Vulnerabilities > Google > Android > Medium

DATE CVE VULNERABILITY TITLE RISK
2022-11-17 CVE-2022-20460 Out-of-bounds Write vulnerability in Google Android
In (TBD) mprot_unmap? of (TBD), there is a possible way to corrupt the memory mapping due to improper input validation.
local
low complexity
google CWE-787
6.7
2022-11-08 CVE-2022-20414 Improper Handling of Exceptional Conditions vulnerability in Google Android
In setImpl of AlarmManagerService.java, there is a possible way to put a device into a boot loop due to an uncaught exception.
local
low complexity
google CWE-755
5.5
2022-11-08 CVE-2022-20426 Improper Check for Unusual or Exceptional Conditions vulnerability in Google Android
In multiple functions of many files, there is a possible obstruction of the user's ability to select a phone account due to resource exhaustion.
local
low complexity
google CWE-754
5.5
2022-11-08 CVE-2022-20447 Use After Free vulnerability in Google Android 13.0
In PAN_WriteBuf of pan_api.cc, there is a possible out of bounds read due to a use after free.
low complexity
google CWE-416
6.5
2022-11-08 CVE-2022-20448 Unspecified vulnerability in Google Android
In buzzBeepBlinkLocked of NotificationManagerService.java, there is a possible way to share data across users due to a permissions bypass.
local
low complexity
google
5.5
2022-11-08 CVE-2022-20453 Path Traversal vulnerability in Google Android
In update of MmsProvider.java, there is a possible constriction of directory permissions due to a path traversal error.
local
low complexity
google CWE-22
5.5
2022-11-08 CVE-2022-20454 Integer Overflow or Wraparound vulnerability in Google Android
In fdt_next_tag of fdt.c, there is a possible out of bounds write due to an integer overflow.
local
low complexity
google CWE-190
6.7
2022-11-08 CVE-2022-20457 Improper Input Validation vulnerability in Google Android 13.0
In getMountModeInternal of StorageManagerService.java, there is a possible prevention of package installation due to improper input validation.
local
low complexity
google CWE-20
5.5
2022-11-08 CVE-2022-20465 Unspecified vulnerability in Google Android
In dismiss and related functions of KeyguardHostViewController.java and related files, there is a possible lockscreen bypass due to a logic error in the code.
low complexity
google
4.6
2022-11-08 CVE-2022-21778 Out-of-bounds Read vulnerability in Google Android 10.0/11.0/12.0
In vpu, there is a possible information disclosure due to an incorrect bounds check.
local
low complexity
google CWE-125
6.7