Vulnerabilities > Google > Android

DATE CVE VULNERABILITY TITLE RISK
2023-08-14 CVE-2023-21280 Resource Exhaustion vulnerability in Google Android 12.0/12.1/13.0
In setMediaButtonBroadcastReceiver of MediaSessionRecord.java, there is a possible permanent DoS due to resource exhaustion.
local
low complexity
google CWE-400
5.5
2023-08-14 CVE-2023-21281 Unspecified vulnerability in Google Android
In multiple functions of KeyguardViewMediator.java, there is a possible failure to lock after screen timeout due to a logic error in the code.
local
low complexity
google
7.8
2023-08-14 CVE-2023-21282 Out-of-bounds Write vulnerability in Google Android
In TRANSPOSER_SETTINGS of lpp_tran.h, there is a possible out of bounds write due to an incorrect bounds check.
network
low complexity
google CWE-787
8.8
2023-08-14 CVE-2023-21283 Unspecified vulnerability in Google Android
In multiple functions of StatusHints.java, there is a possible way to reveal images across users due to a confused deputy.
local
low complexity
google
5.5
2023-08-14 CVE-2023-21284 Improper Input Validation vulnerability in Google Android
In multiple functions of DevicePolicyManager.java, there is a possible way to prevent enabling the Find my Device feature due to improper input validation.
local
low complexity
google CWE-20
5.5
2023-08-14 CVE-2023-21285 Unspecified vulnerability in Google Android
In setMetadata of MediaSessionRecord.java, there is a possible way to view another user's images due to a confused deputy.
local
low complexity
google
5.5
2023-08-14 CVE-2023-21286 Unspecified vulnerability in Google Android
In visitUris of RemoteViews.java, there is a possible way to reveal images across users due to a missing permission check.
local
low complexity
google
7.8
2023-08-14 CVE-2023-21287 Type Confusion vulnerability in Google Android
In multiple locations, there is a possible code execution due to type confusion.
network
low complexity
google CWE-843
critical
9.8
2023-08-14 CVE-2023-21288 Missing Authorization vulnerability in Google Android
In visitUris of Notification.java, there is a possible way to reveal images across users due to a missing permission check.
local
low complexity
google CWE-862
5.5
2023-08-14 CVE-2023-21289 Unspecified vulnerability in Google Android
In multiple locations, there is a possible bypass of a multi user security boundary due to a confused deputy.
local
low complexity
google
5.5