Vulnerabilities > Google > Android

DATE CVE VULNERABILITY TITLE RISK
2023-09-11 CVE-2023-35680 Unspecified vulnerability in Google Android
In multiple locations, there is a possible way to import contacts belonging to other users due to a confused deputy.
local
low complexity
google
5.5
2023-09-11 CVE-2023-35681 Integer Overflow or Wraparound vulnerability in Google Android 13.0
In eatt_l2cap_reconfig_completed of eatt_impl.h, there is a possible out of bounds write due to an integer overflow.
network
low complexity
google CWE-190
critical
9.8
2023-09-11 CVE-2023-35682 Unspecified vulnerability in Google Android
In hasPermissionForActivity of PackageManagerHelper.java, there is a possible way to start arbitrary components due to a confused deputy.
local
low complexity
google
7.8
2023-09-11 CVE-2023-35683 SQL Injection vulnerability in Google Android
In bindSelection of DatabaseUtils.java, there is a possible way to access files from other applications due to SQL injection.
local
low complexity
google CWE-89
5.5
2023-09-11 CVE-2023-35684 Out-of-bounds Write vulnerability in Google Android
In avdt_msg_asmbl of avdt_msg.cc, there is a possible out of bounds write due to an integer overflow.
low complexity
google CWE-787
8.8
2023-09-11 CVE-2023-35687 Use After Free vulnerability in Google Android
In MtpPropertyValue of MtpProperty.h, there is a possible memory corruption due to a use after free.
local
low complexity
google CWE-416
7.8
2023-09-04 CVE-2023-20821 Out-of-bounds Write vulnerability in multiple products
In nvram, there is a possible out of bounds write due to a missing bounds check.
6.7
2023-09-04 CVE-2023-20822 Out-of-bounds Write vulnerability in Google Android 12.0/13.0
In netdagent, there is a possible out of bounds write due to a missing bounds check.
local
low complexity
google CWE-787
6.7
2023-09-04 CVE-2023-20823 Out-of-bounds Read vulnerability in Google Android 12.0/13.0
In cmdq, there is a possible out of bounds read due to an incorrect status check.
local
low complexity
google CWE-125
4.4
2023-09-04 CVE-2023-20824 Missing Authorization vulnerability in Google Android 12.0/13.0
In duraspeed, there is a possible information disclosure due to a missing permission check.
local
low complexity
google CWE-862
5.5