Vulnerabilities > Google > Android > High
| DATE | CVE | VULNERABILITY TITLE | RISK |
|---|---|---|---|
| 2023-03-24 | CVE-2023-20964 | Unspecified vulnerability in Google Android 12.0/12.1/13.0 In multiple functions of MediaSessionRecord.java, there is a possible Intent rebroadcast due to a confused deputy. | 7.8 |
| 2023-03-24 | CVE-2023-20966 | Out-of-bounds Write vulnerability in Google Android In inflate of inflate.c, there is a possible out of bounds write due to a heap buffer overflow. | 7.8 |
| 2023-03-24 | CVE-2023-20971 | Unspecified vulnerability in Google Android 13.0 In removePermission of PermissionManagerServiceImpl.java, there is a possible way to obtain dangerous permissions without user consent due to a logic error in the code. | 7.8 |
| 2023-03-24 | CVE-2023-20975 | Unspecified vulnerability in Google Android 13.0 In getAvailabilityStatus of EnableContentCapturePreferenceController.java, there is a possible way to bypass DISALLOW_CONTENT_CAPTURE due to a permissions bypass. | 7.8 |
| 2023-03-24 | CVE-2023-20976 | Improper Input Validation vulnerability in Google Android 13.0 In getConfirmationMessage of DefaultAutofillPicker.java, there is a possible way to mislead the user to select default autofill application due to improper input validation. | 7.3 |
| 2023-03-24 | CVE-2023-20985 | Out-of-bounds Write vulnerability in Google Android 13.0 In BTA_GATTS_HandleValueIndication of bta_gatts_api.cc, there is a possible out of bounds write due to improper input validation. | 7.8 |
| 2023-03-24 | CVE-2023-20993 | Improper Handling of Exceptional Conditions vulnerability in Google Android 13.0 In multiple functions of SnoozeHelper.java, there is a possible failure to persist settings due to an uncaught exception. | 7.8 |
| 2023-03-24 | CVE-2023-20995 | Unspecified vulnerability in Google Android 13.0 In captureImage of CustomizedSensor.cpp, there is a possible way to bypass the fingerprint unlock due to a logic error in the code. | 7.8 |
| 2023-03-24 | CVE-2023-21000 | Improper Locking vulnerability in Google Android 13.0 In MediaCodec.cpp, there is a possible use after free due to improper locking. | 7.8 |
| 2023-03-24 | CVE-2023-21001 | Missing Authorization vulnerability in Google Android 13.0 In onContextItemSelected of NetworkProviderSettings.java, there is a possible way for users to change the Wi-Fi settings of other users due to a missing permission check. | 7.8 |