Vulnerabilities > Google > Android > Medium

DATE CVE VULNERABILITY TITLE RISK
2020-12-15 CVE-2020-0473 Incorrect Authorization vulnerability in Google Android 11.0
In updateIncomingFileConfirmNotification of BluetoothOppNotification.java, there is a possible permissions bypass.
low complexity
google CWE-863
4.6
2020-12-15 CVE-2020-0280 Out-of-bounds Read vulnerability in Google Android 11.0
In nci_proc_ee_management_rsp of nci_hrcv.cc, there is a possible out of bounds read due to a missing bounds check.
local
low complexity
google CWE-125
5.5
2020-12-15 CVE-2020-0244 Out-of-bounds Read vulnerability in Google Android 11.0
In writeBurstBufferBytes of SPDIFEncoder.cpp, there is a possible out of bounds read due to an incorrect bounds check.
local
low complexity
google CWE-125
5.5
2020-12-14 CVE-2020-0019 Insecure Default Initialization of Resource vulnerability in Google Android
In the Broadcom Nexus firmware, there is an insecure default password.
local
low complexity
google CWE-1188
5.5
2020-12-14 CVE-2020-0470 Out-of-bounds Write vulnerability in Google Android 10.0/11.0
In extend_frame_highbd of restoration.c, there is a possible out of bounds write due to a heap buffer overflow.
local
low complexity
google CWE-787
5.5
2020-12-14 CVE-2020-0469 Unspecified vulnerability in Google Android 11.0
In addEscrowToken of LockSettingsService.java, there is a possible loss of the synthetic password due to logic error.
local
low complexity
google
5.5
2020-12-14 CVE-2020-0468 Missing Authorization vulnerability in Google Android 10.0/11.0
In listen() and related functions of TelephonyRegistry.java, there is a possible permissions bypass of location permissions due to a missing permission check.
local
low complexity
google CWE-862
5.5
2020-12-14 CVE-2020-0467 Improper Resource Shutdown or Release vulnerability in Google Android
In onUserStopped of Vpn.java, there is a possible resetting of user preferences due to a logic issue.
local
low complexity
google CWE-404
5.5
2020-12-14 CVE-2020-0465 Out-of-bounds Write vulnerability in Google Android
In various methods of hid-multitouch.c, there is a possible out of bounds write due to a missing bounds check.
low complexity
google CWE-787
6.8
2020-12-14 CVE-2020-0464 Information Exposure Through Discrepancy vulnerability in Google Android 10.0
In resolv_cache_lookup of res_cache.cpp, there is a possible side channel information disclosure.
local
low complexity
google CWE-203
5.5