Vulnerabilities > Google > Android > Medium

DATE CVE VULNERABILITY TITLE RISK
2022-04-11 CVE-2022-20071 Improper Certificate Validation vulnerability in Google Android 11.0/12.0
In ccu, there is a possible escalation of privilege due to a missing certificate validation.
local
low complexity
google CWE-295
6.7
2022-04-11 CVE-2022-20072 Incorrect Comparison vulnerability in Google Android 11.0/12.0
In search engine service, there is a possible way to change the default search engine due to an incorrect comparison.
local
low complexity
google CWE-697
6.7
2022-04-11 CVE-2022-20073 Integer Underflow (Wrap or Wraparound) vulnerability in Google Android 10.0/11.0/12.0
In preloader (usb), there is a possible out of bounds write due to a integer underflow.
low complexity
google CWE-191
6.6
2022-04-11 CVE-2022-20074 Out-of-bounds Write vulnerability in Google Android 10.0/11.0/12.0
In preloader (partition), there is a possible out of bounds write due to a missing bounds check.
low complexity
google CWE-787
6.6
2022-04-11 CVE-2022-20075 Integer Overflow or Wraparound vulnerability in Google Android 10.0/11.0/12.0
In ged, there is a possible out of bounds write due to an integer overflow.
local
low complexity
google CWE-190
6.7
2022-04-11 CVE-2022-20076 Improper Handling of Exceptional Conditions vulnerability in Google Android 10.0/11.0/12.0
In ged, there is a possible memory corruption due to an incorrect error handling.
local
low complexity
google CWE-755
4.4
2022-04-11 CVE-2022-20077 Race Condition vulnerability in Google Android 10.0/11.0
In vow, there is a possible memory corruption due to a race condition.
local
high complexity
google CWE-362
6.4
2022-04-11 CVE-2022-20078 Race Condition vulnerability in Google Android 11.0/12.0
In vow, there is a possible memory corruption due to a race condition.
local
high complexity
google CWE-362
6.4
2022-04-11 CVE-2022-20079 Use of Uninitialized Resource vulnerability in Google Android 10.0/11.0
In vow, there is a possible read of uninitialized data due to a improper input validation.
local
low complexity
google CWE-908
4.4
2022-04-11 CVE-2022-20080 Race Condition vulnerability in Google Android
In SUB2AF, there is a possible memory corruption due to a race condition.
local
high complexity
google CWE-362
6.4