Vulnerabilities > Google > Android > High

DATE CVE VULNERABILITY TITLE RISK
2023-01-26 CVE-2022-20490 Allocation of Resources Without Limits or Throttling vulnerability in Google Android
In multiple functions of AutomaticZenRule.java, there is a possible failure to persist permissions settings due to resource exhaustion.
local
low complexity
google CWE-770
7.8
2023-01-26 CVE-2022-20492 Allocation of Resources Without Limits or Throttling vulnerability in Google Android
In many functions of AutomaticZenRule.java, there is a possible failure to persist permissions settings due to resource exhaustion.
local
low complexity
google CWE-770
7.8
2023-01-26 CVE-2022-20493 Improper Validation of Specified Quantity in Input vulnerability in Google Android
In Condition of Condition.java, there is a possible way to grant notification access due to improper input validation.
local
low complexity
google CWE-1284
7.8
2023-01-03 CVE-2022-32635 Out-of-bounds Write vulnerability in Google Android
In gps, there is a possible out of bounds write due to a missing bounds check.
local
low complexity
google CWE-787
7.8
2022-12-16 CVE-2022-20503 Missing Authorization vulnerability in Google Android 13.0
In onCreate of WifiDppConfiguratorActivity.java, there is a possible way for a guest user to add a WiFi configuration due to a missing permission check.
local
low complexity
google CWE-862
7.8
2022-12-16 CVE-2022-20506 Missing Authorization vulnerability in Google Android 13.0
In onCreate of WifiDialogActivity.java, there is a missing permission check.
local
low complexity
google CWE-862
7.8
2022-12-16 CVE-2022-20507 Improper Input Validation vulnerability in Google Android 13.0
In onMulticastListUpdateNotificationReceived of UwbEventManager.java, there is a possible arbitrary code execution due to a missing bounds check.
local
low complexity
google CWE-20
7.8
2022-12-16 CVE-2022-20508 Missing Authorization vulnerability in Google Android 13.0
In onAttach of ConfigureWifiSettings.java, there is a possible way for a guest user to change WiFi settings due to a permissions bypass.
local
low complexity
google CWE-862
7.8
2022-12-16 CVE-2022-20512 Improper Input Validation vulnerability in Google Android 13.0
In navigateUpTo of Task.java, there is a possible way to launch an intent handler with a mismatched intent due to improper input validation.
local
low complexity
google CWE-20
7.8
2022-12-16 CVE-2022-20516 Integer Underflow (Wrap or Wraparound) vulnerability in Google Android 13.0
In rw_t3t_act_handle_check_ndef_rsp of rw_t3t.cc, there is a possible out of bounds read due to an integer overflow.
network
low complexity
google CWE-191
7.5