Vulnerabilities > Google > Android > High

DATE CVE VULNERABILITY TITLE RISK
2023-09-11 CVE-2023-35669 Deserialization of Untrusted Data vulnerability in Google Android
In checkKeyIntentParceledCorrectly of AccountManagerService.java, there is a possible way to control other running activities due to unsafe deserialization.
local
low complexity
google CWE-502
7.8
2023-09-11 CVE-2023-35670 Path Traversal vulnerability in Google Android
In computeValuesFromData of FileUtils.java, there is a possible way to insert files to other apps' external private directories due to a path traversal error.
local
low complexity
google CWE-22
7.8
2023-09-11 CVE-2023-35673 Integer Overflow or Wraparound vulnerability in Google Android
In build_read_multi_rsp of gatt_sr.cc, there is a possible out of bounds write due to an integer overflow.
low complexity
google CWE-190
8.8
2023-09-11 CVE-2023-35674 Unspecified vulnerability in Google Android
In onCreate of WindowState.java, there is a possible way to launch a background activity due to a logic error in the code.
local
low complexity
google
7.8
2023-09-11 CVE-2023-35676 Unspecified vulnerability in Google Android 12.0/12.1/13.0
In createQuickShareAction of SaveImageInBackgroundTask.java, there is a possible way to trigger a background activity launch due to an unsafe PendingIntent.
local
low complexity
google
7.8
2023-09-11 CVE-2023-35682 Unspecified vulnerability in Google Android
In hasPermissionForActivity of PackageManagerHelper.java, there is a possible way to start arbitrary components due to a confused deputy.
local
low complexity
google
7.8
2023-09-11 CVE-2023-35684 Out-of-bounds Write vulnerability in Google Android
In avdt_msg_asmbl of avdt_msg.cc, there is a possible out of bounds write due to an integer overflow.
low complexity
google CWE-787
8.8
2023-09-11 CVE-2023-35687 Use After Free vulnerability in Google Android
In MtpPropertyValue of MtpProperty.h, there is a possible memory corruption due to a use after free.
local
low complexity
google CWE-416
7.8
2023-09-04 CVE-2023-33914 Improper Input Validation vulnerability in Google Android 11.0/12.0/13.0
In NIA0 algorithm in Security Mode Command, there is a possible missing verification incorrect input.
network
low complexity
google CWE-20
7.5
2023-09-04 CVE-2023-33915 Missing Authorization vulnerability in Google Android 11.0
In LTE protocol stack, there is a possible missing permission check.
network
low complexity
google CWE-862
7.5