Vulnerabilities > Google > Android > 12.1

DATE CVE VULNERABILITY TITLE RISK
2023-09-11 CVE-2023-35664 Out-of-bounds Read vulnerability in Google Android 12.0/12.1/13.0
In convertSubgraphFromHAL of ShimConverter.cpp, there is a possible out of bounds read due to a missing bounds check.
local
low complexity
google CWE-125
5.5
2023-09-11 CVE-2023-35665 Missing Authorization vulnerability in Google Android
In multiple files, there is a possible way to import a contact from another user due to a missing permission check.
local
low complexity
google CWE-862
7.8
2023-09-11 CVE-2023-35666 Use After Free vulnerability in Google Android
In bta_av_rc_msg of bta_av_act.cc, there is a possible use after free due to a logic error in the code.
local
low complexity
google CWE-416
7.8
2023-09-11 CVE-2023-35667 Unspecified vulnerability in Google Android
In updateList of NotificationAccessSettings.java, there is a possible way to hide approved notification listeners in the settings due to a logic error in the code.
local
low complexity
google
7.8
2023-09-11 CVE-2023-35669 Deserialization of Untrusted Data vulnerability in Google Android
In checkKeyIntentParceledCorrectly of AccountManagerService.java, there is a possible way to control other running activities due to unsafe deserialization.
local
low complexity
google CWE-502
7.8
2023-09-11 CVE-2023-35670 Path Traversal vulnerability in Google Android
In computeValuesFromData of FileUtils.java, there is a possible way to insert files to other apps' external private directories due to a path traversal error.
local
low complexity
google CWE-22
7.8
2023-09-11 CVE-2023-35671 Unspecified vulnerability in Google Android
In onHostEmulationData of HostEmulationManager.java, there is a possible way for a general purpose NFC reader to read the full card number and expiry details when the device is in locked screen mode due to a logic error in the code.
local
low complexity
google
5.5
2023-09-11 CVE-2023-35673 Integer Overflow or Wraparound vulnerability in Google Android
In build_read_multi_rsp of gatt_sr.cc, there is a possible out of bounds write due to an integer overflow.
low complexity
google CWE-190
8.8
2023-09-11 CVE-2023-35674 Unspecified vulnerability in Google Android
In onCreate of WindowState.java, there is a possible way to launch a background activity due to a logic error in the code.
local
low complexity
google
7.8
2023-09-11 CVE-2023-35675 Unspecified vulnerability in Google Android
In loadMediaResumptionControls of MediaResumeListener.kt, there is a possible way to play and listen to media files played by another user on the same device due to a logic error in the code.
local
low complexity
google
5.5