Vulnerabilities > Google > Android > High

DATE CVE VULNERABILITY TITLE RISK
2023-08-14 CVE-2023-21282 Out-of-bounds Write vulnerability in Google Android
In TRANSPOSER_SETTINGS of lpp_tran.h, there is a possible out of bounds write due to an incorrect bounds check.
network
low complexity
google CWE-787
8.8
2023-08-14 CVE-2023-21286 Unspecified vulnerability in Google Android
In visitUris of RemoteViews.java, there is a possible way to reveal images across users due to a missing permission check.
local
low complexity
google
7.8
2023-08-14 CVE-2023-35689 Insecure Default Initialization of Resource vulnerability in Google Android 11.0/13.0
In checkDebuggingDisallowed of DeviceVersionFragment.java, there is a possible way to access adb before SUW completion due to an insecure default value.
local
low complexity
google CWE-1188
7.8
2023-08-14 CVE-2023-21265 Improper Certificate Validation vulnerability in Google Android
In multiple locations, there are root CA certificates which need to be disabled.
network
low complexity
google CWE-295
7.5
2023-08-14 CVE-2023-21269 Improper Privilege Management vulnerability in Google Android 13.0
In startActivityInner of ActivityStarter.java, there is a possible way to launch an activity into PiP mode from the background due to BAL bypass.
local
low complexity
google CWE-269
7.8
2023-08-07 CVE-2023-33913 Out-of-bounds Write vulnerability in Google Android 11.0/12.0
In DRM/oemcrypto, there is a possible out of bounds write due to an incorrect calculation of buffer size.This could lead to remote escalation of privilege with System execution privileges needed
network
low complexity
google CWE-787
7.2
2023-07-14 CVE-2023-35692 Unspecified vulnerability in Google Android
In getLocationCache of GeoLocation.java, there is a possible way to send a mock location during an emergency call due to improper input validation.
local
low complexity
google
7.8
2023-07-13 CVE-2023-21145 Unspecified vulnerability in Google Android
In updatePictureInPictureMode of ActivityRecord.java, there is a possible bypass of background launch restrictions due to a logic error in the code.
local
low complexity
google
7.8
2023-07-13 CVE-2023-21241 Integer Overflow or Wraparound vulnerability in Google Android
In rw_i93_send_to_upper of rw_i93.cc, there is a possible out of bounds write due to an integer overflow.
local
low complexity
google CWE-190
7.8
2023-07-13 CVE-2023-21245 Unspecified vulnerability in Google Android
In showNextSecurityScreenOrFinish of KeyguardSecurityContainerController.java, there is a possible way to access the lock screen during device setup due to a logic error in the code.
local
low complexity
google
7.8