Vulnerabilities > Google > Android > High

DATE CVE VULNERABILITY TITLE RISK
2022-06-15 CVE-2022-20138 Missing Authorization vulnerability in Google Android
In ACTION_MANAGED_PROFILE_PROVISIONED of DevicePolicyManagerService.java, there is a possible way for unprivileged app to send MANAGED_PROFILE_PROVISIONED intent due to a missing permission check.
local
low complexity
google CWE-862
7.8
2022-06-15 CVE-2022-20141 Improper Locking vulnerability in Google Android
In ip_check_mc_rcu of igmp.c, there is a possible use after free due to improper locking.
local
high complexity
google CWE-667
7.0
2022-06-15 CVE-2022-20142 Unspecified vulnerability in Google Android
In createFromParcel of GeofenceHardwareRequestParcelable.java, there is a possible arbitrary code execution due to parcel mismatch.
local
low complexity
google
7.2
2022-06-15 CVE-2022-20144 Unspecified vulnerability in Google Android 10.0/11.0
In multiple functions of AvatarPhotoController.java, there is a possible access to content owned by system content providers due to a confused deputy.
local
low complexity
google
7.8
2022-06-15 CVE-2022-20147 Out-of-bounds Write vulnerability in Google Android
In nfa_dm_check_set_config of nfa_dm_main.cc, there is a possible out of bounds write due to a missing bounds check.
local
low complexity
google CWE-787
7.2
2022-06-15 CVE-2022-20156 Improper Input Validation vulnerability in Google Android
In unflatten of GraphicBuffer.cpp, there is a possible arbitrary code execution due to improper input validation.
local
low complexity
google CWE-20
7.2
2022-06-15 CVE-2022-20168 Unspecified vulnerability in Google Android
Product: AndroidVersions: Android kernelAndroid ID: A-210594998References: N/A
network
low complexity
google
7.8
2022-06-15 CVE-2022-20181 Unspecified vulnerability in Google Android
Product: AndroidVersions: Android kernelAndroid ID: A-210936609References: N/A
network
low complexity
google
7.8
2022-06-15 CVE-2022-20186 Improper Input Validation vulnerability in Google Android
In kbase_mem_alias of mali_kbase_mem_linux.c, there is a possible arbitrary code execution due to improper input validation.
local
low complexity
google CWE-20
7.8
2022-06-15 CVE-2022-20190 Unspecified vulnerability in Google Android
Product: AndroidVersions: Android kernelAndroid ID: A-208744915References: N/A
network
low complexity
google
7.8