Vulnerabilities > Google > Android
| DATE | CVE | VULNERABILITY TITLE | RISK |
|---|---|---|---|
| 2024-09-11 | CVE-2024-31336 | Unspecified vulnerability in Google Android In PVRSRVBridgeRGXKickTA3D2 of server_rgxta3d_bridge.c, there is a possible arbitrary code execution due to improper input validation. | 7.8 |
| 2024-09-11 | CVE-2024-40650 | Missing Authorization vulnerability in Google Android In wifi_item_edit_content of styles.xml , there is a possible FRP bypass due to Missing check for FRP state. | 7.8 |
| 2024-09-11 | CVE-2024-40652 | Missing Authorization vulnerability in Google Android In onCreate of SettingsHomepageActivity.java, there is a possible way to access the Settings app while the device is provisioning due to a missing permission check. | 7.8 |
| 2024-09-11 | CVE-2024-40654 | Incorrect Default Permissions vulnerability in Google Android In multiple locations, there is a possible permission bypass due to a confused deputy. | 7.8 |
| 2024-09-11 | CVE-2024-40655 | Unspecified vulnerability in Google Android In bindAndGetCallIdentification of CallScreeningServiceHelper.java, there is a possible way to maintain a while-in-use permission in the background due to a permissions bypass. | 7.8 |
| 2024-09-11 | CVE-2024-40656 | Unspecified vulnerability in Google Android In handleCreateConferenceComplete of ConnectionServiceWrapper.java, there is a possible way to reveal images across users due to a confused deputy. | 5.5 |
| 2024-09-11 | CVE-2024-40657 | Unspecified vulnerability in Google Android In addPreferencesForType of AccountTypePreferenceLoader.java, there is a possible way to disable apps for other users due to a confused deputy. | 7.8 |
| 2024-09-11 | CVE-2024-40658 | Out-of-bounds Write vulnerability in Google Android In getConfig of SoftVideoDecoderOMXComponent.cpp, there is a possible out of bounds write due to a heap buffer overflow. | 7.8 |
| 2024-09-11 | CVE-2024-40659 | Unspecified vulnerability in Google Android 14.0 In getRegistration of RemoteProvisioningService.java, there is a possible way to permanently disable the AndroidKeyStore key generation feature by updating the attestation keys of all installed apps due to improper input validation. | 5.5 |
| 2024-09-11 | CVE-2024-40662 | Unspecified vulnerability in Google Android In scheme of Uri.java, there is a possible way to craft a malformed Uri object due to improper input validation. | 7.8 |