Vulnerabilities > Google > Android > High

DATE CVE VULNERABILITY TITLE RISK
2021-01-11 CVE-2021-0310 Use After Free vulnerability in Google Android 11.0
In LazyServiceRegistrar of LazyServiceRegistrar.cpp, there is a possible memory corruption due to a use after free.
local
low complexity
google CWE-416
7.8
2021-01-11 CVE-2021-0307 Unspecified vulnerability in Google Android 10.0/11.0
In updatePermissionSourcePackage of PermissionManagerService.java, there is a possible automatic runtime permission grant due to a confused deputy.
local
low complexity
google
7.8
2021-01-11 CVE-2021-0306 Improper Privilege Management vulnerability in Google Android
In addAllPermissions of PermissionManagerService.java, there is a possible permissions bypass when upgrading major Android versions which allows an app to gain the android.permission.ACTIVITY_RECOGNITION permission without user confirmation.
local
low complexity
google CWE-269
7.8
2021-01-11 CVE-2021-0303 Use After Free vulnerability in Google Android 11.0
In dispatchGraphTerminationMessage() of packages/services/Car/computepipe/runner/graph/StreamSetObserver.cpp, there is a possible use after free due to a race condition.
local
high complexity
google CWE-416
7.0
2021-01-11 CVE-2020-27059 Improper Restriction of Rendered UI Layers or Frames vulnerability in Google Android
In onAuthenticated of AuthenticationClient.java, there is a possible tapjacking attack when requesting the user's fingerprint due to an overlaid window.
local
low complexity
google CWE-1021
7.8
2021-01-05 CVE-2021-22492 Classic Buffer Overflow vulnerability in Google Android
An issue was discovered on Samsung mobile devices with O(8.x), P(9.0), and Q(10.0) (Broadcom Bluetooth chipsets) software.
low complexity
google CWE-120
8.8
2020-12-24 CVE-2020-35693 Unspecified vulnerability in Google Android
On some Samsung phones and tablets running Android through 7.1.1, it is possible for an attacker-controlled Bluetooth Low Energy (BLE) device to pair silently with a vulnerable target device, without any user interaction, when the target device's Bluetooth is on, and it is running an app that offers a connectable BLE advertisement.
low complexity
google
8.8
2020-12-18 CVE-2020-35555 Unspecified vulnerability in Google Android 10.0
An issue was discovered on LG mobile devices with Android OS 10 software.
local
low complexity
google
7.8
2020-12-18 CVE-2020-35554 Unspecified vulnerability in Google Android
An issue was discovered on LG mobile devices with Android OS 8.0, 8.1, 9.0, and 10 software.
local
low complexity
google
7.8
2020-12-18 CVE-2020-35553 Improper Restriction of Power Consumption vulnerability in Google Android 10.0/11.0
An issue was discovered on Samsung mobile devices with Q(10.0) and R(11.0) (Qualcomm SM8250 chipsets) software.
network
low complexity
google CWE-920
7.5