Vulnerabilities > Google > Android

DATE CVE VULNERABILITY TITLE RISK
2023-07-13 CVE-2023-21245 Unspecified vulnerability in Google Android
In showNextSecurityScreenOrFinish of KeyguardSecurityContainerController.java, there is a possible way to access the lock screen during device setup due to a logic error in the code.
local
low complexity
google
7.8
2023-07-13 CVE-2023-21246 Improper Check for Unusual or Exceptional Conditions vulnerability in Google Android
In ShortcutInfo of ShortcutInfo.java, there is a possible way for an app to retain notification listening access due to an uncaught exception.
local
low complexity
google CWE-754
3.3
2023-07-13 CVE-2023-21247 Missing Authorization vulnerability in Google Android 12.0/12.1/13.0
In getAvailabilityStatus of BluetoothScanningMainSwitchPreferenceController.java, there is a possible way to bypass a device policy restriction due to a missing permission check.
local
low complexity
google CWE-862
7.8
2023-07-13 CVE-2023-21248 Missing Authorization vulnerability in Google Android 12.0/12.1/13.0
In getAvailabilityStatus of WifiScanningMainSwitchPreferenceController.java, there is a possible way to bypass a device policy restriction due to a missing permission check.
local
low complexity
google CWE-862
7.8
2023-07-13 CVE-2023-21249 Improper Preservation of Permissions vulnerability in Google Android 13.0
In multiple functions of OneTimePermissionUserManager.java, there is a possible one-time permission retention due to a permissions bypass.
local
low complexity
google CWE-281
5.5
2023-07-13 CVE-2023-21250 Out-of-bounds Write vulnerability in Google Android
In gatt_end_operation of gatt_utils.cc, there is a possible out of bounds write due to a missing bounds check.
network
low complexity
google CWE-787
critical
9.8
2023-07-13 CVE-2023-21251 Improper Input Validation vulnerability in Google Android
In onCreate of ConfirmDialog.java, there is a possible way to connect to VNP bypassing user's consent due to improper input validation.
local
low complexity
google CWE-20
7.3
2023-07-13 CVE-2023-21254 Unspecified vulnerability in Google Android 13.0
In getCurrentState of OneTimePermissionUserManager.java, there is a possible way to hold one-time permissions after the app is being killed due to a logic error in the code.
local
low complexity
google
7.8
2023-07-13 CVE-2023-21255 Use After Free vulnerability in multiple products
In multiple functions of binder.c, there is a possible memory corruption due to a use after free.
local
low complexity
google debian CWE-416
7.8
2023-07-13 CVE-2023-21256 Unspecified vulnerability in Google Android 13.0
In SettingsHomepageActivity.java, there is a possible way to launch arbitrary activities via Settings due to a logic error in the code.
local
low complexity
google
7.8