Vulnerabilities > Google > Android > High

DATE CVE VULNERABILITY TITLE RISK
2022-12-13 CVE-2022-20469 Out-of-bounds Write vulnerability in Google Android
In avct_lcb_msg_asmbl of avct_lcb_act.cc, there is a possible out of bounds write due to a missing bounds check.
low complexity
google CWE-787
8.8
2022-12-13 CVE-2022-20470 Improper Input Validation vulnerability in Google Android
In bindRemoteViewsService of AppWidgetServiceImpl.java, there is a possible way to bypass background activity launch due to improper input validation.
local
low complexity
google CWE-20
7.8
2022-12-13 CVE-2022-20474 Unspecified vulnerability in Google Android
In readLazyValue of Parcel.java, there is a possible loading of arbitrary code into the System Settings app due to a confused deputy.
local
low complexity
google
7.8
2022-12-13 CVE-2022-20475 Unspecified vulnerability in Google Android
In test of ResetTargetTaskHelper.java, there is a possible hijacking of any app which sets allowTaskReparenting="true" due to a confused deputy.
local
low complexity
google
7.8
2022-12-13 CVE-2022-20477 Unspecified vulnerability in Google Android 13.0
In shouldHideNotification of KeyguardNotificationVisibilityProvider.kt, there is a possible way to show hidden notifications due to a logic error in the code.
local
low complexity
google
7.8
2022-12-13 CVE-2022-20478 Allocation of Resources Without Limits or Throttling vulnerability in Google Android
In NotificationChannel of NotificationChannel.java, there is a possible failure to persist permissions settings due to resource exhaustion.
local
low complexity
google CWE-770
7.8
2022-12-13 CVE-2022-20479 Allocation of Resources Without Limits or Throttling vulnerability in Google Android
In NotificationChannel of NotificationChannel.java, there is a possible failure to persist permissions settings due to resource exhaustion.
local
low complexity
google CWE-770
7.8
2022-12-13 CVE-2022-20480 Allocation of Resources Without Limits or Throttling vulnerability in Google Android
In NotificationChannel of NotificationChannel.java, there is a possible failure to persist permissions settings due to resource exhaustion.
local
low complexity
google CWE-770
7.8
2022-12-13 CVE-2022-20483 Integer Underflow (Wrap or Wraparound) vulnerability in Google Android
In several functions that parse avrc response in avrc_pars_ct.cc and related files, there are possible out of bounds reads due to integer overflows.
network
low complexity
google CWE-191
7.5
2022-12-13 CVE-2022-20484 Allocation of Resources Without Limits or Throttling vulnerability in Google Android
In NotificationChannel of NotificationChannel.java, there is a possible failure to persist permissions settings due to resource exhaustion.
local
low complexity
google CWE-770
7.8