Vulnerabilities > Google > Android > 11.0

DATE CVE VULNERABILITY TITLE RISK
2022-05-03 CVE-2022-20095 Out-of-bounds Write vulnerability in Google Android 11.0/12.0
In imgsensor, there is a possible out of bounds write due to a missing bounds check.
local
low complexity
google CWE-787
4.6
2022-05-03 CVE-2022-20096 Use of Uninitialized Resource vulnerability in Google Android
In camera, there is a possible information disclosure due to uninitialized data.
local
low complexity
google CWE-908
2.1
2022-05-03 CVE-2022-20097 Race Condition vulnerability in Google Android 11.0/12.0
In aee daemon, there is a possible information disclosure due to a race condition.
local
google CWE-362
1.9
2022-05-03 CVE-2022-20098 Missing Authorization vulnerability in Google Android 11.0/12.0
In aee daemon, there is a possible information disclosure due to a missing permission check.
local
low complexity
google CWE-862
2.1
2022-05-03 CVE-2022-20099 Out-of-bounds Write vulnerability in Google Android 11.0/12.0
In aee daemon, there is a possible out of bounds write due to improper input validation.
local
low complexity
google CWE-787
4.6
2022-05-03 CVE-2022-20100 Missing Authorization vulnerability in Google Android 11.0/12.0
In aee daemon, there is a possible information disclosure due to a missing permission check.
local
low complexity
google CWE-862
2.1
2022-05-03 CVE-2022-20109 Unspecified vulnerability in Google Android
In ion, there is a possible use after free due to improper update of reference count.
local
low complexity
google
7.8
2022-05-03 CVE-2022-20110 Time-of-check Time-of-use (TOCTOU) Race Condition vulnerability in Google Android
In ion, there is a possible use after free due to a race condition.
local
high complexity
google CWE-367
7.0
2022-05-03 CVE-2022-28780 Unspecified vulnerability in Google Android 10.0/11.0/12.0
Improper access control vulnerability in Weather prior to SMR May-2022 Release 1 allows that attackers can access location information that set in Weather without permission.
local
low complexity
google
2.1
2022-05-03 CVE-2022-28781 Improper Input Validation vulnerability in Google Android 11.0/12.0
Improper input validation in Settings prior to SMR-May-2022 Release 1 allows attackers to launch arbitrary activity with system privilege.
local
low complexity
google CWE-20
7.2