
product: Android
Published: 2022-02-11T17:40:52.000Z
CVE-2021-39669 
In onCreate of InstallCaCertificateWarning.java, there is a possible way to mislead an user about CA installation circumstances due to a tapjacking/overlay attack. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is needed for exploitation.Product: AndroidVersions: Android-11 Android-12Android ID: A-196969991
Problem types: description: Elevation of privilege
Affected products: vendor: n/a
product: Android
Published: 2022-02-11T17:40:53.000Z
CVE-2021-39670 
In setStream of WallpaperManager.java, there is a possible way to cause a permanent DoS due to improper input validation. This could lead to local denial of service with User execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-12 Android-12LAndroid ID: A-204087139
Problem types: description: Denial of service
Affected products: vendor: n/a
product: Android
Published: 2022-05-10T19:54:37.000Z
CVE-2021-39671 
In code generated by aidl_const_expressions.cpp, there is a possible out of bounds read due to uninitialized data. This could lead to information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-12Android ID: A-206718630
Problem types: description: Elevation of privilege
Affected products: vendor: n/a
product: Android
Published: 2022-02-11T17:40:53.000Z
CVE-2021-39672 
In fastboot, there is a possible secure boot bypass due to a configuration error. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation. Product: Android Versions: Android SoC Android ID: A-202018701
Problem types: description: Elevation of privilege
Affected products: vendor: n/a
product: Android
Published: 2022-02-11T17:40:56.000Z
CVE-2021-39674 
In btm_sec_connected and btm_sec_disconnected of btm_sec.cc file , there is a possible use after free. This could lead to local escalation of privilege with User execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-10 Android-11 Android-12Android ID: A-201083442
Problem types: description: Elevation of privilege
Affected products: vendor: n/a
product: Android
Published: 2022-02-11T17:40:54.000Z
CVE-2021-39675 
In GKI_getbuf of gki_buffer.cc, there is a possible out of bounds write due to a heap buffer overflow. This could lead to remote escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-12Android ID: A-205729183
Problem types: description: Elevation of privilege
Affected products: vendor: n/a
product: Android
Published: 2022-02-11T17:40:55.000Z
CVE-2021-39676 
In writeThrowable of AndroidFuture.java, there is a possible parcel serialization/deserialization mismatch due to improper input validation. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-11Android ID: A-197228210
Problem types: description: Elevation of privilege
Affected products: vendor: n/a
product: Android
Published: 2022-02-11T17:40:56.000Z
CVE-2021-39677 
In startVideoStream() there is a possibility of an OOB Read in the heap, when the camera buffer is ‘zero’ in size.Product: AndroidVersions: Android-11Android ID: A-205097028
Problem types: description: Information disclosure
Affected products: vendor: n/a
product: Android
Published: 2022-02-11T17:40:59.000Z
CVE-2021-39678 
In <TBD> of <TBD>, there is a possible bypass of Factory Reset Protection due to <TBD>. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android kernelAndroid ID: A-171742549References: N/A
Problem types: description: Elevation of privilege
Affected products: vendor: n/a
product: Android
Published: 2022-01-14T19:11:12.000Z
CVE-2021-39679 
In init of vendor_graphicbuffer_meta.cpp, there is a possible use after free due to a race condition. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android kernelAndroid ID: A-188745089References: N/A
Problem types: description: Elevation of privilege
Affected products: vendor: n/a
product: Android
Published: 2022-01-14T19:11:13.000Z
CVE-2021-39680 
In sec_SHA256_Transform of sha256_core.c, there is a possible way to read heap data due to uninitialized data. This could lead to local information disclosure with System execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android kernelAndroid ID: A-197965864References: N/A
Problem types: description: Information disclosure
Affected products: vendor: n/a
product: Android
Published: 2022-01-14T19:11:14.000Z
CVE-2021-39681 
In delete_protocol of main.c, there is a possible arbitrary code execution due to a use after free. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android kernelAndroid ID: A-200251074References: N/A
Problem types: description: Elevation of privilege
Affected products: vendor: n/a
product: Android
Published: 2022-01-14T19:11:16.000Z
CVE-2021-39682 
In mgm_alloc_page of memory_group_manager.c, there is a possible out of bounds write due to an incorrect bounds check. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android kernelAndroid ID: A-201677538References: N/A
Problem types: description: Elevation of privilege
Affected products: vendor: n/a
product: Android
Published: 2022-01-14T19:11:17.000Z
CVE-2021-39683 
In copy_from_mbox of sss_ice_util.c, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android kernelAndroid ID: A-202003354References: N/A
