Vulnerabilities > Google > Android > High

DATE CVE VULNERABILITY TITLE RISK
2022-08-01 CVE-2022-26429 Missing Authorization vulnerability in Google Android 11.0/12.0
In cta, there is a possible way to write permission usage records of an app due to a missing permission check.
local
low complexity
google CWE-862
7.8
2022-07-13 CVE-2022-20218 Incorrect Permission Assignment for Critical Resource vulnerability in Google Android 12.0/12.1
In PermissionController, there is a possible way to get and retain permissions without user's consent due to a logic error in the code.
local
low complexity
google CWE-732
7.8
2022-07-13 CVE-2022-20220 Path Traversal vulnerability in Google Android 12.0/12.1
In openFile of CallLogProvider.java, there is a possible permission bypass due to a path traversal error.
local
low complexity
google CWE-22
7.2
2022-07-13 CVE-2022-20223 Externally Controlled Reference to a Resource in Another Sphere vulnerability in Google Android
In assertSafeToStartCustomActivity of AppRestrictionsFragment.java, there is a possible way to start a phone call without permissions due to a confused deputy.
local
low complexity
google CWE-610
7.2
2022-07-13 CVE-2022-20236 Improper Restriction of Operations within the Bounds of a Memory Buffer vulnerability in Google Android
A drm driver have oob problem, could cause the system crash or EOPProduct: AndroidVersions: Android SoCAndroid ID: A-233124709
network
low complexity
google CWE-119
7.8
2022-07-12 CVE-2022-30754 Unspecified vulnerability in Google Android 10.0/11.0/12.0
Implicit Intent hijacking vulnerability in AppLinker prior to SMR Jul-2022 Release 1 allow allows attackers to launch certain activities with privilege of AppLinker.
local
low complexity
google
7.2
2022-07-12 CVE-2022-30756 Unspecified vulnerability in Google Android 10.0/11.0/12.0
Implicit Intent hijacking vulnerability in Finder prior to SMR Jul-2022 Release 1 allow allows attackers to launch certain activities with privilege of Finder.
local
low complexity
google
7.2
2022-07-06 CVE-2022-21767 Out-of-bounds Write vulnerability in Google Android
In Bluetooth, there is a possible out of bounds write due to a missing bounds check.
low complexity
google CWE-787
8.3
2022-07-06 CVE-2022-21768 Out-of-bounds Write vulnerability in Google Android
In Bluetooth, there is a possible out of bounds write due to a missing bounds check.
low complexity
google CWE-787
8.3
2022-06-15 CVE-2022-20203 Out-of-bounds Write vulnerability in Google Android 12.1
In multiple locations of the nanopb library, there is a possible way to corrupt memory when decoding untrusted protobuf files.
local
low complexity
google CWE-787
7.8