Vulnerabilities > Google > Android > High

DATE CVE VULNERABILITY TITLE RISK
2021-04-13 CVE-2021-0433 Improper Restriction of Rendered UI Layers or Frames vulnerability in Google Android
In onCreate of DeviceChooserActivity.java, there is a possible way to bypass user consent when pairing a Bluetooth device due to a tapjacking/overlay attack.
low complexity
google CWE-1021
8.0
2021-04-13 CVE-2021-0432 Race Condition vulnerability in Google Android 11.0
In ClearPullerCacheIfNecessary and ForceClearPullerCache of StatsPullerManager.cpp, there is a possible use-after-free due to a race condition.
local
high complexity
google CWE-362
7.0
2021-04-13 CVE-2021-0431 Out-of-bounds Read vulnerability in Google Android
In avrc_msg_cback of avrc_api.cc, there is a possible out of bounds read due to a missing bounds check.
network
low complexity
google CWE-125
7.5
2021-04-13 CVE-2021-0429 Use After Free vulnerability in Google Android
In pollOnce of ALooper.cpp, there is possible memory corruption due to a use after free.
local
low complexity
google CWE-416
7.8
2021-04-13 CVE-2021-0427 Out-of-bounds Write vulnerability in Google Android 11.0
In parseExclusiveStateAnnotation of LogEvent.cpp, there is a possible out of bounds write due to a heap buffer overflow.
local
low complexity
google CWE-787
7.8
2021-04-13 CVE-2021-0426 Out-of-bounds Write vulnerability in Google Android 11.0
In parsePrimaryFieldFirstUidAnnotation of LogEvent.cpp, there is a possible out of bounds write due to a heap buffer overflow.
local
low complexity
google CWE-787
7.8
2021-04-09 CVE-2021-25365 Improper Handling of Exceptional Conditions vulnerability in Google Android
An improper exception control in softsimd prior to SMR APR-2021 Release 1 allows unprivileged applications to access the API in softsimd.
local
low complexity
google CWE-755
7.8
2021-04-09 CVE-2021-25361 Unspecified vulnerability in Google Android 10.0/11.0
An improper access control vulnerability in stickerCenter prior to SMR APR-2021 Release 1 allows local attackers to read or write arbitrary files of system process via untrusted applications.
local
low complexity
google
8.8
2021-04-09 CVE-2021-25356 Incorrect Authorization vulnerability in Google Android
An improper caller check vulnerability in Managed Provisioning prior to SMR APR-2021 Release 1 allows unprivileged application to install arbitrary application, grant device admin permission and then delete several installed application.
local
low complexity
google CWE-863
8.8
2021-04-06 CVE-2021-30162 Unspecified vulnerability in Google Android
An issue was discovered on LG mobile devices with Android OS 4.4 through 11 software.
local
low complexity
google
7.1