Vulnerabilities > Google > Android > High

DATE CVE VULNERABILITY TITLE RISK
2023-03-24 CVE-2023-20975 Unspecified vulnerability in Google Android 13.0
In getAvailabilityStatus of EnableContentCapturePreferenceController.java, there is a possible way to bypass DISALLOW_CONTENT_CAPTURE due to a permissions bypass.
local
low complexity
google
7.8
2023-03-24 CVE-2023-20976 Improper Input Validation vulnerability in Google Android 13.0
In getConfirmationMessage of DefaultAutofillPicker.java, there is a possible way to mislead the user to select default autofill application due to improper input validation.
local
low complexity
google CWE-20
7.3
2023-03-24 CVE-2023-20985 Out-of-bounds Write vulnerability in Google Android 13.0
In BTA_GATTS_HandleValueIndication of bta_gatts_api.cc, there is a possible out of bounds write due to improper input validation.
local
low complexity
google CWE-787
7.8
2023-03-24 CVE-2023-20993 Improper Handling of Exceptional Conditions vulnerability in Google Android 13.0
In multiple functions of SnoozeHelper.java, there is a possible failure to persist settings due to an uncaught exception.
local
low complexity
google CWE-755
7.8
2023-03-24 CVE-2023-20995 Unspecified vulnerability in Google Android 13.0
In captureImage of CustomizedSensor.cpp, there is a possible way to bypass the fingerprint unlock due to a logic error in the code.
local
low complexity
google
7.8
2023-03-24 CVE-2023-21000 Improper Locking vulnerability in Google Android 13.0
In MediaCodec.cpp, there is a possible use after free due to improper locking.
local
low complexity
google CWE-667
7.8
2023-03-24 CVE-2023-21001 Missing Authorization vulnerability in Google Android 13.0
In onContextItemSelected of NetworkProviderSettings.java, there is a possible way for users to change the Wi-Fi settings of other users due to a missing permission check.
local
low complexity
google CWE-862
7.8
2023-03-24 CVE-2023-21002 Missing Authorization vulnerability in Google Android 13.0
In getAvailabilityStatus of several Transcode Permission Controllers, there is a possible permission bypass due to a missing permission check.
local
low complexity
google CWE-862
7.8
2023-03-24 CVE-2023-21003 Missing Authorization vulnerability in Google Android 13.0
In getAvailabilityStatus of several Transcode Permission Controllers, there is a possible permission bypass due to a missing permission check.
local
low complexity
google CWE-862
7.8
2023-03-24 CVE-2023-21004 Missing Authorization vulnerability in Google Android 13.0
In getAvailabilityStatus of several Transcode Permission Controllers, there is a possible permission bypass due to a missing permission check.
local
low complexity
google CWE-862
7.8