Vulnerabilities > Google > Android > Medium

DATE CVE VULNERABILITY TITLE RISK
2022-09-06 CVE-2022-26467 Out-of-bounds Write vulnerability in Google Android 11.0/12.0
In rpmb, there is a possible out of bounds write due to an incorrect bounds check.
local
low complexity
google CWE-787
6.7
2022-09-06 CVE-2022-26468 Out-of-bounds Write vulnerability in Google Android 11.0/12.0
In preloader (usb), there is a possible out of bounds write due to a missing bounds check.
low complexity
google CWE-787
6.6
2022-09-06 CVE-2022-26470 Out-of-bounds Write vulnerability in Google Android 12.0
In aie, there is a possible out of bounds write due to an incorrect bounds check.
local
low complexity
google CWE-787
6.7
2022-08-24 CVE-2021-0698 Use of Uninitialized Resource vulnerability in Google Android
In PVRSRVBridgeHeapCfgHeapDetails, there is a possible leak of kernel heap content due to uninitialized data.
local
low complexity
google CWE-908
5.5
2022-08-24 CVE-2021-0887 Use of Uninitialized Resource vulnerability in Google Android
In PVRSRVBridgeHeapCfgHeapConfigName, there is a possible leak of kernel heap content due to uninitialized data.
local
low complexity
google CWE-908
5.5
2022-08-12 CVE-2022-20253 Improper Handling of Exceptional Conditions vulnerability in Google Android 13.0
In Bluetooth, there is a possible cleanup failure due to an uncaught exception.
low complexity
google CWE-755
6.5
2022-08-12 CVE-2022-20255 Missing Authorization vulnerability in Google Android 13.0
In SettingsProvider, there is a possible way to read or change the default ringtone due to a missing permission check.
local
low complexity
google CWE-862
4.4
2022-08-12 CVE-2022-20256 Race Condition vulnerability in Google Android 13.0
In the Audio HAL, there is a possible out of bounds write due to a race condition.
local
high complexity
google CWE-362
6.4
2022-08-12 CVE-2022-20259 Missing Authorization vulnerability in Google Android 13.0
In Telephony, there is a possible leak of ICCID and EID due to a missing permission check.
local
low complexity
google CWE-862
5.5
2022-08-12 CVE-2022-20260 Unspecified vulnerability in Google Android 13.0
In the Phone app, there is a possible crash loop due to resource exhaustion.
local
low complexity
google
5.5