Vulnerabilities > Google > Android

DATE CVE VULNERABILITY TITLE RISK
2023-07-13 CVE-2023-21260 Origin Validation Error vulnerability in Google Android
In notification access permission dialog box, malicious application can embedded a very long service label that overflow the original user prompt and possibly contains mis-leading information to be appeared as a system message for user confirmation.
local
low complexity
google CWE-346
5.5
2023-07-13 CVE-2021-0948 Use of Uninitialized Resource vulnerability in Google Android
The PVRSRVBridgeGetMultiCoreInfo ioctl in the PowerVR kernel driver can return uninitialized kernel memory to user space.
local
low complexity
google CWE-908
5.5
2023-07-13 CVE-2023-20918 Unspecified vulnerability in Google Android
In getPendingIntentLaunchFlags of ActivityOptions.java, there is a possible elevation of privilege due to a confused deputy with no additional execution privileges needed.
network
low complexity
google
critical
9.8
2023-07-13 CVE-2023-20942 Unspecified vulnerability in Google Android 12.0/12.1/13.0
In openMmapStream of AudioFlinger.cpp, there is a possible way to record audio without displaying the microphone privacy indicator due to a logic error in the code.
local
low complexity
google
5.5
2023-07-13 CVE-2023-21145 Unspecified vulnerability in Google Android
In updatePictureInPictureMode of ActivityRecord.java, there is a possible bypass of background launch restrictions due to a logic error in the code.
local
low complexity
google
7.8
2023-07-13 CVE-2023-21238 Unspecified vulnerability in Google Android
In visitUris of RemoteViews.java, there is a possible leak of images between users due to a confused deputy.
local
low complexity
google
5.5
2023-07-13 CVE-2023-21239 Unspecified vulnerability in Google Android 12.0/12.1/13.0
In visitUris of Notification.java, there is a possible way to leak image data across user boundaries due to a confused deputy.
local
low complexity
google
5.5
2023-07-13 CVE-2023-21240 Resource Exhaustion vulnerability in Google Android
In Policy of Policy.java, there is a possible boot loop due to resource exhaustion.
local
low complexity
google CWE-400
5.5
2023-07-13 CVE-2023-21241 Integer Overflow or Wraparound vulnerability in Google Android
In rw_i93_send_to_upper of rw_i93.cc, there is a possible out of bounds write due to an integer overflow.
local
low complexity
google CWE-190
7.8
2023-07-13 CVE-2023-21243 Classic Buffer Overflow vulnerability in Google Android
In validateForCommonR1andR2 of PasspointConfiguration.java, there is a possible way to inflate the size of a config file with no limits due to a buffer overflow.
local
low complexity
google CWE-120
5.5