Vulnerabilities > Google > Android > Medium

DATE CVE VULNERABILITY TITLE RISK
2022-12-16 CVE-2022-42532 Out-of-bounds Read vulnerability in Google Android
In Pixel firmware, there is a possible out of bounds read due to a missing bounds check.
local
low complexity
google CWE-125
4.4
2022-12-16 CVE-2022-42535 SQL Injection vulnerability in Google Android 13.0
In a query in MmsSmsProvider.java, there is a possible access to restricted tables due to SQL injection.
local
low complexity
google CWE-89
5.5
2022-12-16 CVE-2022-42542 Out-of-bounds Write vulnerability in Google Android 13.0
In phNxpNciHal_core_initialized of phNxpNciHal.cc, there is a possible out of bounds write due to a missing bounds check.
local
low complexity
google CWE-787
6.7
2022-12-16 CVE-2022-42543 Out-of-bounds Read vulnerability in Google Android
In fdt_path_offset_namelen of fdt_ro.c, there is a possible out of bounds read due to an incorrect bounds check.
local
low complexity
google CWE-125
4.4
2022-12-13 CVE-2021-0934 Improper Validation of Specified Quantity in Input vulnerability in Google Android
In findAllDeAccounts of AccountsDb.java, there is a possible denial of service due to resource exhaustion.
local
low complexity
google CWE-1284
5.5
2022-12-13 CVE-2022-20449 Path Traversal vulnerability in Google Android
In writeApplicationRestrictionsLAr of UserManagerService.java, there is a possible overwrite of system files due to a path traversal error.
local
low complexity
google CWE-22
4.4
2022-12-13 CVE-2022-20466 Insecure Default Initialization of Resource vulnerability in Google Android
In applyKeyguardFlags of NotificationShadeWindowControllerImpl.java, there is a possible way to observe the user's password on a secondary display due to an insecure default value.
local
low complexity
google CWE-1188
5.5
2022-12-13 CVE-2022-20468 Out-of-bounds Read vulnerability in Google Android
In BNEP_ConnectResp of bnep_api.cc, there is a possible out of bounds read due to an incorrect bounds check.
low complexity
google CWE-125
6.5
2022-12-13 CVE-2022-20471 Out-of-bounds Read vulnerability in Google Android
In SendIncDecRestoreCmdPart2 of NxpMfcReader.cc, there is a possible out of bounds read due to a missing bounds check.
local
low complexity
google CWE-125
5.5
2022-12-13 CVE-2022-20476 Infinite Loop vulnerability in Google Android
In setEnabledSetting of PackageManager.java, there is a possible way to get the device into an infinite reboot loop due to resource exhaustion.
local
low complexity
google CWE-835
5.5