Vulnerabilities > Google > Android > High

DATE CVE VULNERABILITY TITLE RISK
2022-06-15 CVE-2022-20203 Out-of-bounds Write vulnerability in Google Android 12.1
In multiple locations of the nanopb library, there is a possible way to corrupt memory when decoding untrusted protobuf files.
local
low complexity
google CWE-787
7.8
2022-06-15 CVE-2021-39806 Double Free vulnerability in Google Android 12.1
In closef of label_backends_android.c, there is a possible way to corrupt memory due to a double free.
local
low complexity
google CWE-415
7.8
2022-06-15 CVE-2022-20138 Missing Authorization vulnerability in Google Android
In ACTION_MANAGED_PROFILE_PROVISIONED of DevicePolicyManagerService.java, there is a possible way for unprivileged app to send MANAGED_PROFILE_PROVISIONED intent due to a missing permission check.
local
low complexity
google CWE-862
7.8
2022-06-15 CVE-2022-20141 Improper Locking vulnerability in Google Android
In ip_check_mc_rcu of igmp.c, there is a possible use after free due to improper locking.
local
high complexity
google CWE-667
7.0
2022-06-15 CVE-2022-20142 Unspecified vulnerability in Google Android
In createFromParcel of GeofenceHardwareRequestParcelable.java, there is a possible arbitrary code execution due to parcel mismatch.
local
low complexity
google
7.8
2022-06-15 CVE-2022-20144 Unspecified vulnerability in Google Android 10.0/11.0
In multiple functions of AvatarPhotoController.java, there is a possible access to content owned by system content providers due to a confused deputy.
local
low complexity
google
7.8
2022-06-15 CVE-2022-20147 Out-of-bounds Write vulnerability in Google Android
In nfa_dm_check_set_config of nfa_dm_main.cc, there is a possible out of bounds write due to a missing bounds check.
local
low complexity
google CWE-787
7.8
2022-06-15 CVE-2022-20149 Unspecified vulnerability in Google Android
Product: AndroidVersions: Android kernelAndroid ID: A-211685939References: N/A
network
low complexity
google
7.5
2022-06-15 CVE-2022-20151 Unspecified vulnerability in Google Android
Product: AndroidVersions: Android kernelAndroid ID: A-210712565References: N/A
network
low complexity
google
7.5
2022-06-15 CVE-2022-20155 Race Condition vulnerability in Google Android
In ipu_core_jqs_msg_transport_kernel_write_sync of ipu-core-jqs-msg-transport.c, there is a possible use-after-free due to a race condition.
local
high complexity
google CWE-362
7.0