Vulnerabilities > Google > Android > High
| DATE | CVE | VULNERABILITY TITLE | RISK |
|---|---|---|---|
| 2021-12-15 | CVE-2021-1020 | Improper Input Validation vulnerability in Google Android 12.0 In snoozeNotification of NotificationListenerService.java, there is a possible way to disable notification for an arbitrary user due to improper input validation. | 7.3 |
| 2021-12-15 | CVE-2021-1021 | Improper Input Validation vulnerability in Google Android 12.0 In snoozeNotificationInt of NotificationManagerService.java, there is a possible way to disable notification for an arbitrary user due to improper input validation. | 7.3 |
| 2021-12-15 | CVE-2021-1022 | NULL Pointer Dereference vulnerability in Google Android 12.0 In btif_in_hf_client_generic_evt of btif_hf_client.cc, there is a possible Bluetooth service crash due to a missing null check. | 7.5 |
| 2021-12-15 | CVE-2021-1027 | Incorrect Type Conversion or Cast vulnerability in Google Android 12.0 In setTransactionState of SurfaceFlinger, there is possible arbitrary code execution in a privileged process due to improper casting. | 7.8 |
| 2021-12-15 | CVE-2021-1028 | Use After Free vulnerability in Google Android 12.0 In setClientStateLocked of SurfaceFlinger.cpp, there is a possible out of bounds write due to a use after free. | 7.8 |
| 2021-12-15 | CVE-2021-1029 | Use After Free vulnerability in Google Android 12.0 In setClientStateLocked of SurfaceFlinger.cpp, there is a possible out of bounds write due to a use after free. | 7.8 |
| 2021-12-15 | CVE-2021-1039 | Improper Restriction of Rendered UI Layers or Frames vulnerability in Google Android In NotificationAccessActivity of AndroidManifest.xml, there is a possible EoP due to a tapjacking/overlay attack. | 7.8 |
| 2021-12-15 | CVE-2021-1040 | Improper Restriction of Rendered UI Layers or Frames vulnerability in Google Android In onCreate of BluetoothPairingSelectionFragment.java, there is a possible EoP due to a tapjacking/overlay attack. | 7.8 |
| 2021-12-15 | CVE-2021-1044 | Out-of-bounds Write vulnerability in Google Android In eicOpsDecryptAes128Gcm of acropora/app/identity/identity_support.c, there is a possible out of bounds write due to a missing bounds check. | 7.8 |
| 2021-12-15 | CVE-2021-1045 | Unspecified vulnerability in Google Android Product: AndroidVersions: Android kernelAndroid ID: A-195580473References: N/A | 7.5 |