Vulnerabilities > Google > Android > 12.0

DATE CVE VULNERABILITY TITLE RISK
2021-12-15 CVE-2021-0989 Information Exposure Through Discrepancy vulnerability in Google Android 12.0
In hasManageOngoingCallsPermission of TelecomServiceImpl.java, there is a possible way to determine whether an app is installed, without query permissions, due to side channel information disclosure.
local
low complexity
google CWE-203
2.1
2021-12-15 CVE-2021-0990 Information Exposure Through Discrepancy vulnerability in Google Android 12.0
In getDeviceId of PhoneSubInfoController.java, there is a possible way to determine whether an app is installed, without query permissions, due to side channel information disclosure.
local
low complexity
google CWE-203
2.1
2021-12-15 CVE-2021-0991 Information Exposure Through Log Files vulnerability in Google Android 12.0
In OnMetadataChangedListener of AdvancedBluetoothDetailsHeaderController.java, there is a possible leak of Bluetooth MAC addresses due to log information disclosure.
low complexity
google CWE-532
2.7
2021-12-15 CVE-2021-0992 Improper Restriction of Rendered UI Layers or Frames vulnerability in Google Android 12.0
In onCreate of PaymentDefaultDialog.java, there is a possible way to change a default payment app without user consent due to tapjack overlay.
1.9
2021-12-15 CVE-2021-0993 Unspecified vulnerability in Google Android 12.0
In getOffsetBeforeAfter of TextLine.java, there is a possible denial of service due to resource exhaustion.
network
google
4.3
2021-12-15 CVE-2021-0994 Missing Authorization vulnerability in Google Android 12.0
In requestRouteToHostAddress of ConnectivityService.java, there is a possible way to determine whether an app is installed, without query permissions, due to a missing permission check.
local
low complexity
google CWE-862
2.1
2021-12-15 CVE-2021-0995 Information Exposure Through Discrepancy vulnerability in Google Android 12.0
In registerSuggestionConnectionStatusListener of WifiServiceImpl.java, there is a possible way to determine whether an app is installed, without query permissions, due to side channel information disclosure.
local
low complexity
google CWE-203
2.1
2021-12-15 CVE-2021-0996 Out-of-bounds Read vulnerability in Google Android 12.0
In nfaHciCallback of HciEventManager.cpp, there is a possible out of bounds read due to a missing bounds check.
low complexity
google CWE-125
2.7
2021-12-15 CVE-2021-0997 Information Exposure Through Log Files vulnerability in Google Android 12.0
In handleUpdateNetworkState of GnssNetworkConnectivityHandler.java , there is a possible APN disclosure due to log information disclosure.
local
low complexity
google CWE-532
2.1
2021-12-15 CVE-2021-0998 Out-of-bounds Read vulnerability in Google Android 12.0
In 'ih264e_find_bskip_params()' of ih264e_me.c, there is a possible out of bounds read due to a heap buffer overflow.
local
low complexity
google CWE-125
2.1