Vulnerabilities > Google > Android > High

DATE CVE VULNERABILITY TITLE RISK
2022-06-15 CVE-2022-20204 Missing Authorization vulnerability in Google Android 12.1
In registerRemoteBugreportReceivers of DevicePolicyManagerService.java, there is a possible reporting of falsified bug reports due to a missing permission check.
local
low complexity
google CWE-862
7.8
2022-06-15 CVE-2022-20233 Out-of-bounds Write vulnerability in Google Android
In param_find_digests_internal and related functions of the Titan-M source, there is a possible out of bounds write due to an incorrect bounds check.
local
low complexity
google CWE-787
7.2
2022-06-15 CVE-2022-20123 Out-of-bounds Read vulnerability in Google Android
In phNciNfc_RecvMfResp of phNxpExtns_MifareStd.cpp, there is a possible out of bounds read due to a missing bounds check.
network
low complexity
google CWE-125
7.8
2022-06-15 CVE-2022-20124 Unspecified vulnerability in Google Android
In deletePackageX of DeletePackageHelper.java, there is a possible way for a Guest user to reset pre-loaded applications for other users due to a permissions bypass.
local
low complexity
google
7.8
2022-06-15 CVE-2022-20125 Unspecified vulnerability in Google Android
In GBoard, there is a possible way to bypass factory reset protections due to a sandbox escape.
local
low complexity
google
7.2
2022-06-15 CVE-2022-20126 Missing Authorization vulnerability in Google Android
In setScanMode of AdapterService.java, there is a possible way to enable Bluetooth discovery mode without user interaction due to a missing permission check.
local
low complexity
google CWE-862
7.3
2022-06-15 CVE-2022-20131 Out-of-bounds Read vulnerability in Google Android
In nci_proc_rf_management_ntf of nci_hrcv.cc, there is a possible out of bounds read due to a missing bounds check.
network
low complexity
google CWE-125
7.5
2022-06-15 CVE-2022-20133 Missing Authorization vulnerability in Google Android
In setDiscoverableTimeout of AdapterService.java, there is a possible bypass of user interaction due to a missing permission check.
local
low complexity
google CWE-862
7.8
2022-06-15 CVE-2022-20134 Improper Input Validation vulnerability in Google Android
In readArguments of CallSubjectDialog.java, there is a possible way to trick the user to call the wrong phone number due to improper input validation.
local
low complexity
google CWE-20
7.2
2022-06-15 CVE-2022-20135 Unspecified vulnerability in Google Android
In writeToParcel of GateKeeperResponse.java, there is a possible parcel format mismatch.
local
low complexity
google
7.2