Vulnerabilities > Google > Android > 12.1
| DATE | CVE | VULNERABILITY TITLE | RISK |
|---|---|---|---|
| 2022-09-13 | CVE-2022-20392 | Improper Input Validation vulnerability in Google Android In declareDuplicatePermission of ParsedPermissionUtils.java, there is a possible way to obtain a dangerous permission without user consent due to improper input validation. | 7.8 |
| 2022-09-13 | CVE-2022-20393 | Integer Underflow (Wrap or Wraparound) vulnerability in Google Android 11.0/12.0/12.1 In extract3GPPGlobalDescriptions of TextDescriptions.cpp, there is a possible out of bounds read due to an integer overflow. | 5.5 |
| 2022-09-13 | CVE-2022-20395 | Path Traversal vulnerability in Google Android In checkAccess of MediaProvider.java, there is a possible file deletion due to a path traversal error. | 7.8 |
| 2022-09-13 | CVE-2022-20396 | Insufficient Verification of Data Authenticity vulnerability in Google Android 12.1/13.0 In SettingsActivity.java, there is a possible way to make a device discoverable over Bluetooth, without permission or user interaction, due to a permissions bypass. | 5.5 |
| 2022-08-10 | CVE-2022-20344 | Race Condition vulnerability in Google Android In stealReceiveChannel of EventThread.cpp, there is a possible way to interfere with process communication due to a race condition. | 7.0 |
| 2022-08-10 | CVE-2022-20345 | Out-of-bounds Write vulnerability in Google Android 12.0/12.1 In l2cble_process_sig_cmd of l2c_ble.cc, there is a possible out of bounds write due to a missing bounds check. | 8.8 |
| 2022-08-10 | CVE-2022-20346 | Out-of-bounds Read vulnerability in Google Android In updateAudioTrackInfoFromESDS_MPEG4Audio of MPEG4Extractor.cpp, there is a possible out of bounds read due to an incorrect bounds check. | 6.5 |
| 2022-08-10 | CVE-2022-20347 | Unspecified vulnerability in Google Android In onAttach of ConnectedDeviceDashboardFragment.java, there is a possible permission bypass due to a confused deputy. low complexity google | 8.8 |
| 2022-08-10 | CVE-2022-20348 | Missing Authorization vulnerability in Google Android In updateState of LocationServicesWifiScanningPreferenceController.java, there is a possible admin restriction bypass due to a missing permission check. | 7.8 |
| 2022-08-10 | CVE-2022-20349 | Missing Authorization vulnerability in Google Android In WifiScanningPreferenceController and BluetoothScanningPreferenceController, there is a possible admin restriction bypass due to a missing permission check. | 7.8 |