Vulnerabilities > Google > Android > High

DATE CVE VULNERABILITY TITLE RISK
2023-10-11 CVE-2023-35661 Out-of-bounds Read vulnerability in Google Android
In ProfSixDecomTcpSACKoption of RohcPacketCommon.cpp, there is a possible out of bounds read due to a missing bounds check.
network
low complexity
google CWE-125
7.5
2023-10-11 CVE-2023-40141 Out-of-bounds Write vulnerability in Google Android
In temp_residency_name_store of thermal_metrics.c, there is a possible out of bounds write due to a missing bounds check.
local
low complexity
google CWE-787
7.8
2023-10-11 CVE-2023-40142 Unspecified vulnerability in Google Android
In TBD of TBD, there is a possible way to bypass carrier restrictions due to a logic error in the code.
local
low complexity
google
7.8
2023-10-08 CVE-2023-40632 Use After Free vulnerability in Google Android 13.0
In jpg driver, there is a possible use after free due to a logic error.
network
low complexity
google CWE-416
7.5
2023-10-08 CVE-2023-40634 Missing Authorization vulnerability in Google Android 11.0/12.0/13.0
In phasechecksercer, there is a possible missing permission check.
local
low complexity
google CWE-862
7.8
2023-10-08 CVE-2023-40635 Missing Authorization vulnerability in Google Android 11.0
In linkturbo, there is a possible missing permission check.
local
low complexity
google CWE-862
7.8
2023-10-06 CVE-2023-21266 Unspecified vulnerability in Google Android
In multiple functions of ActivityManagerService.java, there is a possible way to escape Google Play protection due to a permissions bypass.
local
low complexity
google
7.8
2023-10-02 CVE-2023-32820 Reachable Assertion vulnerability in multiple products
In wlan firmware, there is a possible firmware assertion due to improper input handling.
network
low complexity
linuxfoundation mediatek google linux CWE-617
7.5
2023-09-27 CVE-2023-44122 Exposure of Resource to Wrong Sphere vulnerability in Google Android 12.0/13.0
The vulnerability is to theft of arbitrary files with system privilege in the LockScreenSettings ("com.lge.lockscreensettings") app in the "com/lge/lockscreensettings/dynamicwallpaper/MyCategoryGuideActivity.java" file.
local
low complexity
google CWE-668
7.8
2023-09-27 CVE-2023-44123 Unspecified vulnerability in Google Android 12.0/13.0
The vulnerability is the use of implicit PendingIntents with the PendingIntent.FLAG_MUTABLE set that leads to theft and/or (over-)write of arbitrary files with system privilege in the Bluetooth ("com.lge.bluetoothsetting") app.
local
low complexity
google
7.8