Vulnerabilities > Google > Android > High

DATE CVE VULNERABILITY TITLE RISK
2022-01-10 CVE-2022-22264 Improper Input Validation vulnerability in Google Android 10.0/11.0/12.0
Improper sanitization of incoming intent in Dressroom prior to SMR Jan-2022 Release 1 allows local attackers to read and write arbitrary files without permission.
local
low complexity
google CWE-20
7.1
2022-01-10 CVE-2022-22265 Unspecified vulnerability in Google Android
An improper check or handling of exceptional conditions in NPU driver prior to SMR Jan-2022 Release 1 allows arbitrary memory write and code execution.
local
low complexity
google
7.8
2022-01-04 CVE-2022-20012 Integer Overflow or Wraparound vulnerability in Google Android 10.0/11.0/12.0
In mdp driver, there is a possible memory corruption due to an integer overflow.
local
low complexity
google CWE-190
7.8
2021-12-17 CVE-2021-0673 Missing Authorization vulnerability in Google Android 10.0/11.0/12.0
In Audio Aurisys HAL, there is a possible permission bypass due to a missing permission check.
local
low complexity
google CWE-862
7.8
2021-12-15 CVE-2021-0434 Unspecified vulnerability in Google Android 10.0/11.0/9.0
In onReceive of BluetoothPermissionRequest.java, there is a possible phishing attack allowing a malicious Bluetooth device to acquire permissions based on insufficient information presented to the user in the consent dialog.
local
low complexity
google
7.3
2021-12-15 CVE-2021-0649 Incorrect Authorization vulnerability in Google Android 11.0
In stopVpnProfile of Vpn.java, there is a possible VPN profile reset due to a permissions bypass.
local
low complexity
google CWE-863
7.8
2021-12-15 CVE-2021-0675 Out-of-bounds Write vulnerability in Google Android
In alac decoder, there is a possible out of bounds write due to an incorrect bounds check.
local
low complexity
google CWE-787
7.8
2021-12-15 CVE-2021-0769 Unspecified vulnerability in Google Android 12.0
In onCreate of AllowBindAppWidgetActivity.java, there is a possible bypass of user interaction requirements due to unclear UI.
local
low complexity
google
7.3
2021-12-15 CVE-2021-0799 Unspecified vulnerability in Google Android 12.0
In ActivityThread.java, there is a possible way to collide the content provider's authorities.
local
low complexity
google
7.8
2021-12-15 CVE-2021-0918 Out-of-bounds Write vulnerability in Google Android 12.0
In gatt_process_notification of gatt_cl.cc, there is a possible out of bounds write due to a missing bounds check.
low complexity
google CWE-787
8.8