Vulnerabilities > Google > Android

DATE CVE VULNERABILITY TITLE RISK
2023-03-24 CVE-2023-20956 Out-of-bounds Write vulnerability in Google Android 12.0/12.1/13.0
In Import of C2SurfaceSyncObj.cpp, there is a possible out of bounds write due to a missing bounds check.
local
low complexity
google CWE-787
4.4
2023-03-24 CVE-2023-20957 Unspecified vulnerability in Google Android 11.0/12.0/12.1
In onAttach of SettingsPreferenceFragment.java, there is a possible bypass of Factory Reset Protections due to a confused deputy.
local
low complexity
google
7.8
2023-03-24 CVE-2023-20958 Out-of-bounds Read vulnerability in Google Android 13.0
In read_paint of ttcolr.c, there is a possible out of bounds read due to a heap buffer overflow.
local
low complexity
google CWE-125
7.1
2023-03-24 CVE-2023-20959 Missing Authorization vulnerability in Google Android 13.0
In AddSupervisedUserActivity, guest users are not prevented from starting the activity due to missing permissions checks.
local
low complexity
google CWE-862
7.8
2023-03-24 CVE-2023-20960 Improper Input Validation vulnerability in Google Android 12.1/13.0
In launchDeepLinkIntentToRight of SettingsHomepageActivity.java, there is a possible way to launch arbitrary activities due to improper input validation.
network
low complexity
google CWE-20
8.8
2023-03-24 CVE-2023-20962 Unspecified vulnerability in Google Android 13.0
In getSliceEndItem of MediaVolumePreferenceController.java, there is a possible way to start foreground activity from the background due to an unsafe PendingIntent.
local
low complexity
google
5.5
2023-03-24 CVE-2023-20963 Improper Certificate Validation vulnerability in Google Android
In WorkSource, there is a possible parcel mismatch.
local
low complexity
google CWE-295
7.8
2023-03-24 CVE-2023-20964 Unspecified vulnerability in Google Android 12.0/12.1/13.0
In multiple functions of MediaSessionRecord.java, there is a possible Intent rebroadcast due to a confused deputy.
local
low complexity
google
7.8
2023-03-24 CVE-2023-20966 Out-of-bounds Write vulnerability in Google Android
In inflate of inflate.c, there is a possible out of bounds write due to a heap buffer overflow.
local
low complexity
google CWE-787
7.8
2023-03-24 CVE-2023-20968 Out-of-bounds Read vulnerability in Google Android 13.0
In multiple functions of p2p_iface.cpp, there is a possible out of bounds read due to a missing bounds check.
local
low complexity
google CWE-125
4.4