Vulnerabilities > Google > Android

DATE CVE VULNERABILITY TITLE RISK
2023-08-14 CVE-2023-21235 Unspecified vulnerability in Google Android 11.0/13.0
In onCreate of LockSettingsActivity.java, there is a possible way set a new lockscreen PIN without entering the existing PIN due to a permissions bypass.
local
low complexity
google
7.8
2023-08-14 CVE-2023-21271 Out-of-bounds Read vulnerability in Google Android 12.0/12.1/13.0
In parseInputs of ShimPreparedModel.cpp, there is a possible out of bounds read due to improper input validation.
local
low complexity
google CWE-125
5.5
2023-08-14 CVE-2023-21272 Improper Input Validation vulnerability in Google Android 11.0/12.0/12.1
In readFrom of Uri.java, there is a possible bad URI permission grant due to improper input validation.
local
low complexity
google CWE-20
7.8
2023-08-14 CVE-2023-21273 Out-of-bounds Write vulnerability in Google Android
In SDP_AddAttribute of sdp_db.cc, there is a possible out of bounds write due to an incorrect bounds check.
low complexity
google CWE-787
8.8
2023-08-14 CVE-2023-21274 Out-of-bounds Read vulnerability in Google Android 12.0/12.1/13.0
In convertSubgraphFromHAL of ShimConverter.cpp, there is a possible out of bounds read due to a missing bounds check.
local
low complexity
google CWE-125
5.5
2023-08-14 CVE-2023-21275 Unspecified vulnerability in Google Android 12.0/12.1/13.0
In decideCancelProvisioningDialog of AdminIntegratedFlowPrepareActivity.java, there is a possible way to bypass factory reset protections due to a logic error in the code.
local
low complexity
google
7.8
2023-08-14 CVE-2023-21276 Use of Uninitialized Resource vulnerability in Google Android 12.0/12.1/13.0
In writeToParcel of CursorWindow.cpp, there is a possible information disclosure due to uninitialized data.
local
low complexity
google CWE-908
5.5
2023-08-14 CVE-2023-21277 Unspecified vulnerability in Google Android 12.0/12.1/13.0
In visitUris of RemoteViews.java, there is a possible way to reveal images across users due to a missing permission check.
local
low complexity
google
5.5
2023-08-14 CVE-2023-21278 Unspecified vulnerability in Google Android 12.0/12.1/13.0
In multiple locations, there is a possible way to obscure the microphone privacy indicator due to a logic error in the code.
local
low complexity
google
3.3
2023-08-14 CVE-2023-21279 Unspecified vulnerability in Google Android 12.0/12.1/13.0
In visitUris of RemoteViews.java, there is a possible cross-user media read due to a confused deputy.
local
low complexity
google
5.5