Vulnerabilities > Google > Android
| DATE | CVE | VULNERABILITY TITLE | RISK |
|---|---|---|---|
| 2023-06-15 | CVE-2021-0701 | Unspecified vulnerability in Google Android In PVRSRVBridgeSyncPrimOpCreate of the PowerVR kernel driver, a missing size check means there is a possible integer overflow that could allow out-of-bounds heap access. | 9.8 |
| 2023-06-15 | CVE-2021-0945 | Unspecified vulnerability in Google Android In _PMRCreate of the PowerVR kernel driver, a missing bounds check means it is possible to overwrite heap memory via PhysmemNewRamBackedPMR. | 9.8 |
| 2023-06-15 | CVE-2023-21095 | Race Condition vulnerability in Google Android 12.1/13.0 In canStartSystemGesture of RecentsAnimationDeviceState.java, there is a possible partial lockscreen bypass due to a race condition. | 4.7 |
| 2023-06-15 | CVE-2023-21101 | Use After Free vulnerability in Google Android In multiple functions of WVDrmPlugin.cpp, there is a possible use after free due to a race condition. | 7.0 |
| 2023-06-15 | CVE-2023-21105 | Unspecified vulnerability in Google Android In multiple functions of ChooserActivity.java, there is a possible cross-user media read due to a confused deputy. | 5.5 |
| 2023-06-15 | CVE-2023-21108 | Use After Free vulnerability in Google Android In sdpu_build_uuid_seq of sdp_discovery.cc, there is a possible out of bounds write due to a use after free. | 8.8 |
| 2023-06-15 | CVE-2023-21115 | Use of a Broken or Risky Cryptographic Algorithm vulnerability in Google Android 11.0/12.0/12.1 In btm_sec_encrypt_change of btm_sec.cc, there is a possible way to downgrade the link key type due to improperly used crypto. | 8.8 |
| 2023-06-15 | CVE-2023-21120 | Improper Locking vulnerability in Google Android In multiple functions of cdm_engine.cpp, there is a possible use-after-free due to improper locking. | 7.8 |
| 2023-06-15 | CVE-2023-21121 | Improper Input Validation vulnerability in Google Android 11.0/12.0 In onResume of AppManagementFragment.java, there is a possible way to prevent users from forgetting a previously connected VPN due to improper input validation. | 7.8 |
| 2023-06-15 | CVE-2023-21122 | Missing Authorization vulnerability in Google Android In various functions of various files, there is a possible way to bypass the DISALLOW_DEBUGGING_FEATURES restriction for tracing due to a missing permission check. | 7.8 |