Vulnerabilities > Google > Android > Low

DATE CVE VULNERABILITY TITLE RISK
2023-10-27 CVE-2023-40136 Unspecified vulnerability in Google Android
In setHeader of DialogFillUi.java, there is a possible way to view another user's images due to a confused deputy.
local
low complexity
google
3.3
2023-10-27 CVE-2023-40135 Unspecified vulnerability in Google Android
In applyCustomDescription of SaveUi.java, there is a possible way to view another user's images due to a confused deputy.
local
low complexity
google
3.3
2023-10-27 CVE-2023-40134 Unspecified vulnerability in Google Android 12.0/12.1/13.0
In isFullScreen of FillUi.java, there is a possible way to view another user's images due to a confused deputy.
local
low complexity
google
3.3
2023-10-27 CVE-2023-40127 Unspecified vulnerability in Google Android
In multiple locations, there is a possible way to access screenshots due to a confused deputy.
local
low complexity
google
3.3
2023-09-27 CVE-2023-44129 Unspecified vulnerability in Google Android
The vulnerability is that the Messaging ("com.android.mms") app patched by LG forwards attacker-controlled intents back to the attacker in the exported "com.android.mms.ui.QClipIntentReceiverActivity" activity.
local
low complexity
google
3.3
2023-09-27 CVE-2023-44128 Time-of-check Time-of-use (TOCTOU) Race Condition vulnerability in Google Android
he vulnerability is to delete arbitrary files in LGInstallService ("com.lge.lginstallservies") app.
local
high complexity
google CWE-367
3.6
2023-09-27 CVE-2023-44124 Exposure of Resource to Wrong Sphere vulnerability in Google Android 12.0/13.0
The vulnerability is to theft of arbitrary files with system privilege in the Screen recording ("com.lge.gametools.gamerecorder") app in the "com/lge/gametools/gamerecorder/settings/ProfilePreferenceFragment.java" file.
local
low complexity
google CWE-668
3.3
2023-08-14 CVE-2023-21278 Unspecified vulnerability in Google Android 12.0/12.1/13.0
In multiple locations, there is a possible way to obscure the microphone privacy indicator due to a logic error in the code.
local
low complexity
google
3.3
2023-08-14 CVE-2023-21232 Unspecified vulnerability in Google Android 11.0/13.0
In multiple locations, there is a possible way to retrieve sensor data without permissions due to a permissions bypass.
local
low complexity
google
3.3
2023-07-13 CVE-2023-21262 Race Condition vulnerability in Google Android 12.0/12.1/13.0
In startInput of AudioPolicyInterfaceImpl.cpp, there is a possible way of erroneously displaying the microphone privacy indicator due to a race condition.
network
high complexity
google CWE-362
3.1