Vulnerabilities > Google > Android > High

DATE CVE VULNERABILITY TITLE RISK
2020-10-06 CVE-2020-26598 Missing Authorization vulnerability in Google Android 8.0/8.1/9.0
An issue was discovered on LG mobile devices with Android OS 8.0, 8.1, and 9.0 software.
network
low complexity
google CWE-862
7.5
2020-10-06 CVE-2020-26597 Improper Input Validation vulnerability in Google Android 10.0/9.0
An issue was discovered on LG mobile devices with Android OS 9.0 and 10 software.
network
low complexity
google CWE-20
7.5
2020-09-18 CVE-2020-0405 Improper Preservation of Permissions vulnerability in Google Android 11.0
In NetworkStackNotifier, there is a possible permissions bypass due to an unsafe implicit PendingIntent.
local
low complexity
google CWE-281
7.8
2020-09-18 CVE-2020-0319 Out-of-bounds Write vulnerability in Google Android 11.0
In NFC, there is a possible out of bounds write due to a missing bounds check.
local
low complexity
google CWE-787
7.8
2020-09-18 CVE-2020-0300 Use of Uninitialized Resource vulnerability in Google Android 11.0
In NFC, there is a possible out of bounds read due to uninitialized data.
network
low complexity
google CWE-908
7.5
2020-09-18 CVE-2020-0299 Missing Authorization vulnerability in Google Android 11.0
In Bluetooth, there is a possible spoofing of bluetooth device metadata due to a missing permission check.
local
low complexity
google CWE-862
7.8
2020-09-18 CVE-2020-0298 Missing Authorization vulnerability in Google Android 11.0
In Bluetooth, there is a possible control over Bluetooth enabled state due to a missing permission check.
local
low complexity
google CWE-862
7.8
2020-09-18 CVE-2020-0286 Incomplete Cleanup vulnerability in Google Android 11.0
In Bluetooth AVRCP, there is a possible leak of audio metadata due to residual data.
network
low complexity
google CWE-459
7.5
2020-09-18 CVE-2020-0273 Out-of-bounds Write vulnerability in Google Android 11.0
In hwservicemanager, there is a possible out of bounds write due to freeing a wild pointer.
local
low complexity
google CWE-787
7.8
2020-09-18 CVE-2020-0271 Insecure Default Initialization of Resource vulnerability in Google Android 11.0
In the Settings app, there is an insecure default value.
local
low complexity
google CWE-1188
7.3