Vulnerabilities > Google > Android > Medium
| DATE | CVE | VULNERABILITY TITLE | RISK |
|---|---|---|---|
| 2020-11-10 | CVE-2020-0454 | Missing Authorization vulnerability in Google Android 9.0 In callCallbackForRequest of ConnectivityService.java, there is a possible permission bypass due to a missing permission check. | 5.5 |
| 2020-11-10 | CVE-2020-0453 | Unspecified vulnerability in Google Android 8.0/8.1/9.0 In updateNotification of BeamTransferManager.java, there is a possible permission bypass due to an unsafe PendingIntent. | 5.5 |
| 2020-11-10 | CVE-2020-0450 | Improper Initialization vulnerability in Google Android In rw_i93_sm_format of rw_i93.cc, there is a possible out of bounds read due to uninitialized data. | 6.5 |
| 2020-11-10 | CVE-2020-0448 | Missing Authorization vulnerability in Google Android In getPhoneAccountsForPackage of TelecomServiceImpl.java, there is a possible way to access a tracking identifier due to a missing permission check. | 5.5 |
| 2020-11-10 | CVE-2020-0443 | Improper Handling of Exceptional Conditions vulnerability in Google Android In LocaleList of LocaleList.java, there is a possible forced reboot due to an uncaught exception. | 5.5 |
| 2020-11-10 | CVE-2020-0437 | Missing Authorization vulnerability in Google Android In CellBroadcastReceiver's intent handlers, there is a possible denial of service due to a missing permission check. | 5.5 |
| 2020-11-10 | CVE-2020-0424 | Out-of-bounds Read vulnerability in Google Android 10.0/11.0/9.0 In send_vc of res_send.cpp, there is a possible out of bounds read due to an incorrect bounds check. | 5.5 |
| 2020-10-14 | CVE-2020-0419 | Missing Authorization vulnerability in Google Android In generateInfo of PackageInstallerSession.java, there is a possible leak of cross-profile URI data during app installation due to a missing permission check. | 5.5 |
| 2020-10-14 | CVE-2020-0415 | Unspecified vulnerability in Google Android In various locations in SystemUI, there is a possible permission bypass due to an unsafe PendingIntent. | 5.5 |
| 2020-10-14 | CVE-2020-0414 | Improper Initialization vulnerability in Google Android 10.0/11.0 In AudioFlinger::RecordThread::threadLoop of audioflinger/Threads.cpp, there is a possible non-silenced audio buffer due to a permissions bypass. | 6.5 |