Vulnerabilities > Google > Android > 12.1

DATE CVE VULNERABILITY TITLE RISK
2023-10-27 CVE-2023-40131 Use After Free vulnerability in Google Android
In GpuService of GpuService.cpp, there is a possible use after free due to a race condition.
local
high complexity
google CWE-416
7.0
2023-10-27 CVE-2023-40133 Unspecified vulnerability in Google Android
In multiple locations of DialogFillUi.java, there is a possible way to view another user's images due to a confused deputy.
local
low complexity
google
5.5
2023-10-27 CVE-2023-40134 Unspecified vulnerability in Google Android 12.0/12.1/13.0
In isFullScreen of FillUi.java, there is a possible way to view another user's images due to a confused deputy.
local
low complexity
google
3.3
2023-10-27 CVE-2023-40135 Unspecified vulnerability in Google Android
In applyCustomDescription of SaveUi.java, there is a possible way to view another user's images due to a confused deputy.
local
low complexity
google
3.3
2023-10-27 CVE-2023-40136 Unspecified vulnerability in Google Android
In setHeader of DialogFillUi.java, there is a possible way to view another user's images due to a confused deputy.
local
low complexity
google
3.3
2023-10-27 CVE-2023-40137 Unspecified vulnerability in Google Android
In multiple functions of DialogFillUi.java, there is a possible way to view another user's images due to a confused deputy.
local
low complexity
google
3.3
2023-10-27 CVE-2023-40138 Unspecified vulnerability in Google Android
In FillUi of FillUi.java, there is a possible way to view another user's images due to a confused deputy.
local
low complexity
google
3.3
2023-10-27 CVE-2023-40139 Externally Controlled Reference to a Resource in Another Sphere vulnerability in Google Android
In FillUi of FillUi.java, there is a possible way to view another user's images due to a confused deputy.
local
low complexity
google CWE-610
5.5
2023-10-27 CVE-2023-40140 Use After Free vulnerability in Google Android
In android_view_InputDevice_create of android_view_InputDevice.cpp, there is a possible way to execute arbitrary code due to a use after free.
local
low complexity
google CWE-416
7.8
2023-10-06 CVE-2023-21244 Missing Authorization vulnerability in Google Android
In visitUris of Notification.java, there is a possible bypass of user profile boundaries due to a missing permission check.
local
low complexity
google CWE-862
6.7