Vulnerabilities > Google > Android > High

DATE CVE VULNERABILITY TITLE RISK
2021-02-10 CVE-2021-0330 Use After Free vulnerability in Google Android 10.0/11.0/9.0
In add_user_ce and remove_user_ce of storaged.cpp, there is a possible use-after-free due to improper locking.
local
low complexity
google CWE-416
7.8
2021-02-10 CVE-2021-0329 Out-of-bounds Write vulnerability in Google Android
In several native functions called by AdvertiseManager.java, there is a possible out of bounds write due to a missing bounds check.
local
low complexity
google CWE-787
7.8
2021-02-10 CVE-2021-0328 Missing Authorization vulnerability in Google Android
In onBatchScanReports and deliverBatchScan of GattService.java, there is a possible way to retrieve Bluetooth scan results without permissions due to a missing permission check.
local
low complexity
google CWE-862
7.8
2021-02-10 CVE-2021-0327 Improper Privilege Management vulnerability in Google Android
In getContentProviderImpl of ActivityManagerService.java, there is a possible permission bypass due to non-restored binder identities.
local
low complexity
google CWE-269
7.8
2021-02-10 CVE-2021-0326 Out-of-bounds Write vulnerability in multiple products
In p2p_copy_client_info of p2p.c, there is a possible out of bounds write due to a missing bounds check.
7.5
2021-02-10 CVE-2021-0325 Out-of-bounds Write vulnerability in Google Android
In ih264d_parse_pslice of ih264d_parse_pslice.c, there is a possible out of bounds write due to a heap buffer overflow.
network
low complexity
google CWE-787
8.8
2021-02-10 CVE-2021-0314 Improper Restriction of Rendered UI Layers or Frames vulnerability in Google Android 10.0/8.1/9.0
In onCreate of UninstallerActivity, there is a possible way to uninstall an all without informed user consent due to a tapjacking/overlay attack.
local
low complexity
google CWE-1021
7.3
2021-02-10 CVE-2021-0305 Improper Restriction of Rendered UI Layers or Frames vulnerability in Google Android 10.0/8.1/9.0
In PackageInstaller, there is a possible tapjacking attack due to an insecure default value.
local
low complexity
google CWE-1021
7.8
2021-02-10 CVE-2021-0302 Improper Restriction of Rendered UI Layers or Frames vulnerability in Google Android 10.0/8.1/9.0
In PackageInstaller, there is a possible tapjacking attack due to an insecure default value.
local
low complexity
google CWE-1021
7.8
2021-02-04 CVE-2021-0351 Unspecified vulnerability in Google Android
In wlan driver, there is a possible system crash due to a missing bounds check.
network
low complexity
google
7.5