Problem types: description: Elevation of privilege
Affected products: vendor: n/a
product: Android
Published: 2022-01-14T19:11:19.000Z
CVE-2021-39684 
In target_init of gs101/abl/target/slider/target.c, there is a possible allocation of RWX memory due to a logic error in the code. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android kernelAndroid ID: A-203250788References: N/A
Problem types: description: Elevation of privilege
Affected products: vendor: n/a
product: Android
Published: 2022-01-14T19:11:20.000Z
CVE-2021-39685 
In various setup methods of the USB gadget subsystem, there is a possible out of bounds write due to an incorrect flag check. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android kernelAndroid ID: A-210292376References: Upstream kernel
Problem types: description: Elevation of privilege
Affected products: vendor: n/a
product: Android
Published: 2022-03-16T14:04:07.000Z
CVE-2021-39686 
In several functions of binder.c, there is a possible way to represent the wrong domain to SELinux due to a race condition. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android kernelAndroid ID: A-200688826References: Upstream kernel
Problem types: description: Elevation of privilege
Affected products: vendor: n/a
product: Android
Published: 2022-03-16T14:04:08.000Z
CVE-2021-39687 
In HandleTransactionIoEvent of actuator_driver.cc, there is a possible out of bounds read due to a heap buffer overflow. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android kernelAndroid ID: A-204421047References: N/A
Problem types: description: Information disclosure
Affected products: vendor: n/a
product: Android
Published: 2022-02-11T17:40:59.000Z
CVE-2021-39688 
In TBD of TBD, there is a possible out of bounds read due to TBD. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android kernelAndroid ID: A-206039140References: N/A
Problem types: description: Information disclosure
Affected products: vendor: n/a
product: Android
Published: 2022-02-11T17:41:00.000Z
CVE-2021-39689 
In multiple functions of odsign_main.cpp, there is a possible way to persist system attack due to a logic error in the code. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-12Android ID: A-206090748
Problem types: description: Elevation of privilege
Affected products: vendor: n/a
product: Android
Published: 2022-03-16T14:04:09.000Z
CVE-2021-39690 
In setDisplayPadding of WallpaperManagerService.java, there is a possible way to cause a persistent DoS due to improper input validation. This could lead to local denial of service with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-12Android ID: A-204316511
Problem types: description: Denial of service
Affected products: vendor: n/a
product: Android
Published: 2022-03-16T14:04:09.000Z
CVE-2021-39691 
In WindowManager, there is a possible tapjacking attack due to an incorrect window flag when processing user input. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is needed for exploitation.Product: AndroidVersions: Android-10 Android-11 Android-12Android ID: A-157929241
Problem types: description: Elevation of privilege
Affected products: vendor: n/a
product: Android
Published: 2022-06-15T12:57:57.000Z
CVE-2021-39692 
In onCreate of SetupLayoutActivity.java, there is a possible way to setup a work profile bypassing user consent due to a tapjacking/overlay attack. This could lead to local escalation of privilege with User execution privileges needed. User interaction is needed for exploitation.Product: AndroidVersions: Android-10 Android-11 Android-12Android ID: A-209611539
Problem types: description: Elevation of privilege
Affected products: vendor: n/a
product: Android
Published: 2022-03-16T14:04:10.000Z
CVE-2021-39693 
In onUidStateChanged of AppOpsService.java, there is a possible way to access location without a visible indicator due to a logic error in the code. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-12Android ID: A-208662370
Problem types: description: Elevation of privilege
Affected products: vendor: n/a
product: Android
Published: 2022-03-16T14:04:11.000Z
CVE-2021-39694 
In parse of RoleParser.java, there is a possible way for default apps to get permissions explicitly denied by the user due to a permissions bypass. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-12Android ID: A-202312327
Problem types: description: Elevation of privilege
Affected products: vendor: n/a
product: Android
Published: 2022-03-16T14:04:12.000Z
CVE-2021-39695 
In createOrUpdate of BasePermission.java, there is a possible permission bypass due to a logic error in the code. This could lead to local escalation of privilege with User execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-11Android ID: A-209607944
Problem types: description: Elevation of privilege
Affected products: vendor: n/a
product: Android
Published: 2022-03-16T14:04:12.000Z
CVE-2021-39696 
In Task.java, there is a possible escalation of privilege due to a confused deputy. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is needed for exploitation.Product: AndroidVersions: Android-10 Android-11 Android-12Android ID: A-185810717
Problem types: description: Elevation of privilege
Affected products: vendor: n/a
product: Android
Published: 2022-08-09T20:20:24.000Z
CVE-2021-39697 
In checkFileUriDestination of DownloadProvider.java, there is a possible way to bypass external storage private directories protection due to a missing permission check. This could lead to local escalation of privilege with User execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-11 Android-12Android ID: A-200813547
Problem types: description: Elevation of privilege
Affected products: vendor: n/a
product: Android
Published: 2022-03-16T14:04:13.000Z
CVE-2021-39698 
In aio_poll_complete_work of aio.c, there is a possible memory corruption due to a use after free. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android kernelAndroid ID: A-185125206References: Upstream kernel
Problem types: description: Elevation of privilege
Affected products: vendor: n/a
product: Android
Published: 2022-03-16T14:04:14.000Z
CVE-2021-39700 
In the policies of adbd.te, there was a logic error which caused the CTS Listening Ports Test to report invalid results. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-10 Android-11 Android-12Android ID: A-201645790
Problem types: description: Information disclosure
Affected products: vendor: n/a
product: Android
Published: 2022-05-10T19:54:59.000Z
CVE-2021-39701 
In serviceConnection of ControlsProviderLifecycleManager.kt, there is a possible way to keep service running in foreground without notification or permission due to improper input validation. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is needed for exploitation.Product: AndroidVersions: Android-11 Android-12Android ID: A-212286849
Problem types: description: Elevation of privilege
Affected products: vendor: n/a
product: Android
Published: 2022-03-16T14:04:15.000Z
CVE-2021-39702 
In onCreate of RequestManageCredentials.java, there is a possible way for a third party app to install certificates without user approval due to a tapjacking/overlay attack. This could lead to local escalation of privilege with User execution privileges needed. User interaction is needed for exploitation.Product: AndroidVersions: Android-12Android ID: A-205150380
Problem types: description: Elevation of privilege
Affected products: vendor: n/a
product: Android
Published: 2022-03-16T14:04:15.000Z
CVE-2021-39703 
In updateState of UsbDeviceManager.java, there is a possible unauthorized access of files due to a confused deputy. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-12Android ID: A-207057578
Problem types: description: Elevation of privilege
Affected products: vendor: n/a
product: Android
Published: 2022-03-16T14:04:16.000Z
CVE-2021-39704 
In deleteNotificationChannelGroup of NotificationManagerService.java, there is a possible way to run foreground service without user notification due to a permissions bypass. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-10 Android-11 Android-12Android ID: A-209965481
Problem types: description: Elevation of privilege
Affected products: vendor: n/a
product: Android
Published: 2022-03-16T14:04:17.000Z
CVE-2021-39706 
In onResume of CredentialStorage.java, there is a possible way to cleanup content of credentials storage due to a missing permission check. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is needed for exploitation.Product: AndroidVersions: Android-10 Android-11 Android-12Android ID: A-200164168
Problem types: description: Elevation of privilege
Affected products: vendor: n/a
product: Android
Published: 2022-03-16T14:04:19.000Z
CVE-2021-39707 
In onReceive of AppRestrictionsFragment.java, there is a possible way to start a phone call without permissions due to a confused deputy. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-10 Android-11 Android-12Android ID: A-200688991
Problem types: description: Elevation of privilege
Affected products: vendor: n/a
product: Android
Published: 2022-03-16T14:04:20.000Z
CVE-2021-39708 
In gatt_process_notification of gatt_cl.cc, there is a possible out of bounds write due to an incorrect bounds check. This could lead to remote escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-12Android ID: A-206128341
Problem types: description: Elevation of privilege
Affected products: vendor: n/a
product: Android
Published: 2022-03-16T14:04:20.000Z
CVE-2021-39709 
In sendSipAccountsRemovedNotification of SipAccountRegistry.java, there is a possible permission bypass due to an unsafe PendingIntent. This could lead to local escalation of privilege with User execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-12Android ID: A-208817618
Problem types: description: Elevation of privilege
Affected products: vendor: n/a
product: Android
Published: 2022-03-16T14:04:21.000Z
CVE-2021-39710 
Product: AndroidVersions: Android kernelAndroid ID: A-202160245References: N/A
Problem types: description: Elevation of privilege
Affected products: vendor: n/a
product: Android
Published: 2022-03-16T14:03:41.000Z